$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: qlzCuwYMRAwJvnvHUFyvYNBdihWA8xsFtfEUJGlacIQ= Subject key identifier: 0A:0E:AE:B3:7E:05:A3:06:91:F8:ED:D8:11:6C:52:1D:01:05:FF:A4 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584F0812006DCB7533D0EDA90300 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Tue 01 Sep 2026 14:58:11 +0000 ROA not before: Tue 01 Sep 2026 14:58:11 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:12:00:6d:cb:75:33:d0:ed:a9:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Sep 1 14:58:11 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0084531f-d16f-4a82-b4cc-3a1edee353da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:33:97:da:4e:7c:3e:e1:28:b4:91:bf:0f: bb:e0:80:5a:ce:f9:bc:05:3f:d1:65:bf:3a:10:2e: b1:e4:84:cb:c5:02:ce:9f:86:13:d4:b7:24:ec:b6: 98:fb:3a:51:50:96:26:40:4c:6b:9d:30:b5:50:bb: dc:82:d7:46:68:c6:0e:7d:64:fc:89:52:c2:55:5d: 87:9e:ff:02:e1:25:14:94:22:d7:45:06:7e:db:81: be:89:ef:c8:fd:b1:ef:43:01:75:43:4e:f0:7c:f5: 2f:81:24:a1:54:80:22:cb:ee:4d:85:fd:d5:2e:f7: a5:eb:6c:35:b9:9e:f7:22:03:b5:ab:fc:1d:fe:79: 9c:38:04:ef:e7:a1:7d:7c:57:b2:8a:04:66:42:ea: ee:7a:c1:2a:22:14:90:36:ce:e9:b2:16:84:1a:e7: fd:ac:0e:f6:3e:09:af:87:85:90:32:34:d5:89:48: 2c:28:18:0f:f9:de:d0:a5:fb:20:bb:66:39:e6:21: 26:13:d9:28:56:b6:38:29:eb:50:f0:02:aa:37:2c: a3:a0:37:03:bd:c2:33:5a:77:fc:3a:8e:14:b7:b2: ec:d7:f6:f5:12:4f:6a:66:44:c5:b5:d7:89:2f:35: 3e:5b:77:08:2b:2a:8b:ff:fb:5e:21:65:59:27:ac: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:AE:B3:7E:05:A3:06:91:F8:ED:D8:11:6C:52:1D:01:05:FF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:95:a3:22:a5:f9:40:a9:fa:2d:f0:73:4f:f9:e7:96:7c:a6: 0a:21:3b:fd:af:46:22:29:44:33:52:e4:02:63:47:12:3c:01: 35:e9:c3:09:e4:81:72:cc:f7:5b:b2:cd:7e:1a:e5:c4:f8:cb: 41:2b:41:a9:e0:f8:60:93:0c:61:68:ba:39:7e:11:1a:b6:8c: 26:f6:37:e5:13:5c:f2:f0:18:ba:6c:a5:07:d7:8c:c8:44:8f: ef:a1:f3:83:f3:02:50:20:53:a0:26:46:49:f2:d4:d2:81:c0: 0a:13:0d:47:57:19:c6:c9:94:95:1c:c9:e4:24:9d:59:d4:5a: 14:ba:4b:f9:d9:78:09:4d:76:f4:e9:5d:f5:4e:0d:68:ff:87: fc:58:c7:b9:60:84:e6:ea:32:3e:9f:80:0a:f2:5f:7a:1d:5f: 04:64:67:c8:a9:bc:6c:3b:36:6f:a2:2d:bb:f9:b9:89:9f:24: 44:5c:ce:fd:99:7e:9d:87:ff:f9:ea:33:0a:35:08:aa:69:49: 3f:38:22:b1:6d:b7:15:85:1a:76:be:7d:4a:8e:d7:24:ed:4c: c1:ab:8d:45:72:7b:72:b5:1d:1a:de:11:33:c8:89:de:c8:66: 67:b6:f8:83:b6:1a:15:ec:b8:8a:ea:90:e2:99:2e:45:f5:e7: dd:65:03:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8IEgBty3Uz0O2pAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDkwMTE0NTgxMVoXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDA4NDUzMWYtZDE2Zi00YTgyLWI0Y2MtM2ExZWRlZTM1M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnkzl9pOfD7hKLSRvw+74IBazvm8BT/RZb86 EC6x5ITLxQLOn4YT1Lck7LaY+zpRUJYmQExrnTC1ULvcgtdGaMYOfWT8iVLCVV2H nv8C4SUUlCLXRQZ+24G+ie/I/bHvQwF1Q07wfPUvgSShVIAiy+5Nhf3VLvel62w1 uZ73IgO1q/wd/nmcOATv56F9fFeyigRmQuruesEqIhSQNs7pshaEGuf9rA72Pgmv h4WQMjTViUgsKBgP+d7Qpfsgu2Y55iEmE9koVrY4KetQ8AKqNyyjoDcDvcIzWnf8 Oo4Ut7Ls1/b1Ek9qZkTFtdeJLzU+W3cIKyqL//teIWVZJ6zQ+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAoOrrN+BaMGkfjt2BFsUh0BBf+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBh1R4AwQB 2KiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKGVoyKl+UCp+i3wc0/555Z8pgohO/2vRiIpRDNS5AJjRxI8 ATXpwwnkgXLM91uyzX4a5cT4y0ErQang+GCTDGFoujl+ERq2jCb2N+UTXPLwGLps pQfXjMhEj++h84PzAlAgU6AmRkny1NKBwAoTDUdXGcbJlJUcyeQknVnUWhS6S/nZ eAlNdvTpXfVODWj/h/xYx7lghObqMj6fgAryX3odXwRkZ8ipvGw7Nm+iLbv5uYmf JERczv2Zfp2H//nqMwo1CKppST84IrFttxWFGna+fUqO1yTtTMGrjUVye3K1HRre ETPIid7IZme2+IO2GhXsuIrqkOKZLkX1591lAyw= -----END CERTIFICATE-----Generated at Wed Sep 9 01:34:56 2026 by rpki-client