$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cef892b-8eeb-3fb4-b77a-7a436e812874.roa File: 8cef892b-8eeb-3fb4-b77a-7a436e812874.roa (raw, json) Hash identifier: 87ANfbvxm1QR6sRb2KRLFZRhDBdEo4BtjUaOf/Zcb1k= Subject key identifier: 0B:4F:42:3F:A3:58:D6:D8:57:96:E3:65:B3:8C:62:A2:2A:83:70:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E4C54B2B4DA0C5CF314EA4100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cef892b-8eeb-3fb4-b77a-7a436e812874.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 19527 IP address blocks: 136.121.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:b2:b4:da:0c:5c:f3:14:ea:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=59861db0-6847-42bc-9d05-46ffeca4403b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:a7:26:4a:40:62:b2:0b:fe:66:54:6e:72: ef:96:e5:ac:f5:0b:e5:6f:ae:56:7b:81:9a:46:63: c0:6b:8b:55:bb:4e:f6:41:a9:83:0f:e0:a0:02:db: 21:a7:c1:ce:19:00:bf:e3:5d:51:f8:75:82:ea:0c: 73:43:8c:53:10:0e:80:58:37:16:ca:38:b9:f5:d7: 04:d1:34:8e:d8:4d:18:e9:58:5c:a3:6a:75:f5:05: aa:d6:16:f3:e4:56:6e:15:38:90:a7:2d:66:e2:2b: 3f:8c:16:a8:be:e0:63:0a:47:e3:a0:b7:3a:88:ff: 9a:59:97:dd:e5:f8:c1:c7:3e:e7:0f:d8:f9:0a:cd: b0:31:4d:72:fd:8e:9a:3b:17:19:89:c9:dd:d4:a6: 5b:51:c9:4a:84:3a:1a:6a:44:90:45:52:22:85:3d: 28:a7:10:8f:a7:6f:ca:4e:cd:6e:b0:a4:87:6e:31: e1:6e:f0:8e:69:7c:a1:96:14:bd:77:70:08:d7:fd: 0e:16:b3:96:08:9e:ea:90:ed:60:c3:0a:fc:e2:fc: 2d:ed:0d:91:29:cc:7e:7e:d2:29:1c:32:9e:63:42: 4e:a9:ac:63:91:f6:44:07:84:13:b1:f5:ca:1b:e2: 51:a9:69:47:1f:e8:af:43:61:d4:a1:88:df:51:ba: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:42:3F:A3:58:D6:D8:57:96:E3:65:B3:8C:62:A2:2A:83:70:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cef892b-8eeb-3fb4-b77a-7a436e812874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:70:6f:56:70:cd:22:d3:7a:ac:7d:e2:b8:a1:b5:47:b0:0c: 2d:e9:34:e5:85:78:e3:ac:68:bb:c8:1f:4f:89:4f:1f:4b:44: b4:26:12:2d:bf:71:8e:62:85:94:0a:0b:6f:12:99:a8:06:5e: 80:fa:30:63:bc:98:eb:d2:29:dc:01:44:32:e3:90:f0:4f:72: f8:d9:73:20:fc:45:48:82:e4:84:5a:4f:8e:9a:93:69:77:d6: 02:34:5f:5d:96:47:cf:19:91:03:c4:db:79:5d:af:55:7d:d9: 2e:ba:c1:e1:ec:0b:43:d2:45:3c:ac:76:7a:78:59:eb:7a:3c: f7:15:ea:ee:88:d7:9b:41:ee:ef:ea:96:f7:56:df:49:8e:87: 2a:e7:2c:c6:8a:66:f0:28:30:ff:17:ac:57:5f:55:ba:be:17: 8b:24:fa:85:9a:b6:c6:cf:98:d4:9a:14:d8:c5:ec:fc:33:d2: ae:db:d6:34:7e:26:4a:48:aa:4a:67:6e:3d:c1:fc:5b:11:f4: af:84:3e:8a:25:9f:f5:1a:b1:a9:5a:97:80:ec:ee:f8:ff:c6: 89:20:03:86:bc:41:39:73:91:d7:d0:c9:5b:9c:a7:5e:58:c1: 76:df:e3:04:71:41:30:fd:e4:c0:6f:66:09:38:7d:35:4a:aa: 07:10:06:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVLK02gxc8xTqQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTk4NjFkYjAtNjg0Ny00MmJjLTlkMDUtNDZmZmVjYTQ0MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4OnJkpAYrIL/mZUbnLvluWs9Qvlb65We4Ga RmPAa4tVu072QamDD+CgAtshp8HOGQC/411R+HWC6gxzQ4xTEA6AWDcWyji59dcE 0TSO2E0Y6Vhco2p19QWq1hbz5FZuFTiQpy1m4is/jBaovuBjCkfjoLc6iP+aWZfd 5fjBxz7nD9j5Cs2wMU1y/Y6aOxcZicnd1KZbUclKhDoaakSQRVIihT0opxCPp2/K Ts1usKSHbjHhbvCOaXyhlhS9d3AI1/0OFrOWCJ7qkO1gwwr84vwt7Q2RKcx+ftIp HDKeY0JOqaxjkfZEB4QTsfXKG+JRqWlHH+ivQ2HUoYjfUbpPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtPQj+jWNbYV5bjZbOMYqIqg3CkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGNlZjg5MmItOGVlYi0z ZmI0LWI3N2EtN2E0MzZlODEyODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1wb1ZwzSLTeqx94rihtUewDC3pNOWFeOOsaLvIH0+JTx9LRLQmEi2/ cY5ihZQKC28SmagGXoD6MGO8mOvSKdwBRDLjkPBPcvjZcyD8RUiC5IRaT46ak2l3 1gI0X12WR88ZkQPE23ldr1V92S66weHsC0PSRTysdnp4Wet6PPcV6u6I15tB7u/q lvdW30mOhyrnLMaKZvAoMP8XrFdfVbq+F4sk+oWatsbPmNSaFNjF7Pwz0q7b1jR+ JkpIqkpnbj3B/FsR9K+EPooln/Uasalal4Ds7vj/xokgA4a8QTlzkdfQyVucp15Y wXbf4wRxQTD95MBvZgk4fTVKqgcQBog= -----END CERTIFICATE-----Generated at Fri Jul 24 11:54:21 2026 by rpki-client