$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa File: b9e8f069-91b2-31a8-95be-93db8964f515.roa (raw, json) Hash identifier: zhBM04QAVBZOGBVAPXGYoPFQB5GUOyxOTLB0N5WTAPY= Subject key identifier: 19:C6:6F:54:F6:08:D4:9A:77:EB:35:7D:D1:12:DD:CE:BD:B5:DB:F8 Certificate issuer: /CN=81216c68-71e2-4795-933c-05f1e22d0c17 Certificate serial: 010D0C9F4328584F0C0782A7A04ACD5593423A80 Authority key identifier: E7:67:85:ED:8B:EF:52:31:FC:98:2E:05:8D:26:C3:98:2A:CA:80:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 17196 IP address blocks: 192.203.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:82:a7:a0:4a:cd:55:93:42:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81216c68-71e2-4795-933c-05f1e22d0c17 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=61ff70d2-c87c-4405-bc14-3d04ee029c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:9d:6f:52:81:19:74:bc:6d:e8:09:07:9d: 82:59:b6:05:39:0f:5f:60:13:65:4b:b5:90:ad:29: 8d:eb:85:14:af:f3:93:eb:29:ca:a6:e3:7a:4b:76: c8:1b:5d:7c:9e:b7:25:03:56:86:c5:92:65:62:fc: 13:19:e2:4f:8c:2f:1e:3e:60:f0:54:49:3a:63:18: 2a:1f:27:66:4d:a3:22:ed:96:3e:2b:74:ff:28:9d: 0d:ec:4a:de:95:32:52:2b:6d:b0:8f:b4:0e:ef:2d: c4:3f:2f:cd:ac:87:03:b9:3f:21:9d:7a:30:76:3c: c2:97:17:4b:09:33:fa:af:88:00:0a:71:55:45:15: 88:70:ca:f8:52:cb:28:29:0b:18:00:f3:89:7b:dd: 55:3b:42:31:a7:ba:dc:bc:1c:e3:d8:8a:a8:1c:37: af:87:d0:83:93:20:dc:10:e8:87:fd:4b:93:df:79: a9:41:aa:72:7d:95:40:54:87:53:2c:f1:0a:e2:fa: b2:f5:f3:7b:a9:32:5e:ba:23:4a:e3:b8:ec:df:54: a5:f2:76:94:c6:38:8e:96:db:d2:fa:67:01:2f:54: d2:4a:05:af:c2:7e:dd:08:18:f9:70:09:f9:fc:8f: 2a:ca:e9:56:e1:92:eb:e7:b0:eb:b1:31:20:bc:0b: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C6:6F:54:F6:08:D4:9A:77:EB:35:7D:D1:12:DD:CE:BD:B5:DB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.crl X509v3 Authority Key Identifier: keyid:E7:67:85:ED:8B:EF:52:31:FC:98:2E:05:8D:26:C3:98:2A:CA:80:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer sbgp-ipAddrBlock: critical IPv4: 192.203.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4c:cf:5a:c0:9a:12:0e:2f:8d:c4:ff:78:0a:af:c6:16:d7: 1c:21:45:78:c9:17:bb:09:3d:c5:5f:2c:05:02:db:cd:46:e6: b3:ab:74:38:28:13:14:4e:70:f2:e9:74:07:fd:06:42:ee:e4: 0e:e9:ef:11:c7:f4:8d:98:6a:f3:0a:d1:ab:5b:b1:49:84:c2: 5b:a6:c5:d2:d3:d2:b0:2c:0a:34:96:c0:b3:4a:81:cf:13:37: 71:74:ed:af:2e:80:ec:76:c3:a3:7e:f6:7f:1c:27:24:20:0d: 13:b8:19:dc:53:30:29:b8:8e:9b:42:7e:dc:d6:89:48:56:4d: 1a:a9:e9:92:40:b1:37:b1:c2:ca:ec:6c:4e:28:de:88:bc:a5: bb:af:78:cd:08:dd:8e:d8:42:b1:78:69:40:ac:60:9e:e6:24: 91:a2:ad:cb:db:bb:f5:21:67:6e:13:e6:71:bb:46:84:e9:b7: 12:54:a1:b5:16:12:06:0d:4b:ce:ab:5f:ad:7a:1b:7c:19:0d: 02:54:6b:eb:c6:4a:9a:cd:97:e4:29:9e:af:62:58:e6:5c:3a: e4:21:fc:f9:f7:a5:e8:78:a7:23:54:e6:4e:f9:5a:65:a6:6b: 1c:1c:e0:62:e7:8e:11:be:a2:e2:d7:5d:28:7f:10:9b:21:54: 4e:43:7d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4KnoErNVZNCOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEyMTZjNjgtNzFlMi00Nzk1LTkzM2MtMDVmMWUyMmQw YzE3MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk NjFmZjcwZDItYzg3Yy00NDA1LWJjMTQtM2QwNGVlMDI5YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+db1KBGXS8begJB52CWbYFOQ9fYBNlS7WQ rSmN64UUr/OT6ynKpuN6S3bIG118nrclA1aGxZJlYvwTGeJPjC8ePmDwVEk6Yxgq HydmTaMi7ZY+K3T/KJ0N7ErelTJSK22wj7QO7y3EPy/NrIcDuT8hnXowdjzClxdL CTP6r4gACnFVRRWIcMr4UssoKQsYAPOJe91VO0Ixp7rcvBzj2IqoHDevh9CDkyDc EOiH/UuT33mpQapyfZVAVIdTLPEK4vqy9fN7qTJeuiNK47js31Sl8naUxjiOltvS +mcBL1TSSgWvwn7dCBj5cAn5/I8qyulW4ZLr57DrsTEgvAtikwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnGb1T2CNSad+s1fdES3c69tdv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84MTIx NmM2OC03MWUyLTQ3OTUtOTMzYy0wNWYxZTIyZDBjMTcvYjllOGYwNjktOTFiMi0z MWE4LTk1YmUtOTNkYjg5NjRmNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODEyMTZjNjgtNzFlMi00Nzk1LTkz M2MtMDVmMWUyMmQwYzE3LzgxMjE2YzY4LTcxZTItNDc5NS05MzNjLTA1ZjFlMjJk MGMxNy5jcmwwHwYDVR0jBBgwFoAU52eF7YvvUjH8mC4FjSbDmCrKgNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84MTIxNmM2OC03MWUyLTQ3OTUtOTMzYy0wNWYx ZTIyZDBjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpMz1rAmhIOL43E/3gKr8YW1xwhRXjJF7sJPcVfLAUC281G5rOrdDgo ExROcPLpdAf9BkLu5A7p7xHH9I2YavMK0atbsUmEwlumxdLT0rAsCjSWwLNKgc8T N3F07a8ugOx2w6N+9n8cJyQgDRO4GdxTMCm4jptCftzWiUhWTRqp6ZJAsTexwsrs bE4o3oi8pbuveM0I3Y7YQrF4aUCsYJ7mJJGircvbu/UhZ24T5nG7RoTptxJUobUW EgYNS86rX616G3wZDQJUa+vGSprNl+Qpnq9iWOZcOuQh/Pn3peh4pyNU5k75WmWm axwc4GLnjhG+ouLXXSh/EJshVE5Dfb8= -----END CERTIFICATE-----Generated at Wed Sep 23 10:20:35 2026 by rpki-client