$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/b8218469-156f-3e98-94f1-df82bfc8463b.roa File: b8218469-156f-3e98-94f1-df82bfc8463b.roa (raw, json) Hash identifier: ho3HX70BY/nFstlqL5iXcTu4ksHb370dC8iqzfqwiIE= Subject key identifier: 03:C3:08:2A:10:20:17:C6:8C:30:8C:53:55:0D:34:F7:13:4D:65:B4 Certificate issuer: /CN=6851dce3-9572-4e18-8d38-8815a366e21c Certificate serial: 010D0C9F4328584EF5B203CFD38AA625078E9080 Authority key identifier: 4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/b8218469-156f-3e98-94f1-df82bfc8463b.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 399468 IP address blocks: 131.143.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:03:cf:d3:8a:a6:25:07:8e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6851dce3-9572-4e18-8d38-8815a366e21c Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=b18fb0b2-44b2-4afc-8b4f-a859051838a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:12:fa:56:3e:f2:4d:59:b3:9b:fb:83:7e: e4:17:c9:a5:b8:56:c6:df:48:68:82:b1:8f:97:61: f3:3c:d3:c4:9c:f4:a5:28:c5:e6:13:0c:bc:f7:0b: 52:15:be:cc:aa:99:aa:9d:88:40:3e:77:8c:9e:0c: 78:15:7f:25:4b:ba:39:0e:1c:d6:9f:60:fe:78:e3: 42:90:8c:d8:20:8e:db:e0:5d:88:cb:6f:2f:20:65: a3:de:3a:f5:ab:6b:eb:23:eb:db:59:2f:d5:c5:46: bf:93:df:6f:24:b4:f1:ee:bd:de:e6:c9:53:bc:de: 1e:0f:85:f3:1f:0d:dc:83:6b:12:c3:00:44:8a:2d: 1d:a3:77:78:2c:71:bd:63:77:ac:1b:73:60:7e:8e: 15:6e:d1:23:c1:12:9e:e9:b4:1b:a7:11:f4:f9:22: fe:aa:65:3d:10:82:0c:1d:9a:5a:96:31:5c:44:8e: aa:50:ae:ab:f0:bf:72:5d:a9:7b:2a:53:bd:71:d5: 61:37:4a:91:3e:fa:3a:3c:39:51:0e:d4:32:b3:83: 94:c7:c1:28:cd:8a:db:9b:1c:6a:93:8e:7e:f6:f9: fd:46:a6:d3:07:d3:70:b5:61:ce:72:af:63:f6:8e: 86:b6:b1:10:88:b1:42:d0:50:cf:df:ac:93:6b:b3: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:08:2A:10:20:17:C6:8C:30:8C:53:55:0D:34:F7:13:4D:65:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/b8218469-156f-3e98-94f1-df82bfc8463b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c/6851dce3-9572-4e18-8d38-8815a366e21c.crl X509v3 Authority Key Identifier: keyid:4F:65:B1:22:EF:40:E6:20:AE:2C:78:A1:25:2E:7E:3F:46:D6:81:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6851dce3-9572-4e18-8d38-8815a366e21c.cer sbgp-ipAddrBlock: critical IPv4: 131.143.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c6:b5:ca:76:10:d5:95:44:65:b0:e4:24:36:63:f3:07:a0: c9:1c:b4:51:c8:5c:c9:69:a3:70:0f:c0:3e:cb:c8:c4:13:b4: 36:cd:aa:d0:f4:0a:ee:c3:4d:b0:0e:96:b9:19:8d:44:a2:d1: d1:91:f0:45:9c:93:62:51:72:22:45:37:85:d5:40:ef:95:44: 8a:e1:55:68:d0:6d:fd:47:34:e3:11:a9:2e:4a:99:8f:a4:81: 07:54:8e:86:6d:eb:76:6e:3b:09:1e:4c:1f:f6:14:79:52:20: 19:dc:4d:37:9f:70:ad:6b:1e:1e:7d:8b:88:c5:40:fc:a8:d6: 55:be:35:b4:2b:d5:62:f8:ec:41:53:e5:fd:a0:34:32:29:83: 61:3c:8b:b6:23:4c:e6:e1:b4:e2:e7:53:13:98:70:bb:86:94: 12:c0:94:77:24:ba:39:1f:29:9a:0c:29:2a:db:65:1b:88:04: ac:de:50:5e:95:f7:c1:93:96:21:eb:e8:8e:40:46:15:5b:2e: f5:de:b5:47:45:4a:a9:5c:6f:61:98:98:dd:f9:cd:7e:9b:44: f8:1c:5b:86:a4:e2:66:af:32:32:14:1b:85:47:f5:9f:4b:4c: 3e:ba:dc:99:97:64:db:50:e6:f9:23:00:47:0d:52:b4:b7:ae: 4c:db:2a:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgPP04qmJQeOkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MWRjZTMtOTU3Mi00ZTE4LThkMzgtODgxNWEzNjZl MjFjMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE4ZmIwYjItNDRiMi00YWZjLThiNGYtYTg1OTA1MTgzOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGUS+lY+8k1Zs5v7g37kF8mluFbG30hogrGP l2HzPNPEnPSlKMXmEwy89wtSFb7MqpmqnYhAPneMngx4FX8lS7o5DhzWn2D+eONC kIzYII7b4F2Iy28vIGWj3jr1q2vrI+vbWS/VxUa/k99vJLTx7r3e5slTvN4eD4Xz Hw3cg2sSwwBEii0do3d4LHG9Y3esG3Ngfo4VbtEjwRKe6bQbpxH0+SL+qmU9EIIM HZpaljFcRI6qUK6r8L9yXal7KlO9cdVhN0qRPvo6PDlRDtQys4OUx8EozYrbmxxq k45+9vn9RqbTB9NwtWHOcq9j9o6GtrEQiLFC0FDP36yTa7N2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPDCCoQIBfGjDCMU1UNNPcTTWW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ODUx ZGNlMy05NTcyLTRlMTgtOGQzOC04ODE1YTM2NmUyMWMvYjgyMTg0NjktMTU2Zi0z ZTk4LTk0ZjEtZGY4MmJmYzg0NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjg1MWRjZTMtOTU3Mi00ZTE4LThk MzgtODgxNWEzNjZlMjFjLzY4NTFkY2UzLTk1NzItNGUxOC04ZDM4LTg4MTVhMzY2 ZTIxYy5jcmwwHwYDVR0jBBgwFoAUT2WxIu9A5iCuLHihJS5+P0bWge0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ODUxZGNlMy05NTcyLTRlMTgtOGQzOC04ODE1 YTM2NmUyMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7Gtcp2ENWVRGWw5CQ2Y/MHoMkctFHIXMlpo3APwD7LyMQTtDbNqtD0 Cu7DTbAOlrkZjUSi0dGR8EWck2JRciJFN4XVQO+VRIrhVWjQbf1HNOMRqS5KmY+k gQdUjoZt63ZuOwkeTB/2FHlSIBncTTefcK1rHh59i4jFQPyo1lW+NbQr1WL47EFT 5f2gNDIpg2E8i7YjTObhtOLnUxOYcLuGlBLAlHckujkfKZoMKSrbZRuIBKzeUF6V 98GTliHr6I5ARhVbLvXetUdFSqlcb2GYmN35zX6bRPgcW4ak4mavMjIUG4VH9Z9L TD663JmXZNtQ5vkjAEcNUrS3rkzbKuY= -----END CERTIFICATE-----Generated at Sat Sep 5 03:20:08 2026 by rpki-client