$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89c3b158-def6-36c7-9480-3da3625c7cee.roa File: 89c3b158-def6-36c7-9480-3da3625c7cee.roa (raw, json) Hash identifier: Mju0NC1sYLmlis0kBsakJYksF31iNiQ/jQgQJc2EWSQ= Subject key identifier: D9:67:72:C8:7A:35:01:EB:C9:A3:E4:1A:0C:57:A7:21:A7:F6:81:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E5619EAAA2104DD39163FE5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89c3b158-def6-36c7-9480-3da3625c7cee.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 396982 IP address blocks: 136.117.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:ea:aa:21:04:dd:39:16:3f:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=9eca0120-4da3-4629-ad45-4e818c924a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:be:73:e5:f9:21:bf:ef:16:0e:7a:b1:df: 33:e2:61:01:09:6c:72:c5:87:f5:60:f3:51:8f:6d: a3:c7:75:93:f7:ba:5c:c1:2f:67:31:3b:6c:f4:98: c4:4c:28:2f:9e:e9:b2:5b:b9:f5:e8:be:0b:2c:7e: a8:ed:5a:6e:de:4e:08:80:c1:5d:58:84:bd:7c:6e: 48:62:e9:08:83:46:17:32:99:7e:84:86:84:12:6b: 8b:c9:60:66:9b:3d:54:f4:8d:c4:ea:a8:e3:83:f0: 4d:db:ed:53:f6:4a:60:ae:86:ac:56:c0:c5:1c:7c: 7b:96:0a:f9:a6:c3:50:d1:96:15:2f:3f:7a:f5:69: 40:a9:76:f6:01:98:c0:6e:14:c9:70:31:7d:ba:12: c7:69:01:08:96:7d:0e:bc:ce:73:c5:d5:d8:7c:f5: 78:d6:09:88:81:aa:8e:8c:0c:b9:7b:13:e4:95:93: b9:e6:dc:f4:12:15:ce:c6:0e:3e:23:c9:7d:2c:4c: 75:81:94:75:84:cd:21:17:fe:0c:dd:d2:3d:62:79: df:a4:9f:f9:dd:08:b4:84:51:19:c8:e7:1c:77:38: 6f:34:53:ba:f0:6f:61:dc:80:a2:f2:ea:b8:20:47: 4f:cc:7d:fb:17:c3:5e:37:f1:90:6f:f9:24:fc:d1: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:72:C8:7A:35:01:EB:C9:A3:E4:1A:0C:57:A7:21:A7:F6:81:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89c3b158-def6-36c7-9480-3da3625c7cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.117.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:02:65:1c:b3:17:3a:07:fd:3d:ff:37:08:1a:65:45:92:72: 08:a3:fa:f2:64:ef:67:99:15:f9:b9:e3:d7:ae:05:27:fb:d1: 17:8e:1d:4b:0c:f4:78:6d:09:f6:0a:88:33:fe:c7:86:66:5d: 16:c9:86:66:af:eb:59:6d:2b:e5:ef:4e:fc:39:5e:13:78:c7: a8:70:cb:01:77:57:4f:3b:4f:42:2a:0f:26:bc:61:23:df:36: a3:8a:f6:33:5f:d3:53:77:e7:4b:5c:9c:da:34:d2:aa:c9:48: 3f:50:03:3b:eb:ef:67:9a:62:d8:83:38:31:3a:fc:a7:18:f4: 3a:57:e6:51:bd:88:88:6f:33:6a:03:94:84:1f:a7:c7:7b:67: a7:99:aa:e1:42:0c:7e:8d:d3:c1:8e:06:a1:d2:6b:68:01:0c: 54:3b:9f:59:4c:f2:81:ef:33:de:78:c1:27:e6:15:f7:a1:d7: 0b:43:c4:bf:31:c8:6c:74:d5:55:5e:64:9e:50:a5:65:65:20: 6c:56:8f:30:09:b6:b2:3b:a6:9d:b1:44:bf:9d:b8:d6:26:97: 60:ec:56:24:c5:15:6f:ff:c1:70:4f:1d:07:92:94:f1:d6:70: f4:c3:19:ee:28:f0:9f:b3:20:a7:23:57:3b:b5:31:a3:ea:30: 24:b3:7f:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGeqqIQTdORY/5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk OWVjYTAxMjAtNGRhMy00NjI5LWFkNDUtNGU4MThjOTI0YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtG+c+X5Ib/vFg56sd8z4mEBCWxyxYf1YPNR j22jx3WT97pcwS9nMTts9JjETCgvnumyW7n16L4LLH6o7Vpu3k4IgMFdWIS9fG5I YukIg0YXMpl+hIaEEmuLyWBmmz1U9I3E6qjjg/BN2+1T9kpgroasVsDFHHx7lgr5 psNQ0ZYVLz969WlAqXb2AZjAbhTJcDF9uhLHaQEIln0OvM5zxdXYfPV41gmIgaqO jAy5exPklZO55tz0EhXOxg4+I8l9LEx1gZR1hM0hF/4M3dI9YnnfpJ/53Qi0hFEZ yOccdzhvNFO68G9h3ICi8uq4IEdPzH37F8NeN/GQb/kk/NGL8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlncsh6NQHryaPkGgxXpyGn9oHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODljM2IxNTgtZGVmNi0z NmM3LTk0ODAtM2RhMzYyNWM3Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiHWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMCZRyzFzoH/T3/NwgaZUWScgij+vJk72eZFfm549euBSf70ReOHUsM 9HhtCfYKiDP+x4ZmXRbJhmav61ltK+XvTvw5XhN4x6hwywF3V087T0IqDya8YSPf NqOK9jNf01N350tcnNo00qrJSD9QAzvr72eaYtiDODE6/KcY9DpX5lG9iIhvM2oD lIQfp8d7Z6eZquFCDH6N08GOBqHSa2gBDFQ7n1lM8oHvM954wSfmFfeh1wtDxL8x yGx01VVeZJ5QpWVlIGxWjzAJtrI7pp2xRL+duNYml2DsViTFFW//wXBPHQeSlPHW cPTDGe4o8J+zIKcjVzu1MaPqMCSzf/8= -----END CERTIFICATE-----Generated at Thu Jul 23 23:32:53 2026 by rpki-client