$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa File: cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa (raw, json) Hash identifier: qOoOzCUEzNOaXCZeYh3SCZS2ff14OBT15rckkohD9p8= Subject key identifier: A8:3F:E2:EE:78:11:C0:84:25:14:39:B3:74:37:AB:00:99:D3:B3:3C Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584F3FAD315D10DCF35C97D7CBC0 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 202888 IP address blocks: 174.136.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:31:5d:10:dc:f3:5c:97:d7:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=09be8ea1-e9d6-432c-b7cf-f34f6cf1a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:c0:58:f9:84:0f:54:db:00:63:df:57:ca: c7:f3:d0:a2:62:f3:47:6d:4e:6e:e6:6f:a8:67:93: 17:32:a5:6f:7f:4a:66:19:49:17:ec:f0:78:54:25: 20:3b:6f:35:4e:9f:d2:f7:d7:0d:7a:84:6c:63:9c: 41:56:d0:5f:b4:41:13:12:01:d9:22:4a:dd:d5:1e: 05:ac:17:71:f6:36:25:a5:84:ba:07:a4:e3:cd:39: d3:a1:ec:fe:7e:0f:ec:7d:b0:44:f8:b6:3a:87:e4: bf:43:be:8c:94:92:43:f7:a9:2f:81:d2:5e:46:01: 25:0d:dc:b0:1e:dc:b5:7c:88:e8:e6:71:b7:cb:90: 09:6b:56:1c:3d:32:97:fb:82:3b:c1:a1:31:26:38: 59:b2:2b:3d:fd:a1:95:b5:a3:18:f7:5e:a8:ae:5e: 06:1a:fd:38:cf:dd:1d:e6:17:e9:55:e4:61:1b:2f: 57:17:7a:1d:62:51:f6:2f:36:55:8f:52:47:97:26: 10:86:31:3e:a7:e2:37:23:e5:51:4e:07:2f:f0:16: a1:a4:ff:ac:f5:bc:02:24:8c:90:73:b6:08:58:3d: bd:eb:ba:29:39:5a:78:da:bc:43:b9:4f:b5:d7:4e: 43:ca:57:08:4f:97:7c:c7:cf:81:91:6f:78:d6:c4: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3F:E2:EE:78:11:C0:84:25:14:39:B3:74:37:AB:00:99:D3:B3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fd:d4:ff:94:3c:3c:78:ae:27:78:5c:86:c0:2a:b0:7b:4e: 15:06:58:03:34:01:6c:18:65:7a:98:e7:93:1d:8f:67:7c:3e: 15:e6:07:fb:b3:6e:31:52:4c:ba:50:2d:c4:12:3c:3f:b2:86: 09:e8:a9:c4:47:4b:79:37:7d:3d:92:02:e4:c3:28:62:a9:b3: a4:94:e2:e9:4c:d9:8c:16:09:57:61:24:76:aa:a2:92:b3:21: 50:5e:7a:77:05:67:b7:33:43:54:bb:27:f6:b4:5e:b7:7c:49: 71:e5:17:3d:4a:9f:06:ee:f7:91:ef:94:a0:95:5d:cf:79:c1: 5c:8f:50:05:82:fa:0f:65:df:5f:95:a8:45:1f:3f:78:83:30: c7:63:aa:9a:31:8d:e2:bc:56:f0:b8:40:b3:02:63:14:a9:c0: 02:85:71:fd:64:bd:4b:17:9a:96:39:c3:c4:18:43:ea:1d:22: a7:40:7a:42:a4:a4:3c:e4:8d:69:0e:e1:6f:f7:3d:91:0a:67: 80:39:87:57:c7:5a:96:0e:b1:b3:7f:a7:10:a6:d4:78:74:8c: 54:e2:60:3c:64:46:08:98:cd:85:d0:46:5c:6a:e0:9a:1b:9f: 50:4a:e1:65:18:e3:a7:f9:b7:2a:b4:0e:86:b4:5a:9f:9e:1e: 0a:2b:ef:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTFdENzzXJfXy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDliZThlYTEtZTlkNi00MzJjLWI3Y2YtZjM0ZjZjZjFhOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsLAWPmED1TbAGPfV8rH89CiYvNHbU5u5m+o Z5MXMqVvf0pmGUkX7PB4VCUgO281Tp/S99cNeoRsY5xBVtBftEETEgHZIkrd1R4F rBdx9jYlpYS6B6TjzTnToez+fg/sfbBE+LY6h+S/Q76MlJJD96kvgdJeRgElDdyw Hty1fIjo5nG3y5AJa1YcPTKX+4I7waExJjhZsis9/aGVtaMY916orl4GGv04z90d 5hfpVeRhGy9XF3odYlH2LzZVj1JHlyYQhjE+p+I3I+VRTgcv8BahpP+s9bwCJIyQ c7YIWD2967opOVp42rxDuU+1105DylcIT5d8x8+BkW941sShnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg/4u54EcCEJRQ5s3Q3qwCZ07M8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2IzMmNlNjktYmU0OC0z NGU1LTlmOTAtNmE1YWZiOGZhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP91P+UPDx4rid4XIbAKrB7ThUGWAM0AWwYZXqY55Mdj2d8PhXmB/uz bjFSTLpQLcQSPD+yhgnoqcRHS3k3fT2SAuTDKGKps6SU4ulM2YwWCVdhJHaqopKz IVBeencFZ7czQ1S7J/a0Xrd8SXHlFz1Knwbu95HvlKCVXc95wVyPUAWC+g9l31+V qEUfP3iDMMdjqpoxjeK8VvC4QLMCYxSpwAKFcf1kvUsXmpY5w8QYQ+odIqdAekKk pDzkjWkO4W/3PZEKZ4A5h1fHWpYOsbN/pxCm1Hh0jFTiYDxkRgiYzYXQRlxq4Job n1BK4WUY46f5tyq0Doa0Wp+eHgor70o= -----END CERTIFICATE-----Generated at Sun Sep 27 06:47:22 2026 by rpki-client