$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/887924f0-e0bd-3401-ba84-7f4aecca1a6e.roa File: 887924f0-e0bd-3401-ba84-7f4aecca1a6e.roa (raw, json) Hash identifier: SPMRN1UcW6nSsQanD+8lpNQtbqU9mt/+SxDEti3EXXo= Subject key identifier: B5:9F:3D:89:FB:E3:02:4D:04:3E:FF:6D:85:AC:B0:F1:C8:98:0F:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4989D75FB5037C7789182000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/887924f0-e0bd-3401-ba84-7f4aecca1a6e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 136.70.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:d7:5f:b5:03:7c:77:89:18:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0732e457-38d0-4922-9cc6-203366527cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:7e:2e:1c:68:e3:b7:7d:88:a5:6d:37:46: 1e:74:d6:63:0e:84:1a:ee:8e:37:a8:99:3d:37:ec: 22:7f:62:ce:e4:cf:ac:d7:ed:5f:61:f4:24:e7:58: 8e:75:6b:23:01:ae:1c:d6:ce:a6:32:cd:d9:7c:9f: 19:28:d7:43:81:d6:f6:aa:98:d4:b5:b0:c7:9f:3d: dd:0e:94:25:f8:55:bd:b7:bf:c8:c7:5b:a0:b0:af: e5:f2:bc:f4:bf:bb:b0:3e:6a:2b:c4:21:27:04:5e: 62:98:44:be:9c:d7:ec:e8:64:cf:ee:89:17:27:b5: ae:7b:fb:e7:29:be:e4:7d:45:8f:0e:15:28:f0:e7: 8b:3a:47:4a:5f:b8:75:95:45:9d:85:68:e7:61:48: 6b:31:80:ab:54:29:d2:47:bb:1a:a2:a6:42:2f:2b: 16:d7:c8:55:c6:97:a8:79:32:29:0a:3c:4e:2d:8c: f8:6c:9a:d8:c1:2a:14:0e:f8:1b:29:c1:a9:da:02: 22:72:8f:c4:f3:6d:53:de:00:ac:a9:bf:ad:1c:ea: c1:24:c0:6d:61:c4:28:c1:6f:4f:11:a7:7c:33:f0: dd:34:69:4a:f9:0a:02:8c:3a:48:40:c7:46:79:09: fb:93:61:c8:33:3e:83:99:0c:c7:0d:c5:db:da:d2: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:3D:89:FB:E3:02:4D:04:3E:FF:6D:85:AC:B0:F1:C8:98:0F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/887924f0-e0bd-3401-ba84-7f4aecca1a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.70.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8a:2a:84:64:34:35:8b:1c:dd:d7:61:3c:71:10:ac:41:03: 58:96:75:e4:a3:2d:61:1f:6e:d6:53:d2:b2:19:eb:e5:94:94: 97:8e:9b:bc:3c:a8:32:06:fb:80:40:41:d6:0a:f5:99:40:62: aa:13:ee:71:c5:ac:00:1e:96:99:79:19:3a:d9:09:71:65:04: 15:d8:0b:21:b8:88:71:f3:87:4f:5e:23:30:a0:bf:0e:2e:e2: 9f:40:b3:79:20:92:f5:d2:b5:1e:ff:69:5d:4a:24:0f:1d:57: fc:0a:78:9b:7c:3e:6b:ee:41:24:a4:dc:1a:6d:04:ce:c4:0d: 80:a6:ff:d4:7a:45:5b:19:00:ed:d0:7f:53:b6:6d:07:e2:88: f0:57:06:d3:2a:eb:ac:e6:16:db:e0:b2:d4:4f:72:f4:b6:a9: de:fc:44:de:ca:f2:9a:64:06:7c:93:47:46:20:7d:b5:6a:03: c3:06:6b:1c:fb:aa:ad:cf:57:9c:79:7f:da:b1:7d:37:20:93: e8:a9:4f:e8:db:06:15:0e:c3:18:bb:0c:a8:76:34:1a:be:3e: 03:b9:82:bb:b1:fa:f1:42:1f:2f:7a:63:cc:12:e4:8e:1e:98: 62:65:5f:c5:84:93:17:5a:5c:8c:4e:bf:90:f9:24:a1:0c:51: 40:a8:69:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiddftQN8d4kYIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDczMmU0NTctMzhkMC00OTIyLTljYzYtMjAzMzY2NTI3Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjh+Lhxo47d9iKVtN0YedNZjDoQa7o43qJk9 N+wif2LO5M+s1+1fYfQk51iOdWsjAa4c1s6mMs3ZfJ8ZKNdDgdb2qpjUtbDHnz3d DpQl+FW9t7/Ix1ugsK/l8rz0v7uwPmorxCEnBF5imES+nNfs6GTP7okXJ7Wue/vn Kb7kfUWPDhUo8OeLOkdKX7h1lUWdhWjnYUhrMYCrVCnSR7saoqZCLysW18hVxpeo eTIpCjxOLYz4bJrYwSoUDvgbKcGp2gIico/E821T3gCsqb+tHOrBJMBtYcQowW9P Ead8M/DdNGlK+QoCjDpIQMdGeQn7k2HIMz6DmQzHDcXb2tKaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWfPYn74wJNBD7/bYWssPHImA9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODg3OTI0ZjAtZTBiZC0z NDAxLWJhODQtN2Y0YWVjY2ExYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiEYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKKKoRkNDWLHN3XYTxxEKxBA1iWdeSjLWEfbtZT0rIZ6+WUlJeOm7w8 qDIG+4BAQdYK9ZlAYqoT7nHFrAAelpl5GTrZCXFlBBXYCyG4iHHzh09eIzCgvw4u 4p9As3kgkvXStR7/aV1KJA8dV/wKeJt8PmvuQSSk3BptBM7EDYCm/9R6RVsZAO3Q f1O2bQfiiPBXBtMq66zmFtvgstRPcvS2qd78RN7K8ppkBnyTR0YgfbVqA8MGaxz7 qq3PV5x5f9qxfTcgk+ipT+jbBhUOwxi7DKh2NBq+PgO5grux+vFCHy96Y8wS5I4e mGJlX8WEkxdaXIxOv5D5JKEMUUCoaTg= -----END CERTIFICATE-----Generated at Tue Oct 6 13:57:58 2026 by rpki-client