$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/611db297-3329-3f48-8558-37f72767fe2c.roa File: 611db297-3329-3f48-8558-37f72767fe2c.roa (raw, json) Hash identifier: AsJPdaQSkqA7zcyZ7Dg4o1jB0whKA0A0NcYXSkLl+r8= Subject key identifier: C6:FE:E2:65:17:5E:EA:0D:C8:B6:A9:EE:66:66:88:B4:41:E1:05:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F612D73D749877FCB37F5FE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/611db297-3329-3f48-8558-37f72767fe2c.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 36492 IP address blocks: 136.126.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:73:d7:49:87:7f:cb:37:f5:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=b3bca4a7-f0d2-46e6-9818-4e2047b3b785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:55:12:86:8b:75:b2:4b:e2:48:54:22:70: e2:47:ed:52:6f:e3:55:88:51:80:74:e1:24:81:33: e5:a1:dc:ee:39:41:99:8d:f0:9b:7f:ad:24:ce:9c: 1e:96:e9:b6:3e:45:ee:6a:8d:5f:3e:01:08:11:12: 5e:52:52:4b:29:50:cb:cc:9d:63:36:ba:b3:e5:0a: cd:c1:a7:59:e6:42:5f:f6:cb:bc:d8:1d:57:c9:8d: 45:ed:5f:21:6f:7e:46:c3:a7:52:70:a4:42:b3:de: b1:cf:6a:44:8b:31:00:29:0a:5d:f1:91:d6:92:70: 41:99:a2:e1:91:7a:0a:c4:fa:c6:7e:5e:83:ac:55: 5f:d7:e4:28:57:6e:f1:b2:e3:dd:1c:2d:f1:fa:16: bb:55:61:11:14:ad:13:fd:df:f7:e9:aa:e9:09:8d: 21:c4:e1:e9:17:b7:35:26:34:e4:53:b2:7d:6c:2a: 5a:c1:40:c0:22:c6:08:92:d1:01:47:d4:6d:5b:57: 64:c1:84:a3:a8:a2:6b:26:b2:e7:88:d6:31:e7:b7: 68:22:99:bd:c5:46:e6:6b:ad:4a:e1:10:7d:f7:b4: c7:d1:1e:92:ce:1f:09:7b:57:e8:8a:c0:c0:61:d3: 9e:da:0b:c6:66:1e:ba:ed:b1:7b:ae:4a:cf:69:df: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:E2:65:17:5E:EA:0D:C8:B6:A9:EE:66:66:88:B4:41:E1:05:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/611db297-3329-3f48-8558-37f72767fe2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.126.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:48:da:53:e4:90:a6:bb:b1:af:f6:28:f6:a9:97:b3:01:5e: e8:5b:25:ad:e3:dd:29:e7:61:23:36:5c:4b:28:df:f8:69:43: c1:28:3f:2e:7a:a9:a4:9e:80:35:f7:85:03:17:72:b5:15:c9: fe:49:01:df:83:50:a9:0e:1e:d4:68:90:eb:4d:e7:5a:4e:a8: bd:aa:2e:e0:26:61:96:c0:c7:1a:42:b1:87:2a:8d:34:2b:55: 45:46:f9:ad:02:25:be:9b:09:93:f2:27:83:30:ff:85:dc:60: 24:15:b1:c1:78:25:b5:e6:09:01:cf:9e:41:81:51:0d:8e:fc: 15:56:fa:51:fa:bc:b7:0b:27:44:96:ad:85:ac:ee:6a:2d:b4: d5:90:46:ac:3f:63:b9:cd:2d:68:b5:1d:67:14:c3:e5:bd:5c: 0d:02:de:9e:b0:1d:2e:a7:af:ef:46:a9:25:e4:81:81:3c:1f: 10:1c:65:c9:7d:c0:d1:85:ec:d6:78:af:2f:87:07:06:4f:58: 7a:d6:6b:cd:d6:55:47:ac:9a:50:44:82:ed:84:a2:d5:76:38: 87:e9:b1:ba:17:90:14:a0:bb:fc:72:ff:4c:d2:da:40:d4:71: e0:41:94:e8:e4:21:e2:90:ba:41:a5:44:9c:63:85:b5:a0:77: 89:45:8a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXPXSYd/yzf1/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YjNiY2E0YTctZjBkMi00NmU2LTk4MTgtNGUyMDQ3YjNiNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhANVEoaLdbJL4khUInDiR+1Sb+NViFGAdOEk gTPlodzuOUGZjfCbf60kzpwelum2PkXuao1fPgEIERJeUlJLKVDLzJ1jNrqz5QrN wadZ5kJf9su82B1XyY1F7V8hb35Gw6dScKRCs96xz2pEizEAKQpd8ZHWknBBmaLh kXoKxPrGfl6DrFVf1+QoV27xsuPdHC3x+ha7VWERFK0T/d/36arpCY0hxOHpF7c1 JjTkU7J9bCpawUDAIsYIktEBR9RtW1dkwYSjqKJrJrLniNYx57doIpm9xUbma61K 4RB997TH0R6Szh8Je1foisDAYdOe2gvGZh667bF7rkrPad8zvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb+4mUXXuoNyLap7mZmiLRB4QUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjExZGIyOTctMzMyOS0z ZjQ4LTg1NTgtMzdmNzI3NjdmZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiH78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9I2lPkkKa7sa/2KPapl7MBXuhbJa3j3SnnYSM2XEso3/hpQ8EoPy56 qaSegDX3hQMXcrUVyf5JAd+DUKkOHtRokOtN51pOqL2qLuAmYZbAxxpCsYcqjTQr VUVG+a0CJb6bCZPyJ4Mw/4XcYCQVscF4JbXmCQHPnkGBUQ2O/BVW+lH6vLcLJ0SW rYWs7mottNWQRqw/Y7nNLWi1HWcUw+W9XA0C3p6wHS6nr+9GqSXkgYE8HxAcZcl9 wNGF7NZ4ry+HBwZPWHrWa83WVUesmlBEgu2EotV2OIfpsboXkBSgu/xy/0zS2kDU ceBBlOjkIeKQukGlRJxjhbWgd4lFiiU= -----END CERTIFICATE-----Generated at Sat Oct 10 17:11:56 2026 by rpki-client