$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa File: 13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa (raw, json) Hash identifier: 454LNHGonhGUhcPVMg/8XVU8fBQMXtV12IVYTvplL1k= Subject key identifier: 25:5A:2A:0E:EE:BE:9E:1D:B7:65:53:D2:E9:E9:5D:91:3F:FD:A6:8C Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C20C8486572C9A2BDFBBE0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 137.220.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0c:84:86:57:2c:9a:2b:df:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=8e8dcd3f-a01b-4437-8677-03c3f172e3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:a5:4a:38:01:e2:91:4a:f0:aa:a1:0b:e8: f0:b6:6d:8d:f8:de:49:71:c1:f2:e9:77:29:92:4a: ed:12:23:96:7a:ff:ac:71:f1:2d:1a:e9:62:94:c2: 4f:c1:1d:3f:eb:54:17:bd:b7:aa:07:ed:d0:0e:72: 53:ac:84:d6:fb:5c:ff:71:0e:5d:82:4c:79:44:a0: ab:37:02:f1:f9:e8:d9:4a:0e:23:9a:b3:69:7d:f4: 29:9f:6d:ba:c9:48:f9:df:f3:c0:06:45:9e:d2:b7: 50:b6:2d:27:67:1f:d1:2f:73:d4:7e:01:c7:b4:57: 40:66:55:da:de:63:c6:47:dd:d4:44:be:53:96:33: 28:da:18:07:90:37:a2:26:65:48:de:9a:75:e4:46: 1f:2b:41:ca:96:01:b3:78:73:36:df:30:bc:aa:9b: a8:67:a4:ca:a5:ce:7a:f3:9f:e8:0e:8d:a6:78:3a: bf:f0:9d:c4:93:cd:e0:98:7c:8a:5f:0c:fb:2c:7b: a1:d3:d5:d3:5b:3b:2b:26:5b:34:e9:81:5c:f2:50: 2a:d5:e3:ff:8c:b8:76:84:cd:a9:b0:04:a1:47:7c: dd:dd:f4:3b:04:35:68:9a:0f:07:17:6c:ff:64:02: 77:c7:7d:5e:1b:36:5d:3d:88:e2:ce:b3:af:f0:cf: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5A:2A:0E:EE:BE:9E:1D:B7:65:53:D2:E9:E9:5D:91:3F:FD:A6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 137.220.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ca:ad:00:4d:f1:c6:02:4e:b4:33:b7:23:6e:e4:f0:6b:e5: 7a:d5:11:d7:2b:2f:05:dc:85:02:86:4e:e9:32:da:02:5e:4b: 42:8e:ad:b0:3b:e8:5e:97:e8:d6:0a:82:a2:93:92:f1:51:f2: 51:35:c2:7c:26:2b:88:a9:08:db:7d:30:ee:b1:dc:1e:f0:11: 75:7d:73:b5:5c:3c:ad:d8:ce:bf:6d:81:f9:48:2d:6a:83:ba: a6:5d:de:fb:15:0d:93:ee:98:99:1e:98:b0:d3:5f:6f:50:ea: 05:42:1f:0f:a4:37:fc:b2:84:11:08:c8:ef:a1:96:d7:47:a0: 90:49:c8:5c:89:a5:b1:5e:26:87:d3:3e:81:89:b2:0d:65:db: b4:49:ed:cf:d6:00:b7:e1:ad:b5:ea:d9:49:ed:ee:78:ea:5d: ce:39:39:55:64:fa:f0:31:89:f5:49:92:fe:eb:63:13:51:cf: d5:cd:31:4b:cf:ed:5d:3d:2e:12:19:c1:5b:ad:7a:55:c3:fc: 29:56:00:c7:fd:7b:04:6c:cb:c8:b3:a8:a6:24:ba:a9:e5:1a: ce:ec:f5:a1:ef:55:8a:7a:9b:0b:92:bc:0f:9b:47:3d:c4:67: ed:76:d1:e8:31:16:6f:a0:98:b1:9f:b0:e4:7e:76:2b:53:6c: 23:08:ff:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgyEhlcsmivfu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk OGU4ZGNkM2YtYTAxYi00NDM3LTg2NzctMDNjM2YxNzJlM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3GlSjgB4pFK8KqhC+jwtm2N+N5JccHy6Xcp kkrtEiOWev+scfEtGulilMJPwR0/61QXvbeqB+3QDnJTrITW+1z/cQ5dgkx5RKCr NwLx+ejZSg4jmrNpffQpn226yUj53/PABkWe0rdQti0nZx/RL3PUfgHHtFdAZlXa 3mPGR93URL5TljMo2hgHkDeiJmVI3pp15EYfK0HKlgGzeHM23zC8qpuoZ6TKpc56 85/oDo2meDq/8J3Ek83gmHyKXwz7LHuh09XTWzsrJls06YFc8lAq1eP/jLh2hM2p sAShR3zd3fQ7BDVomg8HF2z/ZAJ3x31eGzZdPYjizrOv8M+qOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVaKg7uvp4dt2VT0unpXZE//aaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMTNiOWRjNjQtZmNkNi0z MTY4LWJiOGYtNWFhMjgyNmQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAidwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7KrQBN8cYCTrQztyNu5PBr5XrVEdcrLwXchQKGTuky2gJeS0KOrbA7 6F6X6NYKgqKTkvFR8lE1wnwmK4ipCNt9MO6x3B7wEXV9c7VcPK3Yzr9tgflILWqD uqZd3vsVDZPumJkemLDTX29Q6gVCHw+kN/yyhBEIyO+hltdHoJBJyFyJpbFeJofT PoGJsg1l27RJ7c/WALfhrbXq2Unt7njqXc45OVVk+vAxifVJkv7rYxNRz9XNMUvP 7V09LhIZwVutelXD/ClWAMf9ewRsy8izqKYkuqnlGs7s9aHvVYp6mwuSvA+bRz3E Z+120egxFm+gmLGfsOR+ditTbCMI/1c= -----END CERTIFICATE-----Generated at Sat Sep 26 15:30:26 2026 by rpki-client