$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa File: acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa (raw, json) Hash identifier: TauEqVF+vC8PxgI5T/EQXBclLNKDVU6qY2wSv/GLGow= Subject key identifier: 8A:E8:1B:4F:E5:DB:3A:F1:B5:0F:11:14:DD:37:9E:A2:79:56:C5:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D733C1F310FBC1F196EB88E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa Signing time: Thu 09 Apr 2026 14:40:40 +0000 ROA not before: Thu 09 Apr 2026 14:40:40 +0000 ROA not after: Wed 08 Jul 2026 14:40:40 +0000 asID: 36040 IP address blocks: 136.124.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:3c:1f:31:0f:bc:1f:19:6e:b8:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 9 14:40:40 2026 GMT Not After : Jul 8 14:40:40 2026 GMT Subject: CN=147d39b2-e62c-4df1-8596-c7b29f2c658f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:17:c3:1e:b9:04:a4:30:6e:3a:cc:db:20: a2:6a:e2:5c:e5:c1:87:43:15:b6:81:7d:74:c3:62: 31:61:98:b0:95:db:d2:c6:73:a6:01:b8:e8:42:55: c4:1a:61:68:2f:b5:c7:3d:69:04:82:39:ab:b2:97: e9:bf:fe:9e:9c:97:d0:82:c8:2b:8c:b5:cd:95:df: 4a:7d:28:3b:13:18:f4:05:84:7e:93:da:04:25:a7: 91:a2:cf:26:af:cb:09:b2:08:1b:5a:e5:c8:eb:eb: 84:b8:3d:8a:b5:72:61:ab:a0:a3:6c:6c:5f:c0:d5: 84:97:6e:40:5a:e9:98:66:31:f4:e8:6a:c4:06:df: e2:fa:a3:c9:3c:fe:19:65:4a:f4:e0:31:b3:70:69: b9:2f:be:af:35:bc:84:36:49:d9:ef:10:13:08:b1: c0:da:6d:4f:d6:ff:f2:fb:8c:33:42:0c:8e:89:c5: f0:9b:32:62:b9:91:78:ce:1b:41:29:be:d9:65:0f: 67:6d:98:17:f6:ef:b5:f6:49:77:96:68:d8:0d:be: 45:79:38:e1:20:43:7d:63:6a:80:32:fb:3b:ab:2b: 33:50:00:20:b2:80:ed:22:6d:39:ec:d2:f4:d7:e7: b0:39:dd:b4:aa:f2:e0:51:98:f7:e6:65:81:af:47: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E8:1B:4F:E5:DB:3A:F1:B5:0F:11:14:DD:37:9E:A2:79:56:C5:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.124.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8a:f8:0a:26:0c:1e:4d:76:7a:11:15:a5:35:22:05:46:02: b7:83:8a:07:d7:f0:94:2c:dc:61:e8:f2:26:4a:93:bc:49:4e: 40:70:56:4d:df:53:59:c6:c6:1b:5f:00:e6:4f:6e:95:72:f0: ff:1d:50:8d:7a:14:90:b3:40:a9:b9:92:dd:b6:09:fb:72:61: 07:46:09:6e:01:1a:9a:3d:61:de:a0:ec:46:23:fe:37:1d:f7: eb:14:34:3e:1e:4c:14:09:b3:e8:d0:ae:13:d9:23:75:6f:45: 60:c3:ad:f5:9e:78:95:38:e2:c1:71:8b:d9:e3:65:8e:e7:7c: 11:59:81:4a:32:c6:bc:27:c2:9a:e3:2e:f2:d8:8a:bb:5c:8b: 06:ed:60:16:ea:c1:fb:70:f6:7c:70:21:5f:ee:3d:6b:23:25: 73:7d:00:13:56:a7:c3:02:1b:cb:68:96:e4:c5:5f:c8:d0:f8: ac:ec:1f:c9:af:c7:f9:0a:6b:9e:4a:71:01:bc:84:b0:a4:c1: d5:33:b9:e0:bb:4f:84:f8:b8:7f:52:98:bb:b6:01:ff:92:40: 7f:38:64:6d:cd:ab:55:48:fc:c0:cf:e8:7e:76:d2:17:6c:ab: f0:e1:43:74:42:04:82:6a:8a:3d:31:c8:fb:98:23:d7:95:36: aa:67:2a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zPB8xD7wfGW64joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwOTE0NDA0MFoXDTI2MDcwODE0NDA0MFowLzEtMCsGA1UEAxMk MTQ3ZDM5YjItZTYyYy00ZGYxLTg1OTYtYzdiMjlmMmM2NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd0Xwx65BKQwbjrM2yCiauJc5cGHQxW2gX10 w2IxYZiwldvSxnOmAbjoQlXEGmFoL7XHPWkEgjmrspfpv/6enJfQgsgrjLXNld9K fSg7Exj0BYR+k9oEJaeRos8mr8sJsggbWuXI6+uEuD2KtXJhq6CjbGxfwNWEl25A WumYZjH06GrEBt/i+qPJPP4ZZUr04DGzcGm5L76vNbyENknZ7xATCLHA2m1P1v/y +4wzQgyOicXwmzJiuZF4zhtBKb7ZZQ9nbZgX9u+19kl3lmjYDb5FeTjhIEN9Y2qA Mvs7qyszUAAgsoDtIm057NL01+ewOd20qvLgUZj35mWBr0cI9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIroG0/l2zrxtQ8RFN03nqJ5VsXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWNmM2FhZWEtNzIyMi0z MjNjLWI2MjAtZGRmMWM5ZmE2YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiHx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuK+AomDB5NdnoRFaU1IgVGAreDigfX8JQs3GHo8iZKk7xJTkBwVk3f U1nGxhtfAOZPbpVy8P8dUI16FJCzQKm5kt22CftyYQdGCW4BGpo9Yd6g7EYj/jcd 9+sUND4eTBQJs+jQrhPZI3VvRWDDrfWeeJU44sFxi9njZY7nfBFZgUoyxrwnwprj LvLYirtciwbtYBbqwftw9nxwIV/uPWsjJXN9ABNWp8MCG8toluTFX8jQ+KzsH8mv x/kKa55KcQG8hLCkwdUzueC7T4T4uH9SmLu2Af+SQH84ZG3Nq1VI/MDP6H520hds q/DhQ3RCBIJqij0xyPuYI9eVNqpnKoo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:37:18 2026 by rpki-client