$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dfe90217-11d7-3e1d-9bef-8dfe08d841ce.roa File: dfe90217-11d7-3e1d-9bef-8dfe08d841ce.roa (raw, json) Hash identifier: 3Eh+FKk4Wd2s8dkZz2T7+MEM1FCbK+fdymVSW0v4NMU= Subject key identifier: 61:8B:9C:12:0C:19:D7:E9:BA:B2:EB:24:90:88:7D:D6:B3:59:B9:67 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584DF640B024687AB757D09C5C40 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dfe90217-11d7-3e1d-9bef-8dfe08d841ce.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 397325 IP address blocks: 192.31.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:b0:24:68:7a:b7:57:d0:9c:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=8a210181-5e9b-4592-8be8-3dd335006b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:7a:40:bc:e0:8f:86:c9:24:19:9b:cd:e6: 94:49:de:97:01:d8:3c:be:7c:ec:95:73:4f:d9:c1: 43:c4:fc:ae:74:6e:55:1c:0f:79:d2:dc:cf:eb:fe: 59:a9:19:28:d8:ea:a1:ca:d2:17:9d:49:ae:47:e1: 6a:b8:fd:4e:a8:fe:46:68:d2:c3:f4:17:be:5f:56: 88:48:7e:14:2d:0d:21:ca:e1:04:fc:3b:30:71:30: dd:ea:4a:de:d0:32:ec:1d:6a:52:de:d6:59:33:a1: bc:27:0d:79:15:55:77:53:66:4e:f9:d4:97:1e:9b: 90:5b:34:8d:17:47:a1:c4:95:7b:37:90:f2:0d:18: f4:91:41:9f:97:d6:5b:43:63:e6:bc:1c:31:f1:27: 38:ce:d5:3a:e0:e3:fb:82:6b:7b:ad:55:3b:3b:51: d4:58:28:6c:a1:c2:1b:d8:24:f2:65:98:f2:c4:39: fa:53:1e:e9:8b:3d:64:d4:5d:ac:f0:2f:e4:1e:d5: 6e:18:94:75:e8:0f:c3:80:a9:94:f8:7f:10:97:93: 42:0c:74:ea:b9:fc:d9:f3:2a:1c:2b:1b:87:7a:ba: 6e:f0:93:07:6b:46:cf:b2:16:fe:99:e8:e5:24:e1: 53:e9:e3:b6:af:8e:59:a9:59:71:09:ba:57:a1:77: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8B:9C:12:0C:19:D7:E9:BA:B2:EB:24:90:88:7D:D6:B3:59:B9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dfe90217-11d7-3e1d-9bef-8dfe08d841ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ea:35:3f:7f:38:6c:52:ce:bc:8f:63:b0:48:2e:ac:bc:9d: d8:b1:b0:e7:23:b9:58:6a:04:ea:0b:7d:76:6b:0b:af:4a:6f: 75:68:8f:3c:bf:33:1f:79:fd:fa:37:ed:90:66:4f:b3:1a:4f: eb:4f:8e:88:c2:bc:93:ea:3a:bd:45:b6:d5:c9:0b:52:f5:68: 51:14:f6:8c:ca:e2:f7:5a:f4:72:9f:00:7e:41:e2:11:ae:25: f4:ed:db:f7:61:ed:cc:85:ea:e9:e1:6c:b7:47:94:af:df:6e: a0:e9:f3:55:26:e1:8a:ea:e6:af:ad:b4:41:8f:76:05:2e:90: 96:a9:fe:fe:41:4e:84:72:1f:bb:b9:5e:53:58:cd:8e:42:8d: 1c:d2:b8:9c:e1:20:0d:08:bf:c0:b3:de:d4:05:68:85:e3:0e: 58:1d:8c:28:ad:20:8b:56:a2:03:f1:16:31:df:4a:c4:9a:f0: 98:7f:ea:9d:1e:b8:56:2e:ad:81:d9:cf:40:0a:74:81:ed:41: dc:02:a6:19:4d:ce:eb:be:e7:33:bc:cb:7c:21:dc:bd:8f:b9: d3:7f:1c:b3:93:d4:83:fb:af:2c:df:f8:c8:9e:bc:32:d1:cd: be:2a:76:59:b2:45:ad:a3:b0:c5:b8:45:3b:90:67:46:a1:a2: 48:33:64:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QLAkaHq3V9CcXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk OGEyMTAxODEtNWU5Yi00NTkyLThiZTgtM2RkMzM1MDA2YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvot6QLzgj4bJJBmbzeaUSd6XAdg8vnzslXNP 2cFDxPyudG5VHA950tzP6/5ZqRko2OqhytIXnUmuR+FquP1OqP5GaNLD9Be+X1aI SH4ULQ0hyuEE/DswcTDd6kre0DLsHWpS3tZZM6G8Jw15FVV3U2ZO+dSXHpuQWzSN F0ehxJV7N5DyDRj0kUGfl9ZbQ2PmvBwx8Sc4ztU64OP7gmt7rVU7O1HUWChsocIb 2CTyZZjyxDn6Ux7piz1k1F2s8C/kHtVuGJR16A/DgKmU+H8Ql5NCDHTqufzZ8yoc KxuHerpu8JMHa0bPshb+mejlJOFT6eO2r45ZqVlxCbpXoXcTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGLnBIMGdfpurLrJJCIfdazWblnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvZGZlOTAyMTctMTFkNy0z ZTFkLTliZWYtOGRmZTA4ZDg0MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfqNT9/OGxSzryPY7BILqy8ndixsOcjuVhqBOoLfXZrC69Kb3Vojzy/ Mx95/fo37ZBmT7MaT+tPjojCvJPqOr1FttXJC1L1aFEU9ozK4vda9HKfAH5B4hGu JfTt2/dh7cyF6unhbLdHlK/fbqDp81Um4Yrq5q+ttEGPdgUukJap/v5BToRyH7u5 XlNYzY5CjRzSuJzhIA0Iv8Cz3tQFaIXjDlgdjCitIItWogPxFjHfSsSa8Jh/6p0e uFYurYHZz0AKdIHtQdwCphlNzuu+5zO8y3wh3L2PudN/HLOT1IP7ryzf+MievDLR zb4qdlmyRa2jsMW4RTuQZ0ahokgzZDU= -----END CERTIFICATE-----Generated at Sat Jun 13 13:21:13 2026 by rpki-client