$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/cda2924d-a399-37d4-af63-1ae5a1146110.roa File: cda2924d-a399-37d4-af63-1ae5a1146110.roa (raw, json) Hash identifier: PAiMQqxqXIHibdgo7fj3Mgijbu54oDwBvsvjIy5GWAY= Subject key identifier: 73:17:85:AF:99:96:F8:7B:B0:7A:00:F8:41:08:21:C4:91:D5:66:07 Certificate issuer: /CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507 Certificate serial: 010D0C9F4328584F43DD3DFFD65CE7B234EE43A0 Authority key identifier: 31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/cda2924d-a399-37d4-af63-1ae5a1146110.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 13447 IP address blocks: 136.227.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:3d:ff:d6:5c:e7:b2:34:ee:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=8df14536-7e1f-4d10-aa68-3616299c3d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:20:0b:36:98:67:70:6f:8a:ee:15:56:0c: 5b:61:6c:06:c8:98:f9:ed:d0:b4:36:44:19:4c:a2: 2c:5e:53:b1:70:50:68:40:59:0c:42:ff:3f:b4:c1: 19:48:be:bf:3b:58:16:ee:fd:13:f4:72:c0:7e:51: 30:7b:91:d8:c9:f7:cb:aa:32:88:3d:2e:e4:9e:a1: de:50:02:c6:33:ac:da:b1:3b:04:50:da:76:29:f8: 33:25:c6:23:f7:95:01:fc:27:9d:dd:a5:aa:c3:5c: c5:d0:16:c3:d7:59:1c:b1:67:ae:24:24:8e:06:ca: 95:cc:39:a6:d9:32:40:1c:56:89:b6:77:b1:f9:74: 67:f5:06:a7:6b:39:e7:8a:59:1a:df:0c:da:56:87: d3:70:6b:2c:41:a0:f3:60:be:80:e2:31:38:52:df: c5:d7:17:8f:52:5b:8a:a4:28:d3:b9:4b:d2:72:8e: 9d:57:dd:ec:48:18:38:60:3a:13:cc:42:79:b9:f3: 42:03:d0:16:96:97:20:74:66:50:b1:ef:50:dd:c7: b2:2d:1a:19:bd:d2:b5:32:4b:b0:b0:1a:a1:88:83: 94:62:8f:2f:11:92:98:a5:83:92:1b:5b:52:f1:26: c2:81:fd:5a:47:0f:17:19:ac:e8:4d:ce:f0:a1:96: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:17:85:AF:99:96:F8:7B:B0:7A:00:F8:41:08:21:C4:91:D5:66:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/cda2924d-a399-37d4-af63-1ae5a1146110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl X509v3 Authority Key Identifier: keyid:31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer sbgp-ipAddrBlock: critical IPv4: 136.227.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:db:f5:9c:1a:fe:98:a6:cd:9b:82:b0:f1:86:86:9b:2b:bf: 0a:56:c0:e0:9a:f0:78:fc:b7:7f:18:68:f6:4e:3e:b1:16:e2: e2:4b:97:f0:7c:d8:24:b5:b2:5f:6d:0a:35:71:34:90:67:d4: 68:59:ca:d0:77:8c:9a:8f:92:bc:c6:11:88:3e:3a:65:da:29: dd:79:91:06:c7:e9:58:ee:63:cf:b8:d5:4a:94:f0:18:80:7d: 58:4a:7e:b6:f9:67:77:4e:4f:63:15:83:7f:fe:82:5c:06:b4: 81:65:3f:f2:36:71:e0:bd:aa:e4:e2:75:ec:cf:4b:fd:c2:f0: df:e2:2c:b2:6c:ad:9f:cd:cf:9b:07:16:0c:cb:de:ec:66:2e: 83:5f:91:e0:19:ac:09:79:ca:17:c1:25:86:2a:2f:e6:55:08: 86:6a:5a:10:15:9c:34:d0:9f:f4:d3:d6:7c:9a:fd:bc:0f:62: 2e:3e:20:78:29:06:dd:68:cd:5d:6b:ae:24:1f:8e:fc:b2:8e: 0c:4d:d5:98:60:ea:57:1d:e4:59:6a:f5:ca:07:ec:e7:a1:1f: 3a:5c:f6:96:d2:43:61:4e:d8:5a:fc:03:da:de:8b:29:32:a6: 34:82:ac:77:16:2b:20:e0:12:0f:bb:f2:40:89:76:dc:13:8b: 48:16:82:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3T3/1lznsjTuQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhNDU1NWUtNDQ3Mi00ZjdkLWI5ZjktYzBiMWQyNzE0 NTA3MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk OGRmMTQ1MzYtN2UxZi00ZDEwLWFhNjgtMzYxNjI5OWMzZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ogCzaYZ3Bviu4VVgxbYWwGyJj57dC0NkQZ TKIsXlOxcFBoQFkMQv8/tMEZSL6/O1gW7v0T9HLAflEwe5HYyffLqjKIPS7knqHe UALGM6zasTsEUNp2KfgzJcYj95UB/Ced3aWqw1zF0BbD11kcsWeuJCSOBsqVzDmm 2TJAHFaJtnex+XRn9Qanaznnilka3wzaVofTcGssQaDzYL6A4jE4Ut/F1xePUluK pCjTuUvSco6dV93sSBg4YDoTzEJ5ufNCA9AWlpcgdGZQse9Q3ceyLRoZvdK1Mkuw sBqhiIOUYo8vEZKYpYOSG1tS8SbCgf1aRw8XGazoTc7woZYxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMXha+Zlvh7sHoA+EEIIcSR1WYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83ZGE0 NTU1ZS00NDcyLTRmN2QtYjlmOS1jMGIxZDI3MTQ1MDcvY2RhMjkyNGQtYTM5OS0z N2Q0LWFmNjMtMWFlNWExMTQ2MTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2RhNDU1NWUtNDQ3Mi00ZjdkLWI5 ZjktYzBiMWQyNzE0NTA3LzdkYTQ1NTVlLTQ0NzItNGY3ZC1iOWY5LWMwYjFkMjcx NDUwNy5jcmwwHwYDVR0jBBgwFoAUMQS83x0v8f7j6XBQPHW5uAb7jfEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83ZGE0NTU1ZS00NDcyLTRmN2QtYjlmOS1jMGIx ZDI3MTQ1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHb9Zwa/pimzZuCsPGGhpsrvwpWwOCa8Hj8t38YaPZOPrEW4uJLl/B8 2CS1sl9tCjVxNJBn1GhZytB3jJqPkrzGEYg+OmXaKd15kQbH6VjuY8+41UqU8BiA fVhKfrb5Z3dOT2MVg3/+glwGtIFlP/I2ceC9quTidezPS/3C8N/iLLJsrZ/Nz5sH FgzL3uxmLoNfkeAZrAl5yhfBJYYqL+ZVCIZqWhAVnDTQn/TT1nya/bwPYi4+IHgp Bt1ozV1rriQfjvyyjgxN1Zhg6lcd5Flq9coH7OehHzpc9pbSQ2FO2Fr8A9reiyky pjSCrHcWKyDgEg+78kCJdtwTi0gWgpk= -----END CERTIFICATE-----Generated at Wed Sep 30 20:32:12 2026 by rpki-client