$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21e8566f-aa49-3de9-8f22-0d1f3dbc512a.roa File: 21e8566f-aa49-3de9-8f22-0d1f3dbc512a.roa (raw, json) Hash identifier: DhWChWw4WFH3zFd7DwYYvqHH16BUNOYxt+X9+RPP8Jw= Subject key identifier: DD:AE:FC:60:F9:A2:58:41:ED:A0:95:16:89:70:14:8B:6A:E7:18:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EDB2C85BBA07A375294AA5100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21e8566f-aa49-3de9-8f22-0d1f3dbc512a.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 396982 IP address blocks: 136.121.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:85:bb:a0:7a:37:52:94:aa:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=b974c23e-b0c4-49a7-bb48-9d9aea1547e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:da:19:17:05:77:2a:6e:54:45:3a:10:cc: 83:58:a3:76:35:b7:2c:8d:30:b8:12:37:ba:82:44: 97:e5:67:13:45:22:61:db:92:b1:61:44:de:e4:52: 98:22:b8:51:06:fd:6f:dc:da:e3:0f:c9:c6:00:6c: 48:7a:42:26:c3:8f:de:8f:59:c7:2b:76:01:2a:dc: d1:0f:11:6f:1f:f8:7e:5a:77:d1:35:a0:1e:3d:2e: 89:52:49:89:39:c4:5d:5a:82:c5:9b:e8:ae:17:b7: f0:e7:f4:99:41:7a:3d:c4:81:5d:90:16:79:be:1f: af:16:b1:15:eb:59:0c:93:02:68:3f:b0:ee:09:8f: 1c:59:c4:e4:1f:08:0b:1a:13:ff:eb:12:5e:c2:b7: a6:65:19:1b:d2:4d:35:9f:10:98:c1:43:a9:70:74: d8:31:13:3d:1f:08:19:98:75:25:94:10:1e:0b:69: d9:71:cc:44:d6:fc:ec:59:69:eb:cc:32:2c:27:8e: a9:98:e9:1c:59:87:99:40:9d:60:b3:58:c2:b4:40: 01:2a:84:cc:32:77:f1:cd:16:5f:77:03:be:8d:37: f3:b4:3d:a0:98:d0:4f:03:24:e8:84:25:56:0e:6a: 87:ab:6b:c3:22:63:67:e4:ee:4d:a8:8b:29:dd:d2: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:FC:60:F9:A2:58:41:ED:A0:95:16:89:70:14:8B:6A:E7:18:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21e8566f-aa49-3de9-8f22-0d1f3dbc512a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e8:13:48:ff:e7:a2:d3:5f:6e:0d:b8:c4:2a:e7:69:c4:b9: 92:93:65:2a:94:cc:72:a2:20:eb:14:dd:ba:7a:0a:63:d0:7f: 54:3b:3c:17:d6:11:83:a2:23:ed:b7:68:2c:6c:07:30:a8:11: c5:7a:ae:d2:96:fe:8a:47:51:74:9d:90:40:2f:a8:fc:34:56: 9c:49:8a:4c:cf:f2:0c:39:ff:83:04:77:0c:6e:0f:9d:c9:36: 24:9a:6c:11:8b:26:74:02:f6:0c:96:53:95:ab:ab:e7:e0:ae: 08:f1:4f:c7:0a:b0:40:78:0a:a7:df:f5:b2:c5:7b:fe:e1:a5: fd:bc:ac:63:a4:4c:68:06:da:e7:6c:a2:8e:dd:c8:16:f9:91: cc:1c:27:c2:32:66:cf:37:f9:21:34:02:9f:2e:2e:95:08:fb: 65:23:1d:b1:2c:23:4b:70:55:d3:ad:8b:3a:4b:32:43:24:d4: 1c:98:e7:31:20:22:1e:aa:e3:d4:b6:75:c2:72:8f:8a:b0:aa: 59:0f:15:e0:a7:f8:c0:83:fa:93:c6:a5:d5:cb:0e:75:49:38: a9:26:7d:63:e4:f5:11:b9:81:a7:8e:ca:1a:10:6b:09:65:90: ba:b6:d4:79:4c:3e:d0:ce:e2:c2:cb:ea:8b:22:48:d5:11:e6: 83:c1:3e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIW7oHo3UpSqUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk Yjk3NGMyM2UtYjBjNC00OWE3LWJiNDgtOWQ5YWVhMTU0N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+raGRcFdypuVEU6EMyDWKN2NbcsjTC4Eje6 gkSX5WcTRSJh25KxYUTe5FKYIrhRBv1v3NrjD8nGAGxIekImw4/ej1nHK3YBKtzR DxFvH/h+WnfRNaAePS6JUkmJOcRdWoLFm+iuF7fw5/SZQXo9xIFdkBZ5vh+vFrEV 61kMkwJoP7DuCY8cWcTkHwgLGhP/6xJewremZRkb0k01nxCYwUOpcHTYMRM9HwgZ mHUllBAeC2nZccxE1vzsWWnrzDIsJ46pmOkcWYeZQJ1gs1jCtEABKoTMMnfxzRZf dwO+jTfztD2gmNBPAyTohCVWDmqHq2vDImNn5O5NqIsp3dKYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2u/GD5olhB7aCVFolwFItq5xgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjFlODU2NmYtYWE0OS0z ZGU5LThmMjItMGQxZjNkYmM1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiHkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJboE0j/56LTX24NuMQq52nEuZKTZSqUzHKiIOsU3bp6CmPQf1Q7PBfW EYOiI+23aCxsBzCoEcV6rtKW/opHUXSdkEAvqPw0VpxJikzP8gw5/4MEdwxuD53J NiSabBGLJnQC9gyWU5Wrq+fgrgjxT8cKsEB4Cqff9bLFe/7hpf28rGOkTGgG2uds oo7dyBb5kcwcJ8IyZs83+SE0Ap8uLpUI+2UjHbEsI0twVdOtizpLMkMk1ByY5zEg Ih6q49S2dcJyj4qwqlkPFeCn+MCD+pPGpdXLDnVJOKkmfWPk9RG5gaeOyhoQawll kLq21HlMPtDO4sLL6osiSNUR5oPBPq0= -----END CERTIFICATE-----Generated at Sun Sep 27 11:42:08 2026 by rpki-client