$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf94be9-3f9b-303f-bd69-8871f3a7008c.roa File: acf94be9-3f9b-303f-bd69-8871f3a7008c.roa (raw, json) Hash identifier: qNJuOut/jFtyVPpdu6VXOA+O4V0+8XPtL9wT48gznMU= Subject key identifier: 4E:EC:93:D1:CD:2F:9C:23:8C:73:E0:82:1C:75:C5:C4:85:46:72:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA78F21F8E8A022EB9662BBF4 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf94be9-3f9b-303f-bd69-8871f3a7008c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 136.68.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:21:f8:e8:a0:22:eb:96:62:bb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=643c5c0a-7e01-4b9d-9206-42f97bf88239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ba:74:bb:d9:9f:62:4e:75:d9:e2:5d:b6:6f: 5d:fa:ed:00:28:ea:0a:5d:c3:21:78:2a:6b:dd:64: 67:34:4d:7a:dd:50:f6:2b:19:1a:17:94:bf:12:cb: b6:4e:6d:9d:8f:4b:32:c3:b3:64:b5:b4:b4:29:0b: 01:2a:16:ee:16:10:27:55:dd:8d:f6:af:72:56:13: 8a:2a:14:3f:88:02:91:48:3b:40:d7:da:1c:f0:1d: bf:b0:b0:ad:c9:82:18:84:26:eb:b5:72:07:4e:ae: 31:0e:4b:0b:67:ba:01:e8:ff:32:92:ae:8f:cd:17: 06:19:79:2c:c0:f6:26:98:6d:65:8f:b1:7f:fd:4d: 38:e2:2d:78:03:50:dc:94:66:21:d7:fa:7d:7d:11: f7:45:7e:24:fc:99:4d:7c:c2:ed:d9:88:d9:3e:39: 2f:1b:e2:b1:af:5d:b2:61:64:e5:6d:e5:23:d0:62: 24:3a:58:6b:cb:5d:0b:12:92:88:22:d9:d9:b2:7b: cd:65:2c:94:91:43:8d:69:ed:0f:aa:99:be:cf:87: 5d:e5:1b:88:48:8f:27:c2:01:20:49:89:de:99:0e: 24:1c:d9:18:f9:22:89:12:5e:6d:84:63:1e:28:54: bd:20:c7:29:0c:12:28:7b:5e:55:8b:fb:4b:26:9e: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EC:93:D1:CD:2F:9C:23:8C:73:E0:82:1C:75:C5:C4:85:46:72:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf94be9-3f9b-303f-bd69-8871f3a7008c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.68.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c5:4f:74:0f:23:e5:be:b0:12:f8:f0:c3:22:a9:68:09:7f: 6a:e2:31:da:8f:16:0d:e5:24:74:2f:4d:42:e1:3a:db:f6:ce: d4:9d:39:cf:62:04:e2:1f:c0:25:b9:88:da:f5:fa:d7:d1:c9: 2c:de:70:ef:27:ad:83:2b:42:14:66:6b:f4:8a:6b:3e:83:e1: 1b:7d:a8:70:80:f4:b3:ff:8f:75:91:67:ba:30:21:aa:f9:c4: 73:c7:64:0f:74:a9:48:09:18:0e:25:0f:52:88:05:c7:f9:0f: 2f:76:07:2e:f7:5f:c6:45:fc:29:75:88:6a:58:43:70:a3:52: 26:c0:34:f7:4e:f2:7d:2b:df:eb:d1:13:de:10:7b:0a:a3:37: e2:f6:5b:39:25:75:c8:19:ff:42:1e:92:0b:40:cf:4e:2f:57: d7:e4:db:ed:94:c4:e5:3c:fe:5b:39:ad:18:01:82:50:56:37: a7:bc:89:2a:2a:49:b0:d5:02:ab:1a:e5:2a:85:3b:a3:d1:27: 26:6b:99:3c:e4:3a:46:96:a4:a6:17:b2:9a:c6:8d:6f:75:7a: 73:5b:3b:b1:8f:38:e3:a7:ad:94:0d:b1:c5:92:0e:96:01:1e: df:af:24:43:43:7f:cb:c9:57:d0:bd:9a:c0:9b:d9:73:95:db: fa:d7:08:f2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6njyH46KAi65Ziu/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjQzYzVjMGEtN2UwMS00YjlkLTkyMDYtNDJmOTdiZjg4MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbp0u9mfYk512eJdtm9d+u0AKOoKXcMheCpr 3WRnNE163VD2KxkaF5S/Esu2Tm2dj0syw7NktbS0KQsBKhbuFhAnVd2N9q9yVhOK KhQ/iAKRSDtA19oc8B2/sLCtyYIYhCbrtXIHTq4xDksLZ7oB6P8ykq6PzRcGGXks wPYmmG1lj7F//U044i14A1DclGYh1/p9fRH3RX4k/JlNfMLt2YjZPjkvG+Kxr12y YWTlbeUj0GIkOlhry10LEpKIItnZsnvNZSyUkUONae0Pqpm+z4dd5RuISI8nwgEg SYnemQ4kHNkY+SKJEl5thGMeKFS9IMcpDBIoe15Vi/tLJp5amQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE7sk9HNL5wjjHPgghx1xcSFRnLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWNmOTRiZTktM2Y5Yi0z MDNmLWJkNjktODg3MWYzYTcwMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiEQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEcVPdA8j5b6wEvjwwyKpaAl/auIx2o8WDeUkdC9NQuE62/bO1J05z2IE 4h/AJbmI2vX619HJLN5w7yetgytCFGZr9IprPoPhG32ocID0s/+PdZFnujAhqvnE c8dkD3SpSAkYDiUPUogFx/kPL3YHLvdfxkX8KXWIalhDcKNSJsA0907yfSvf69ET 3hB7CqM34vZbOSV1yBn/Qh6SC0DPTi9X1+Tb7ZTE5Tz+WzmtGAGCUFY3p7yJKipJ sNUCqxrlKoU7o9EnJmuZPOQ6RpakpheymsaNb3V6c1s7sY8446etlA2xxZIOlgEe 368kQ0N/y8lX0L2awJvZc5Xb+tcI8g== -----END CERTIFICATE-----Generated at Wed Jul 29 15:26:57 2026 by rpki-client