$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa File: d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa (raw, json) Hash identifier: CKGpQRuapaz6ugJhC1XUxaRr5iJDNgO+OHD7YLounI0= Subject key identifier: 9C:26:51:A4:AE:54:86:1D:51:9A:8C:57:A3:41:92:B7:F8:05:AF:FC Certificate issuer: /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Certificate serial: 010D0C9F4328584EF87CBF3F138DCCE3EB63B200 Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 7922 IP address blocks: 139.64.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bf:3f:13:8d:cc:e3:eb:63:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=39b1b792-f84a-46d0-99ae-918d9a0cc828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:a5:d3:08:ec:6b:bd:b0:ec:aa:0e:11:03: 83:42:29:3a:aa:96:32:fe:d2:4d:16:13:8d:ae:ab: 48:4e:e2:1c:7b:2c:e4:85:75:dc:a6:b3:06:1d:88: 2f:68:95:e3:b0:d1:7d:84:6f:80:ff:8a:67:d4:da: 2a:14:ec:83:bd:c9:c1:70:7e:4c:38:6c:97:ad:78: c4:c3:75:b5:31:d1:e5:9c:1d:31:4b:c8:43:29:96: a7:83:47:c4:5e:0c:49:b7:11:56:c1:c7:c4:f2:b6: be:23:02:a4:4e:ba:62:04:e4:ef:c4:5d:d9:cf:9a: c0:d0:38:f8:9a:61:5f:cd:87:51:12:00:ee:56:a6: b4:26:da:33:23:2a:a7:f1:03:e6:28:d5:bd:85:be: 6c:9e:87:6d:80:7f:4f:81:7c:a2:5d:f8:39:2f:e8: 74:a7:43:8a:fc:f5:82:6a:8b:81:cd:16:63:f3:d6: 69:21:c2:d9:0c:8b:e9:c6:22:38:33:99:82:35:b1: 39:76:25:59:b0:d5:26:c3:6a:08:af:f8:bb:fa:02: 0d:2b:a3:93:ff:65:f0:7b:c2:39:e0:b0:ea:78:58: a5:6c:1a:7b:d7:07:f2:1d:6d:7f:2d:50:33:da:b3: b1:29:14:99:6a:af:3b:c2:e9:e3:29:ac:19:0e:37: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:51:A4:AE:54:86:1D:51:9A:8C:57:A3:41:92:B7:F8:05:AF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl X509v3 Authority Key Identifier: keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer sbgp-ipAddrBlock: critical IPv4: 139.64.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1d:e1:69:d5:a9:07:87:0f:f8:31:ab:3a:8b:6b:7f:c0:14: c4:30:34:d8:b4:aa:75:0d:a6:88:b6:c9:8e:5a:21:cd:19:b4: 13:fa:65:a9:ad:65:f1:eb:92:45:a3:04:43:39:32:e7:51:c7: b8:5d:fe:35:10:8a:c6:dd:45:3d:25:77:6b:c7:7f:c1:fe:4c: b4:9e:50:86:93:fe:0b:bb:08:05:df:d0:48:22:51:6a:f7:7e: 90:89:eb:90:4f:e9:20:de:9c:0e:32:fe:27:96:6b:89:0a:bb: 89:4d:21:4a:8c:96:7e:a0:83:90:71:7a:80:5e:7a:7b:57:2f: 03:0b:e3:60:b8:bc:6e:28:d9:0f:a8:eb:22:62:16:72:d6:46: df:06:4c:3e:07:64:d9:6c:09:bb:f9:b7:01:5c:5f:85:a9:5e: 70:8c:19:51:f3:8f:47:b6:dc:8d:a2:20:a1:c1:a9:0f:bf:ad: ae:48:fa:9d:51:23:0e:6b:9a:76:02:72:67:68:1e:53:0a:9a: 52:a4:4e:0d:63:17:ec:4a:c4:ca:90:73:d4:62:35:6e:4d:47: 27:d9:06:c5:5a:c1:92:f1:4d:fa:fa:e2:cf:ec:23:9f:ad:ea: 35:76:51:11:b5:b0:5b:e8:dd:a9:4d:c9:b5:24:63:83:88:f4: 8b:f2:91:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL8/E43M4+tjsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlNzU5NDAtOGZmNy00MTI4LWFjMTMtNmZhMjgzNmE5 YjJiMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MzliMWI3OTItZjg0YS00NmQwLTk5YWUtOTE4ZDlhMGNjODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbKl0wjsa72w7KoOEQODQik6qpYy/tJNFhON rqtITuIceyzkhXXcprMGHYgvaJXjsNF9hG+A/4pn1NoqFOyDvcnBcH5MOGyXrXjE w3W1MdHlnB0xS8hDKZang0fEXgxJtxFWwcfE8ra+IwKkTrpiBOTvxF3Zz5rA0Dj4 mmFfzYdREgDuVqa0JtozIyqn8QPmKNW9hb5snodtgH9PgXyiXfg5L+h0p0OK/PWC aouBzRZj89ZpIcLZDIvpxiI4M5mCNbE5diVZsNUmw2oIr/i7+gINK6OT/2Xwe8I5 4LDqeFilbBp71wfyHW1/LVAz2rOxKRSZaq87wunjKawZDjeglQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwmUaSuVIYdUZqMV6NBkrf4Ba/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3 NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEyODM2YTliMmIvZDExNjJiNWMtNWY1ZS0z NmU2LThkOWQtNDE2YmJmM2ZmOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTNlNzU5NDAtOGZmNy00MTI4LWFj MTMtNmZhMjgzNmE5YjJiL2EzZTc1OTQwLThmZjctNDEyOC1hYzEzLTZmYTI4MzZh OWIyYi5jcmwwHwYDVR0jBBgwFoAUtnfXS1I2CdWBxZUHALmyKsonuvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEy ODM2YTliMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYd4WnVqQeHD/gxqzqLa3/AFMQwNNi0qnUNpoi2yY5aIc0ZtBP6Zamt ZfHrkkWjBEM5MudRx7hd/jUQisbdRT0ld2vHf8H+TLSeUIaT/gu7CAXf0EgiUWr3 fpCJ65BP6SDenA4y/ieWa4kKu4lNIUqMln6gg5BxeoBeentXLwML42C4vG4o2Q+o 6yJiFnLWRt8GTD4HZNlsCbv5twFcX4WpXnCMGVHzj0e23I2iIKHBqQ+/ra5I+p1R Iw5rmnYCcmdoHlMKmlKkTg1jF+xKxMqQc9RiNW5NRyfZBsVawZLxTfr64s/sI5+t 6jV2URG1sFvo3alNybUkY4OI9IvykYo= -----END CERTIFICATE-----Generated at Tue Sep 22 09:05:33 2026 by rpki-client