$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/212f9c8a-4c41-391f-90ae-4aa0256799fd.roa File: 212f9c8a-4c41-391f-90ae-4aa0256799fd.roa (raw, json) Hash identifier: 3T46PHCOZG4xRv0+PHVw7LCrR6n2GbY5XQIQmx2wdPs= Subject key identifier: D0:01:85:E7:8D:3A:E6:65:3A:AC:EF:5A:C9:50:B4:62:BA:F8:35:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F11A1613791B1211F847F1380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/212f9c8a-4c41-391f-90ae-4aa0256799fd.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 136.124.2.72/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:61:37:91:b1:21:1f:84:7f:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=99bfecf1-cb0c-429f-a381-68ad1f83ad65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:f3:73:7f:e0:49:68:f5:d5:b2:a6:a2:3a: 07:a1:5d:f2:5a:e3:53:3a:08:ba:21:2c:f8:81:2c: cb:85:99:2f:be:b1:d4:c6:dc:59:ec:29:70:2c:49: 49:d7:f8:40:a1:a1:3e:22:6d:e4:64:b0:c8:a5:d1: 1e:e7:bf:ea:a2:ab:9f:31:75:8b:98:d1:90:d6:01: 28:f3:ba:41:90:68:b0:ef:07:15:4f:59:a8:6e:25: de:94:d1:7e:5e:3b:9b:a0:79:be:4d:60:14:1c:9a: db:54:3a:d3:ca:94:45:fb:f0:c8:53:3c:50:3c:3a: fb:ad:66:e5:87:f6:40:70:72:7d:08:56:2c:f0:d8: ff:21:ec:50:ae:7e:01:f8:52:a1:e0:2d:a4:d2:32: 29:35:3e:36:c5:c9:56:ba:e9:16:49:d1:32:4e:5a: ce:c0:5f:9a:a2:c2:1b:c1:b4:7c:84:2c:be:3c:19: 3d:73:ae:08:97:a8:d0:d7:b1:34:f1:1c:9a:fc:f1: 9f:72:51:00:b4:94:74:47:4c:d4:87:00:d4:60:e1: 3d:cd:ba:14:2b:72:b5:7d:0f:f9:47:f1:f6:5f:da: 1c:45:6a:b1:48:f1:20:06:0a:78:ae:f4:f7:1b:d3: 49:66:82:9c:39:a5:55:b4:b5:3a:74:e1:6b:57:38: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:01:85:E7:8D:3A:E6:65:3A:AC:EF:5A:C9:50:B4:62:BA:F8:35:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/212f9c8a-4c41-391f-90ae-4aa0256799fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.124.2.72/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d1:98:40:d0:71:34:c8:6c:74:d3:0c:11:5b:a1:17:2e:fc: 9b:8c:5a:5a:8e:8c:1f:79:af:a8:02:24:00:96:90:68:f8:91: 6b:5d:20:dd:97:aa:3f:c3:51:49:cb:80:14:d7:13:64:42:4c: af:c1:72:3f:b6:58:05:80:b7:4c:97:bb:8e:7e:f9:0e:c5:58: cd:a8:eb:3e:ad:92:30:99:03:9f:25:56:2e:be:e5:b4:40:10: 1c:e9:15:b7:34:50:38:b1:d8:a7:83:34:09:13:e7:53:2a:5e: 1d:c1:e2:2a:d1:b8:84:41:54:eb:64:91:94:f0:93:9a:58:f2: 0b:4d:23:bd:a9:97:c7:21:10:e7:21:51:72:51:77:a1:e4:b3: 9d:2e:71:00:72:6e:ab:e4:9b:bc:3d:0c:ad:51:f0:c0:56:76: 34:d3:2c:02:bc:c5:64:ba:bb:ef:21:c2:1c:ea:ef:6d:0a:d8: 3b:5a:15:8b:f9:dd:34:d5:4a:74:b6:ff:27:3d:f2:ea:a2:fe: 9f:66:7a:e8:2b:79:30:b8:1f:e6:a9:43:d6:eb:53:aa:70:dd: c0:6a:39:7b:4d:27:98:55:02:e3:a5:38:8f:5b:07:1f:83:1d: 4a:ab:23:03:e7:8c:5e:16:7e:74:df:0f:ad:6a:84:19:ed:c8: a5:44:e3:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoWE3kbEhH4R/E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTliZmVjZjEtY2IwYy00MjlmLWEzODEtNjhhZDFmODNhZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcrzc3/gSWj11bKmojoHoV3yWuNTOgi6ISz4 gSzLhZkvvrHUxtxZ7ClwLElJ1/hAoaE+Im3kZLDIpdEe57/qoqufMXWLmNGQ1gEo 87pBkGiw7wcVT1mobiXelNF+XjuboHm+TWAUHJrbVDrTypRF+/DIUzxQPDr7rWbl h/ZAcHJ9CFYs8Nj/IexQrn4B+FKh4C2k0jIpNT42xclWuukWSdEyTlrOwF+aosIb wbR8hCy+PBk9c64Il6jQ17E08Rya/PGfclEAtJR0R0zUhwDUYOE9zboUK3K1fQ/5 R/H2X9ocRWqxSPEgBgp4rvT3G9NJZoKcOaVVtLU6dOFrVzhgvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNABheeNOuZlOqzvWslQtGK6+DV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjEyZjljOGEtNGM0MS0z OTFmLTkwYWUtNGFhMDI1Njc5OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDiHwCSDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA00ZhA0HE0yGx00wwRW6EXLvybjFpajowfea+oAiQAlpBo+JFrXSDd l6o/w1FJy4AU1xNkQkyvwXI/tlgFgLdMl7uOfvkOxVjNqOs+rZIwmQOfJVYuvuW0 QBAc6RW3NFA4sdingzQJE+dTKl4dweIq0biEQVTrZJGU8JOaWPILTSO9qZfHIRDn IVFyUXeh5LOdLnEAcm6r5Ju8PQytUfDAVnY00ywCvMVkurvvIcIc6u9tCtg7WhWL +d001Up0tv8nPfLqov6fZnroK3kwuB/mqUPW61OqcN3Aajl7TSeYVQLjpTiPWwcf gx1KqyMD54xeFn503w+taoQZ7cilRONx -----END CERTIFICATE-----Generated at Sun Oct 4 21:18:23 2026 by rpki-client