$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa File: 31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa (raw, json) Hash identifier: 7cN4ESm6roEWYyugGGzvTgyTkS6OK9JrTbZqdYvbASo= Subject key identifier: 65:C6:5A:C0:26:51:1D:C0:02:28:B0:C2:5F:C7:7C:D7:BC:12:5B:3A Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Certificate serial: 010D0C9F4328584F49899FF5F93EB65091FE0F80 Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20477 IP address blocks: 137.118.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:9f:f5:f9:3e:b6:50:91:fe:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8cf49f2-97bf-4d4d-8ea5-32a297db6f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:bb:b9:3c:9b:9a:a7:f5:73:fa:f3:c4:6d: 31:2a:b5:f9:e8:31:c3:96:b3:fd:de:e4:d3:bd:08: d8:1e:6a:c5:f8:36:09:1b:52:44:be:03:01:5e:14: 20:86:0f:64:93:81:a3:35:c2:11:0e:28:17:1e:89: d6:7b:96:3c:c4:91:e1:a2:c4:ad:b4:37:c8:7a:3a: 19:20:80:2c:ca:1e:b0:4f:6d:c2:95:80:d0:73:9d: 64:94:94:8a:31:5f:15:a9:12:64:10:59:a4:c5:49: 91:da:78:b4:e6:de:fb:e6:4f:83:be:e5:e9:ee:50: 37:8e:bd:35:68:fb:86:59:30:0b:e3:56:3d:17:8e: 19:a5:f2:2a:e8:2d:4d:3d:64:f5:e1:92:36:42:16: ad:7c:c2:02:5e:19:34:16:bc:d4:41:ee:c1:c5:00: 66:65:e0:22:dc:90:ba:1d:80:4a:9b:2b:1a:88:40: dd:a0:c7:d8:62:70:d5:c1:91:90:5b:b0:3e:66:dc: c6:1c:ae:b8:16:3b:4f:d8:f1:c8:b4:13:e4:5e:df: 1e:e3:fb:6b:00:74:cd:b6:42:97:8f:a1:4f:77:1e: 13:29:c2:4f:84:db:9b:63:a8:4a:ac:08:3c:7c:ae: a3:92:d5:6f:ca:5f:27:57:98:55:f3:03:15:8a:ec: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:5A:C0:26:51:1D:C0:02:28:B0:C2:5F:C7:7C:D7:BC:12:5B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl X509v3 Authority Key Identifier: keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer sbgp-ipAddrBlock: critical IPv4: 137.118.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:24:70:4d:1a:b5:d0:33:84:18:9c:3f:1b:81:0b:df:0f:d7: 55:db:9b:12:aa:92:d1:33:ab:f2:5e:4c:e5:3c:e8:ed:7d:4c: 6b:88:89:18:26:c5:0b:b7:a9:4a:0c:80:3e:d3:9c:0e:74:c1: c2:31:76:08:76:51:f6:a7:7a:b5:8b:af:39:1e:2c:9f:aa:95: be:24:e9:9b:c3:39:56:f6:43:fd:8c:01:fd:38:05:06:c6:fa: bc:6f:a4:54:1b:66:65:22:f1:00:ba:b4:b8:14:cb:54:c3:33: 77:06:38:f5:7c:58:d3:98:37:d3:46:24:a3:c2:3c:dc:bd:40: db:82:c4:f1:6f:18:00:de:53:2b:f4:b4:57:46:67:94:1a:b9: 09:b5:75:cf:92:e9:c6:9a:5f:48:e2:0b:51:ff:86:2d:70:6b: a2:f8:b1:d0:02:23:34:66:a2:2c:a8:cf:29:a5:9c:4d:50:4b: 35:6f:a8:f1:92:46:a2:74:22:15:25:da:d8:c5:0c:f0:46:d9: 63:5e:46:e7:03:ff:e9:89:f7:0f:93:fb:3d:45:09:1e:ab:c7: 6b:a2:8f:9d:30:e1:a0:d1:f3:4c:30:f8:f7:6b:96:a5:22:d3: 18:42:0b:10:18:d4:cb:01:dc:92:11:c3:10:a0:53:92:9b:51: 27:54:f2:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZ/1+T62UJH+D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi MGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThjZjQ5ZjItOTdiZi00ZDRkLThlYTUtMzJhMjk3ZGI2ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYW7uTybmqf1c/rzxG0xKrX56DHDlrP93uTT vQjYHmrF+DYJG1JEvgMBXhQghg9kk4GjNcIRDigXHonWe5Y8xJHhosSttDfIejoZ IIAsyh6wT23ClYDQc51klJSKMV8VqRJkEFmkxUmR2ni05t775k+DvuXp7lA3jr01 aPuGWTAL41Y9F44ZpfIq6C1NPWT14ZI2QhatfMICXhk0FrzUQe7BxQBmZeAi3JC6 HYBKmysaiEDdoMfYYnDVwZGQW7A+ZtzGHK64FjtP2PHItBPkXt8e4/trAHTNtkKX j6FPdx4TKcJPhNubY6hKrAg8fK6jktVvyl8nV5hV8wMViux3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXGWsAmUR3AAiiwwl/HfNe8Els6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvMzFjMjcyM2MtNTNiMS0z MDZjLWFjMWEtMmIxMjAzYTI3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2 OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3 YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiXbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4kcE0atdAzhBicPxuBC98P11XbmxKqktEzq/JeTOU86O19TGuIiRgm xQu3qUoMgD7TnA50wcIxdgh2UfanerWLrzkeLJ+qlb4k6ZvDOVb2Q/2MAf04BQbG +rxvpFQbZmUi8QC6tLgUy1TDM3cGOPV8WNOYN9NGJKPCPNy9QNuCxPFvGADeUyv0 tFdGZ5QauQm1dc+S6caaX0jiC1H/hi1wa6L4sdACIzRmoiyozymlnE1QSzVvqPGS RqJ0IhUl2tjFDPBG2WNeRucD/+mJ9w+T+z1FCR6rx2uij50w4aDR80ww+PdrlqUi 0xhCCxAY1MsB3JIRwxCgU5KbUSdU8jM= -----END CERTIFICATE-----Generated at Sun Oct 11 07:56:49 2026 by rpki-client