$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa File: c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa (raw, json) Hash identifier: 36BnuCx+J6xmIMp0lO6SozHYwaegj3s3Cl3Aqx2mZQA= Subject key identifier: 87:82:0B:5E:A3:6E:93:14:D2:2B:93:0F:3B:1D:27:F8:2D:7F:18:FF Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584EE7BC9D0BCF34F14FC5F884E0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 14297 IP address blocks: 139.131.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:9d:0b:cf:34:f1:4f:c5:f8:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=73fa3d4a-233b-4cab-90d9-0a61de412512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:74:39:3f:60:af:e4:9c:6e:94:66:5e:9e: cd:ca:28:ce:dc:9a:9c:a0:9f:9d:f8:aa:82:29:76: 47:f6:5b:7c:7b:35:2a:bf:07:fe:61:f9:2a:65:cd: a3:84:86:ea:58:16:1e:94:30:d3:6b:f4:e9:30:a8: 7b:f2:20:7b:66:b2:f0:04:dd:5c:4f:84:da:0a:30: 60:4b:09:c1:de:f2:4b:9d:af:eb:87:a0:e5:de:bc: 0c:85:2c:e3:1e:ec:54:9c:8c:a6:82:55:b8:2b:9d: 43:c4:d3:da:df:61:e2:ac:29:ff:32:a7:4f:f9:d0: 07:c5:86:e5:5d:e8:b6:06:c2:38:01:17:63:67:95: a6:23:27:2b:d1:fd:9a:98:dd:2c:01:d6:e6:57:fc: 72:9b:3d:6a:09:b5:ff:0e:bf:5c:10:8d:ed:11:18: 1d:d5:2e:a9:4e:4d:e3:95:a0:02:01:2b:76:dd:dd: 79:d1:8d:9f:f7:1f:14:32:fd:6c:d0:83:fc:c1:49: 83:9d:3b:12:0b:8e:dc:42:10:44:da:71:5b:3e:4c: 04:1f:cc:40:52:f0:8a:7f:4f:6c:89:fc:1d:3a:ba: 0e:57:51:07:59:0d:39:d1:ae:35:25:8e:ac:9c:3f: fa:ec:bb:c8:a9:c0:ed:34:48:6b:18:b5:6d:12:9d: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:82:0B:5E:A3:6E:93:14:D2:2B:93:0F:3B:1D:27:F8:2D:7F:18:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:90:3c:6a:1b:0a:1a:83:06:08:b9:fb:01:14:98:a6:62:db: e4:c7:7d:c9:7e:3d:e9:93:6f:23:62:49:de:d2:e2:da:df:2f: 28:4f:5c:02:0b:f4:d3:ef:eb:9a:c0:49:ba:42:d2:71:c3:26: 6b:40:0e:4d:60:e4:2e:09:82:e3:bd:43:03:79:14:9c:a5:e8: c4:87:af:c7:df:7d:14:d5:ac:e5:40:a3:ea:8e:9a:08:d4:32: cc:d2:56:34:f7:0d:dd:3f:ff:e9:d6:f9:e4:c9:91:38:d4:37: 1c:b2:8c:62:0b:ff:ed:6e:4c:84:ff:66:be:10:78:12:2e:7a: ab:bc:ab:d8:fb:3e:a3:2c:ab:42:ea:6a:d1:12:19:f1:62:40: 42:6c:d2:aa:c2:9d:6b:e1:52:82:b7:27:61:24:1a:2d:c7:f6: e1:e3:b7:29:da:3e:fe:a6:17:d4:99:1c:07:f6:8e:50:08:ee: 7c:3e:9e:18:41:15:c2:2c:a6:17:8e:73:58:fd:93:65:02:59: 52:38:b9:b3:7e:c8:1c:69:c1:40:54:46:f9:98:e8:33:9e:25: 93:8a:a4:08:cd:7e:a1:51:d7:ac:ab:ea:48:e2:b9:10:50:ae: 76:4d:f2:f6:c3:eb:93:71:c6:92:51:5e:ec:61:a4:c9:e3:8f: 09:43:29:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJ0LzzTxT8X4hOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NzNmYTNkNGEtMjMzYi00Y2FiLTkwZDktMGE2MWRlNDEyNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Td0OT9gr+ScbpRmXp7NyijO3JqcoJ+d+KqC KXZH9lt8ezUqvwf+YfkqZc2jhIbqWBYelDDTa/TpMKh78iB7ZrLwBN1cT4TaCjBg SwnB3vJLna/rh6Dl3rwMhSzjHuxUnIymglW4K51DxNPa32HirCn/MqdP+dAHxYbl Xei2BsI4ARdjZ5WmIycr0f2amN0sAdbmV/xymz1qCbX/Dr9cEI3tERgd1S6pTk3j laACASt23d150Y2f9x8UMv1s0IP8wUmDnTsSC47cQhBE2nFbPkwEH8xAUvCKf09s ifwdOroOV1EHWQ050a41JY6snD/67LvIqcDtNEhrGLVtEp2IEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeCC16jbpMU0iuTDzsdJ/gtfxj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzkyM2M2YmItZmM3Mi0z ZmFhLTk5YTEtM2NlZjQyYzRmMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiQPGobChqDBgi5+wEUmKZi2+THfcl+PemTbyNiSd7S4trfLyhPXAIL 9NPv65rASbpC0nHDJmtADk1g5C4JguO9QwN5FJyl6MSHr8fffRTVrOVAo+qOmgjU MszSVjT3Dd0//+nW+eTJkTjUNxyyjGIL/+1uTIT/Zr4QeBIuequ8q9j7PqMsq0Lq atESGfFiQEJs0qrCnWvhUoK3J2EkGi3H9uHjtynaPv6mF9SZHAf2jlAI7nw+nhhB FcIspheOc1j9k2UCWVI4ubN+yBxpwUBURvmY6DOeJZOKpAjNfqFR16yr6kjiuRBQ rnZN8vbD65NxxpJRXuxhpMnjjwlDKUw= -----END CERTIFICATE-----Generated at Sat Aug 22 18:16:45 2026 by rpki-client