$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa File: 05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa (raw, json) Hash identifier: c58kDaj29wfmZYW9c0a0h5T67nHv5zHbHKSiHQE5e/4= Subject key identifier: 92:25:D3:38:CC:2E:6F:C1:77:7C:A0:3E:B6:AB:E3:3F:C7:7A:6B:ED Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584F20F7A752742F5A68F245C3A0 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 55039 IP address blocks: 136.242.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a7:52:74:2f:5a:68:f2:45:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=76a946c7-d574-42df-8a74-704d6522c1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:6b:c8:93:55:ed:f9:c2:32:48:ad:c3:d0: 3a:3b:d3:99:74:29:e8:c0:2a:51:37:7e:52:e0:b7: 3b:c3:8f:6e:37:07:25:68:60:da:4b:50:ea:75:ca: 97:cc:3d:7c:17:9a:88:b7:84:94:11:38:56:b5:8e: d8:d7:4b:e0:f8:c1:56:f9:86:15:d8:f5:44:ad:fd: 45:02:ff:8a:17:1d:84:6f:aa:fc:9a:be:5c:26:e4: 49:9e:26:d8:87:ec:ae:d3:bc:f1:76:2c:3a:33:bd: 74:e7:4b:99:e1:0b:b7:c8:36:1f:ed:ad:81:5f:a0: ef:3e:0d:7f:e1:75:56:b2:08:00:94:60:92:e4:6a: 3c:6a:4c:0f:d7:34:f0:af:50:4e:0b:81:f7:48:26: cc:5f:09:85:b7:d5:b6:59:c9:c4:b5:2c:c1:25:07: 94:d9:c2:c2:07:e9:86:4e:df:d8:5e:af:96:e0:68: e9:53:b3:45:2e:e9:e6:a2:05:64:0d:03:a1:e7:3b: f0:8c:59:d6:74:d7:93:de:01:2e:8f:7c:d0:de:9c: c3:4d:da:67:d0:a7:12:ea:23:d4:bd:15:ad:7c:c2: 2b:1d:79:07:09:6c:a5:45:80:70:84:39:b9:65:58: bb:29:ab:64:54:fd:30:4c:1b:23:e0:07:a4:09:98: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:25:D3:38:CC:2E:6F:C1:77:7C:A0:3E:B6:AB:E3:3F:C7:7A:6B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 136.242.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:24:f6:e9:88:a7:eb:08:c9:44:b0:c7:5e:b3:c5:33:de:77: 03:c9:97:34:32:10:62:47:3c:11:4d:c5:da:83:ae:8d:23:dd: 05:3c:4f:91:6b:7a:54:c8:a8:c4:aa:57:2f:a3:b9:c8:39:74: 0e:3c:94:46:8b:37:87:4b:a6:e8:b4:c7:a4:39:fb:af:36:6a: 45:81:56:98:57:48:08:06:06:81:79:02:f6:8e:5a:a1:75:ad: 6e:cc:f2:80:9e:b7:dc:94:01:66:98:ee:a7:58:21:17:8e:a1: c4:01:1e:51:b9:49:cb:c6:60:b7:6b:3e:61:0e:5b:f3:67:8c: ec:01:e4:4c:f1:d3:7f:4c:50:03:5e:06:0b:f6:6c:33:92:4a: 3e:db:e8:0a:4d:03:7a:fd:3f:2c:b9:70:a2:30:56:99:c0:05: f8:1b:57:28:a8:26:21:8f:a6:c4:47:2d:aa:20:f6:ef:39:15: e2:7f:3f:e5:3f:74:85:cc:c1:53:21:73:3b:c5:dc:fd:c7:ce: a9:95:77:a7:4d:52:5f:8d:c3:d9:ee:31:a0:4f:d1:70:d7:0b: a2:95:1e:41:52:69:2b:2c:99:80:cf:85:e8:a1:52:7d:77:0e: 01:f2:4b:e5:5d:39:1c:81:b5:da:f5:df:00:92:6c:0b:05:0a: cf:3b:b5:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96dSdC9aaPJFw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NzZhOTQ2YzctZDU3NC00MmRmLThhNzQtNzA0ZDY1MjJjMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ5ryJNV7fnCMkitw9A6O9OZdCnowCpRN35S 4Lc7w49uNwclaGDaS1DqdcqXzD18F5qIt4SUEThWtY7Y10vg+MFW+YYV2PVErf1F Av+KFx2Eb6r8mr5cJuRJnibYh+yu07zxdiw6M71050uZ4Qu3yDYf7a2BX6DvPg1/ 4XVWsggAlGCS5Go8akwP1zTwr1BOC4H3SCbMXwmFt9W2WcnEtSzBJQeU2cLCB+mG Tt/YXq+W4GjpU7NFLunmogVkDQOh5zvwjFnWdNeT3gEuj3zQ3pzDTdpn0KcS6iPU vRWtfMIrHXkHCWylRYBwhDm5ZVi7KatkVP0wTBsj4AekCZg8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIl0zjMLm/Bd3ygPrar4z/HemvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMDVhYTJkNTEtNGU5ZS0z MjI4LThmMWItY2YwZTI5NDMwNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYk9umIp+sIyUSwx16zxTPedwPJlzQyEGJHPBFNxdqDro0j3QU8T5Fr elTIqMSqVy+jucg5dA48lEaLN4dLpui0x6Q5+682akWBVphXSAgGBoF5AvaOWqF1 rW7M8oCet9yUAWaY7qdYIReOocQBHlG5ScvGYLdrPmEOW/NnjOwB5Ezx039MUANe Bgv2bDOSSj7b6ApNA3r9Pyy5cKIwVpnABfgbVyioJiGPpsRHLaog9u85FeJ/P+U/ dIXMwVMhczvF3P3HzqmVd6dNUl+Nw9nuMaBP0XDXC6KVHkFSaSssmYDPheihUn13 DgHyS+VdORyBtdr13wCSbAsFCs87tfU= -----END CERTIFICATE-----Generated at Tue Sep 29 13:32:45 2026 by rpki-client