$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa File: 8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa (raw, json) Hash identifier: JzkwcaWtK06X5HTZQOCzmIuFOZsOrix+VKh/BTMPdTQ= Subject key identifier: 16:ED:88:E1:CC:C1:97:E8:96:13:52:DF:12:17:D4:EE:78:22:60:3A Certificate issuer: /CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Certificate serial: 010D0C9F4328584EBC76FBAF66F84B9EF249D000 Authority key identifier: 33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 32695 IP address blocks: 131.149.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:76:fb:af:66:f8:4b:9e:f2:49:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=de96a117-e367-4a00-aed8-55d90f429188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:ac:9d:4c:0e:e8:82:43:d4:3b:bb:92:5b: f1:92:2d:ac:04:0b:ef:f4:77:21:b1:17:19:e3:17: 09:ce:71:c2:3d:40:ad:21:75:72:48:46:c3:aa:b7: 4a:3f:ba:bb:60:b2:75:a7:74:c0:ea:fc:ce:9f:47: cc:a4:b9:b0:aa:bb:14:92:35:94:4a:99:62:3f:9a: fe:ae:3e:ec:04:a3:ad:a2:98:9c:15:67:95:f3:2c: d2:d3:59:67:d5:06:1b:ae:d9:b6:8a:80:fe:5a:0b: e5:5b:79:64:5c:f4:71:87:3d:5a:05:e7:aa:a2:ca: dd:77:ab:0d:7d:b9:a8:aa:31:b7:59:5f:1e:54:4c: 1f:84:81:86:db:35:02:1f:24:50:80:df:0d:b5:00: 1e:eb:20:7e:07:c8:e9:0f:66:f5:db:f7:30:4e:60: 10:1b:36:1c:c6:8c:18:2e:7e:7b:f6:95:16:d7:4c: e0:42:05:38:28:8a:0d:d9:29:85:84:9d:a4:c0:12: 82:4e:ed:af:9b:cb:ff:0d:60:16:d7:15:57:f6:b6: 34:79:d5:d1:c1:d0:ba:16:f9:c0:96:cf:45:72:81: 13:3f:34:77:d0:4e:a8:b5:2b:c7:db:cd:4e:bc:39: 4c:9c:0f:b1:49:e7:18:0a:53:0b:b7:45:94:34:29: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:ED:88:E1:CC:C1:97:E8:96:13:52:DF:12:17:D4:EE:78:22:60:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl X509v3 Authority Key Identifier: keyid:33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer sbgp-ipAddrBlock: critical IPv4: 131.149.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:51:8f:55:af:61:1d:f7:18:b2:20:e8:3a:60:e6:53:2d:c0: d4:a7:14:cb:e5:42:c1:43:5f:1c:b1:64:5c:51:b9:85:20:e8: 30:a4:e9:03:bd:f7:fc:80:d9:32:c2:73:51:0d:73:8b:79:dc: 93:ce:1c:10:a0:a9:8c:7c:1b:e0:69:9b:b1:1b:5f:af:9d:aa: 5d:c6:bc:ec:7d:07:69:fa:74:55:3d:e2:51:ae:49:2b:13:cd: 5c:63:20:a2:64:0b:1b:c6:bc:84:f5:b1:56:5a:de:d6:43:72: 4d:c4:3c:2c:e1:0d:d1:6f:c1:2e:f7:5a:e4:05:16:94:eb:d2: 1e:c5:3a:ff:07:8f:6a:74:3b:86:ee:33:e6:98:65:62:40:09: 57:30:96:15:e8:27:a1:2d:c1:be:9a:be:32:dd:98:bf:0b:d8: e4:72:0f:a3:2a:9b:4e:12:6f:66:ef:3e:df:f1:c5:f6:91:72: 9a:05:26:55:78:eb:b2:fe:d5:c4:3d:3b:5f:0e:f2:e2:f3:89: 26:2e:fd:98:27:fd:27:bb:9a:18:48:fb:d6:60:f3:26:ce:47: 7d:7a:24:6b:93:89:99:e9:34:0a:d4:24:8a:af:5b:42:6a:d6: 1f:40:4f:d7:a7:a8:94:9d:f4:4c:43:f1:67:f5:13:7e:d7:6e: 65:c6:c6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dvuvZvhLnvJJ0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlMjIwMWItNzVhNi00MTk0LTk4OTgtNmZlMmY2MGVh Zjc4MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZGU5NmExMTctZTM2Ny00YTAwLWFlZDgtNTVkOTBmNDI5MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+6snUwO6IJD1Du7klvxki2sBAvv9HchsRcZ 4xcJznHCPUCtIXVySEbDqrdKP7q7YLJ1p3TA6vzOn0fMpLmwqrsUkjWUSpliP5r+ rj7sBKOtopicFWeV8yzS01ln1QYbrtm2ioD+WgvlW3lkXPRxhz1aBeeqosrdd6sN fbmoqjG3WV8eVEwfhIGG2zUCHyRQgN8NtQAe6yB+B8jpD2b12/cwTmAQGzYcxowY Ln579pUW10zgQgU4KIoN2SmFhJ2kwBKCTu2vm8v/DWAW1xVX9rY0edXRwdC6FvnA ls9FcoETPzR30E6otSvH281OvDlMnA+xSecYClMLt0WUNCnJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbtiOHMwZfolhNS3xIX1O54ImA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUy MjAxYi03NWE2LTQxOTQtOTg5OC02ZmUyZjYwZWFmNzgvOGI0ZDQ0YWQtMTQxMi0z OTg3LWE3YzctZGM1OTdjZGRiOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDJlMjIwMWItNzVhNi00MTk0LTk4 OTgtNmZlMmY2MGVhZjc4LzAyZTIyMDFiLTc1YTYtNDE5NC05ODk4LTZmZTJmNjBl YWY3OC5jcmwwHwYDVR0jBBgwFoAUM2mkKSp0niVPJgv0X0QSbGZzIM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUyMjAxYi03NWE2LTQxOTQtOTg5OC02ZmUy ZjYwZWFmNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRRj1WvYR33GLIg6Dpg5lMtwNSnFMvlQsFDXxyxZFxRuYUg6DCk6QO9 9/yA2TLCc1ENc4t53JPOHBCgqYx8G+Bpm7EbX6+dql3GvOx9B2n6dFU94lGuSSsT zVxjIKJkCxvGvIT1sVZa3tZDck3EPCzhDdFvwS73WuQFFpTr0h7FOv8Hj2p0O4bu M+aYZWJACVcwlhXoJ6Etwb6avjLdmL8L2ORyD6Mqm04Sb2bvPt/xxfaRcpoFJlV4 67L+1cQ9O18O8uLziSYu/Zgn/Se7mhhI+9Zg8ybOR316JGuTiZnpNArUJIqvW0Jq 1h9AT9enqJSd9ExD8Wf1E37XbmXGxvQ= -----END CERTIFICATE-----Generated at Fri Aug 21 02:50:40 2026 by rpki-client