$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/2c79e181-1935-39df-86f7-a1882ad92d69.roa File: 2c79e181-1935-39df-86f7-a1882ad92d69.roa (raw, json) Hash identifier: onCVKp4SQ2jt/G8/59iLSDU9y8rSIWsmzxholmxkKdw= Subject key identifier: 87:C0:64:92:66:A4:71:44:AC:00:71:A1:1E:EA:12:6D:C0:A7:DC:88 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584F0806F82209F1C49BB5823100 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/2c79e181-1935-39df-86f7-a1882ad92d69.roa Signing time: Tue 01 Sep 2026 14:35:58 +0000 ROA not before: Tue 01 Sep 2026 14:35:58 +0000 ROA not after: Mon 30 Nov 2026 15:35:58 +0000 asID: 13335 IP address blocks: 135.84.120.0/23 maxlen: 24 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:06:f8:22:09:f1:c4:9b:b5:82:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Sep 1 14:35:58 2026 GMT Not After : Nov 30 15:35:58 2026 GMT Subject: CN=0053f92b-81eb-4cbc-a52a-4b06aa896411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:89:31:49:ac:b5:5b:47:cb:9a:9c:8e:92: 7d:b9:82:53:ef:cb:2f:39:54:5d:8a:ca:68:16:3e: 66:e1:16:c4:9d:63:25:c3:ba:09:2c:88:3f:c1:3b: cd:ec:fb:5c:00:32:0d:fc:34:ae:1c:4b:66:a9:af: da:c3:c7:48:0c:91:3a:ad:dc:35:c2:e3:72:cc:73: 46:7d:1d:49:3b:1a:0d:eb:71:28:c2:53:4f:ef:ce: 06:7f:a0:6b:55:87:83:d5:ab:08:3e:7b:75:60:56: 48:6b:21:3c:05:1d:3b:0c:24:95:dc:dd:79:92:37: 7b:9f:e1:ca:65:89:fc:64:18:31:df:ad:7a:b0:5a: a3:0b:f8:43:1a:d3:76:67:85:c8:42:21:1d:68:f2: c4:e0:7a:21:6e:6c:d4:ca:b9:bd:46:f5:d2:74:bc: 12:df:a6:99:22:17:e6:df:76:64:56:0b:d0:74:cf: 71:a0:cd:0a:a9:79:43:2b:c4:7b:b7:16:f5:ad:22: 9c:db:ea:57:91:56:f1:71:66:7f:b9:b9:41:2e:78: 69:58:57:de:9d:7a:eb:93:5c:9b:0c:34:fd:54:5b: 0d:7c:e1:81:8d:83:82:23:2f:5c:18:46:e8:7c:67: bb:ad:0d:ed:22:1c:74:af:c3:d7:0c:4d:f1:0b:56: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:64:92:66:A4:71:44:AC:00:71:A1:1E:EA:12:6D:C0:A7:DC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/2c79e181-1935-39df-86f7-a1882ad92d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:58:59:cf:9a:d1:1f:65:a8:5f:cf:15:57:a0:54:b0:0e:aa: 74:17:84:5b:e2:d1:cd:5a:5a:7f:86:42:c3:c0:af:6b:25:27: b7:49:3f:bd:b9:28:6d:65:00:8e:1f:c5:d7:0f:08:2c:6c:5e: 25:46:e4:ea:b4:f4:17:46:ec:08:dd:51:20:6c:5a:5c:89:c1: 6f:32:97:35:30:6e:8d:6e:a9:ba:2a:24:77:4d:3b:91:02:1c: 64:0b:d7:22:9c:e5:ce:f4:a0:e0:64:79:f9:21:37:49:0e:6a: b1:19:f8:8f:3c:a6:67:ab:15:9c:6a:77:31:7a:5a:82:bf:30: 13:ae:0c:d2:b4:2d:9c:3b:7f:bd:b5:04:31:73:ee:6a:2f:e9: 76:53:fd:ea:45:01:1d:ba:61:68:83:68:e4:04:09:3d:8e:dc: 9f:4b:1e:49:ff:cc:8a:d1:89:0b:8c:98:a5:f9:c2:e6:3a:1d: 5f:44:71:82:31:7c:09:89:00:52:25:48:e2:39:de:0c:00:21: b5:d9:11:c7:45:ed:96:35:1b:fe:b9:26:dd:e4:ea:d9:85:f0: 95:ee:db:f7:61:26:ed:df:ea:03:8a:75:87:87:ca:63:4c:5c: b6:f4:29:59:74:0a:96:f1:66:b1:73:05:0b:08:b4:78:05:73: c8:cf:0a:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8IBvgiCfHEm7WCMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDkwMTE0MzU1OFoXDTI2MTEzMDE1MzU1OFowLzEtMCsGA1UEAxMk MDA1M2Y5MmItODFlYi00Y2JjLWE1MmEtNGIwNmFhODk2NDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQCJMUmstVtHy5qcjpJ9uYJT78svOVRdispo Fj5m4RbEnWMlw7oJLIg/wTvN7PtcADIN/DSuHEtmqa/aw8dIDJE6rdw1wuNyzHNG fR1JOxoN63EowlNP784Gf6BrVYeD1asIPnt1YFZIayE8BR07DCSV3N15kjd7n+HK ZYn8ZBgx3616sFqjC/hDGtN2Z4XIQiEdaPLE4HohbmzUyrm9RvXSdLwS36aZIhfm 33ZkVgvQdM9xoM0KqXlDK8R7txb1rSKc2+pXkVbxcWZ/ublBLnhpWFfenXrrk1yb DDT9VFsNfOGBjYOCIy9cGEbofGe7rQ3tIhx0r8PXDE3xC1bcOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIfAZJJmpHFErABxoR7qEm3Ap9yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvMmM3OWUxODEtMTkzNS0z OWRmLTg2ZjctYTE4ODJhZDkyZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBh1R4AwQB 2KiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKFYWc+a0R9lqF/PFVegVLAOqnQXhFvi0c1aWn+GQsPAr2sl J7dJP725KG1lAI4fxdcPCCxsXiVG5Oq09BdG7AjdUSBsWlyJwW8ylzUwbo1uqboq JHdNO5ECHGQL1yKc5c70oOBkefkhN0kOarEZ+I88pmerFZxqdzF6WoK/MBOuDNK0 LZw7f721BDFz7mov6XZT/epFAR26YWiDaOQECT2O3J9LHkn/zIrRiQuMmKX5wuY6 HV9EcYIxfAmJAFIlSOI53gwAIbXZEcdF7ZY1G/65Jt3k6tmF8JXu2/dhJu3f6gOK dYeHymNMXLb0KVl0CpbxZrFzBQsItHgFc8jPCnA= -----END CERTIFICATE-----Generated at Wed Sep 9 02:51:53 2026 by rpki-client