$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: Bhx9wIH7TPksUbiMVTk51/nLry47OSFaC3FkXshFLs8= Subject key identifier: 9F:CA:52:E3:38:B2:91:3C:96:33:E4:10:7E:30:3A:0C:A9:69:76:41 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584F49752C7F37679AAD71EAC280 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:2c:7f:37:67:9a:ad:71:ea:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=db86b231-f144-4922-bf1f-3c9f47d6db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:42:b3:b1:b0:bc:78:56:8d:ea:cc:14:28: 0b:77:c0:75:56:f9:56:f2:6a:01:84:8e:8f:3c:a6: 6f:23:6c:56:b9:d8:8a:e4:40:3e:0b:9b:39:a6:27: 92:75:00:0a:f9:a4:70:cc:fc:92:68:7b:9d:45:8e: 46:34:2a:71:21:6f:ce:88:9c:7b:bf:2f:7e:6c:8a: 60:6a:56:df:14:b0:aa:5d:3e:23:74:7b:6a:7a:4c: 49:e1:49:f2:4e:98:31:12:c1:2e:d4:81:50:e4:01: 19:65:af:90:44:29:19:0d:86:75:2e:8b:99:65:f8: 87:f9:88:7c:d0:0a:08:05:7e:b8:99:92:b9:bb:3d: b7:92:1a:da:67:bf:e8:4b:da:00:dd:01:a2:12:0a: d6:53:99:0f:2f:13:e2:4e:1d:e8:f2:0b:fc:d5:a6: 1c:ec:a4:57:21:da:f7:70:20:46:bc:31:e7:8b:ec: 22:9b:fa:c1:a4:4f:9a:ba:3f:50:f2:df:87:ea:38: a6:c1:c1:d4:9d:47:86:39:6c:f9:5c:48:86:52:4a: cf:6c:6b:4b:9d:fc:a2:9b:d5:89:83:f5:d8:a7:5b: e2:14:19:d1:4b:da:ca:13:ae:1d:b8:2d:62:9a:95: 41:34:53:10:3f:36:31:98:e5:05:76:77:de:e6:ba: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CA:52:E3:38:B2:91:3C:96:33:E4:10:7E:30:3A:0C:A9:69:76:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1b:03:6d:dc:e8:34:48:6b:94:e7:5f:70:63:f8:b0:34:57: a8:53:13:9f:35:72:be:ef:e0:1a:e4:ae:e9:a4:4e:86:4f:13: d9:47:a3:be:f3:a7:1f:ec:d8:1f:fe:c1:b9:62:86:b3:05:25: 89:0f:c7:59:60:94:c9:4c:5a:d9:69:cc:eb:d9:b2:e1:08:e2: eb:95:b4:37:fd:c3:f0:d0:63:85:89:16:e0:f0:e0:fb:52:09: 3c:f1:3d:ec:b7:74:0f:8e:71:7a:e8:44:11:65:2e:8e:69:6d: 79:d2:ea:7c:14:ba:35:b7:fe:ce:eb:0b:c7:f8:13:eb:f4:a0: 89:53:f4:12:4b:64:2b:bb:dc:b7:c7:9f:0b:8e:77:cb:69:13: 45:2e:16:67:ad:e9:b6:7c:43:55:8c:b6:27:69:9a:b5:c5:81: 73:fe:f3:3f:b9:0b:2c:a6:c4:20:84:24:97:ba:27:55:a5:e1: 81:84:57:e3:c1:5d:26:6c:96:7c:47:d6:59:c1:74:5d:a8:5a: ea:25:ca:80:30:12:c2:c2:6a:81:31:d6:cf:ff:65:94:f9:12: 72:c1:d9:ab:3b:eb:ce:66:c8:b0:57:4e:bb:fc:97:45:f7:45: 1e:0c:6e:a1:43:04:c9:37:2e:7a:b6:b2:0b:03:28:64:d2:a9: 03:a9:93:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdSx/N2earXHqwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGI4NmIyMzEtZjE0NC00OTIyLWJmMWYtM2M5ZjQ3ZDZkYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM5Cs7GwvHhWjerMFCgLd8B1VvlW8moBhI6P PKZvI2xWudiK5EA+C5s5pieSdQAK+aRwzPySaHudRY5GNCpxIW/OiJx7vy9+bIpg albfFLCqXT4jdHtqekxJ4UnyTpgxEsEu1IFQ5AEZZa+QRCkZDYZ1LouZZfiH+Yh8 0AoIBX64mZK5uz23khraZ7/oS9oA3QGiEgrWU5kPLxPiTh3o8gv81aYc7KRXIdr3 cCBGvDHni+wim/rBpE+auj9Q8t+H6jimwcHUnUeGOWz5XEiGUkrPbGtLnfyim9WJ g/XYp1viFBnRS9rKE64duC1impVBNFMQPzYxmOUFdnfe5rpAbQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ/KUuM4spE8ljPkEH4wOgypaXZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBh1R4AwQB 2KiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABsbA23c6DRIa5TnX3Bj+LA0V6hTE581cr7v4BrkrumkToZP E9lHo77zpx/s2B/+wblihrMFJYkPx1lglMlMWtlpzOvZsuEI4uuVtDf9w/DQY4WJ FuDw4PtSCTzxPey3dA+OcXroRBFlLo5pbXnS6nwUujW3/s7rC8f4E+v0oIlT9BJL ZCu73LfHnwuOd8tpE0UuFmet6bZ8Q1WMtidpmrXFgXP+8z+5CyymxCCEJJe6J1Wl 4YGEV+PBXSZslnxH1lnBdF2oWuolyoAwEsLCaoEx1s//ZZT5EnLB2as7685myLBX Trv8l0X3RR4MbqFDBMk3Lnq2sgsDKGTSqQOpkwo= -----END CERTIFICATE-----Generated at Sat Sep 26 02:59:41 2026 by rpki-client