$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa File: a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa (raw, json) Hash identifier: w/tdQ0QqjilLb7D6pnQzGlWekufo6LDBH7szUjK4ZDs= Subject key identifier: F9:87:8E:64:3D:AF:0B:02:06:04:B2:6F:CA:36:88:AC:4C:29:7F:97 Certificate issuer: /CN=61249665-c04a-42df-b2a8-e643b7fab80e Certificate serial: 010D0C9F4328584F13023AD39032B0563BFA1B80 Authority key identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 40674 IP address blocks: 192.33.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3a:d3:90:32:b0:56:3b:fa:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61249665-c04a-42df-b2a8-e643b7fab80e Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=bf3cce93-e681-499c-bf5a-28686f97191b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:70:3e:e9:7a:14:03:26:92:23:8c:46:f4: 05:73:70:c1:d4:21:78:0c:0c:dd:6b:ce:2b:c7:24: 00:0a:9d:8a:b0:75:8f:4c:00:c3:42:8c:23:0c:87: b0:29:fe:e7:cf:97:ac:32:87:b8:19:e6:75:5c:0d: 78:c2:ab:5e:e1:61:4b:7e:ca:35:ac:f7:de:86:b9: 30:21:12:5b:d9:5f:56:f7:1a:80:d1:e9:6e:93:8c: d6:64:74:8d:df:37:a6:ae:ae:22:bd:91:ce:c7:bb: 7a:3b:58:a2:7f:d9:8c:78:eb:2d:e2:c5:6a:58:ad: 6c:e1:bf:a0:ea:61:63:0a:bf:0d:01:2d:6e:eb:01: 45:64:d2:cf:4a:c2:3f:4c:38:e3:f7:c9:63:f9:72: aa:e5:85:a0:03:e5:ce:28:22:56:01:33:93:cb:83: 2d:53:2d:42:a9:e9:5e:38:7f:35:a5:38:0e:c5:ea: f2:f8:71:fa:cb:4d:c6:31:01:17:5e:80:ee:b0:6d: fb:84:0d:e0:7a:e6:4b:7a:38:08:95:82:2f:30:7b: f0:5e:4d:ed:a3:ac:1a:7f:f9:92:cf:fb:b3:7f:8d: ff:90:c7:85:f9:1d:3f:a0:2d:3c:42:26:4d:29:57: c1:a1:ee:b7:5b:4f:54:d7:ea:fc:d3:d7:57:c0:6c: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:87:8E:64:3D:AF:0B:02:06:04:B2:6F:CA:36:88:AC:4C:29:7F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.crl X509v3 Authority Key Identifier: keyid:EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer sbgp-ipAddrBlock: critical IPv4: 192.33.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:60:f7:5f:e3:42:a6:cb:dc:21:29:98:8f:31:05:80:17:66: 76:64:b7:81:b3:6a:60:88:ab:39:14:74:e6:d8:39:a3:34:bb: 44:f6:b0:1e:c1:71:22:35:6e:29:26:3e:15:aa:ea:c2:47:99: f2:49:84:0e:2c:64:f8:d5:f6:4b:3e:9d:2e:6b:98:97:ff:51: 20:79:94:a8:2f:0c:67:f5:03:57:65:2c:41:97:91:a2:86:79: a8:e4:66:5c:f1:86:eb:56:a2:77:64:af:ab:d4:87:1f:d6:51: de:c4:87:71:bc:1c:10:dd:61:bd:ce:b8:82:d2:a7:52:c4:be: f9:25:7a:d3:22:53:de:00:4d:48:3e:e2:5d:72:d2:06:6f:96: e7:0f:f2:20:11:40:ea:d8:79:f0:3f:24:b2:9f:b4:ce:74:f8: 21:27:ee:32:cd:07:b9:a9:29:99:6f:2d:25:d5:a1:57:ea:d5: 5a:89:b8:9c:b1:d4:96:70:e2:3e:52:9b:f7:b8:4f:d2:5b:6d: 8e:9b:06:e2:2e:f3:8e:ca:5e:17:73:49:34:5f:ef:cf:c2:06: ef:af:81:65:80:e0:0b:5a:c2:97:47:d8:cd:07:a8:f7:90:10: da:75:4f:07:27:d0:c6:f1:1a:b8:13:52:8b:5e:47:95:f1:37: d0:9e:80:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjrTkDKwVjv6G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEyNDk2NjUtYzA0YS00MmRmLWIyYTgtZTY0M2I3ZmFi ODBlMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk YmYzY2NlOTMtZTY4MS00OTljLWJmNWEtMjg2ODZmOTcxOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8dwPul6FAMmkiOMRvQFc3DB1CF4DAzda84r xyQACp2KsHWPTADDQowjDIewKf7nz5esMoe4GeZ1XA14wqte4WFLfso1rPfehrkw IRJb2V9W9xqA0eluk4zWZHSN3zemrq4ivZHOx7t6O1iif9mMeOst4sVqWK1s4b+g 6mFjCr8NAS1u6wFFZNLPSsI/TDjj98lj+XKq5YWgA+XOKCJWATOTy4MtUy1Cqele OH81pTgOxery+HH6y03GMQEXXoDusG37hA3geuZLejgIlYIvMHvwXk3to6waf/mS z/uzf43/kMeF+R0/oC08QiZNKVfBoe63W09U1+r809dXwGyBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmHjmQ9rwsCBgSyb8o2iKxMKX+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MTI0 OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdmYWI4MGUvYTU0ZjhhN2MtMDVhMC0z ZTcyLWJlMWQtZDA2ZGNiNzgzOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjEyNDk2NjUtYzA0YS00MmRmLWIy YTgtZTY0M2I3ZmFiODBlLzYxMjQ5NjY1LWMwNGEtNDJkZi1iMmE4LWU2NDNiN2Zh YjgwZS5jcmwwHwYDVR0jBBgwFoAU6tbWZH80NlrxJdEgyDlqQ8f2fOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQz YjdmYWI4MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhg91/jQqbL3CEpmI8xBYAXZnZkt4GzamCIqzkUdObYOaM0u0T2sB7B cSI1bikmPhWq6sJHmfJJhA4sZPjV9ks+nS5rmJf/USB5lKgvDGf1A1dlLEGXkaKG eajkZlzxhutWondkr6vUhx/WUd7Eh3G8HBDdYb3OuILSp1LEvvkletMiU94ATUg+ 4l1y0gZvlucP8iARQOrYefA/JLKftM50+CEn7jLNB7mpKZlvLSXVoVfq1VqJuJyx 1JZw4j5Sm/e4T9JbbY6bBuIu847KXhdzSTRf78/CBu+vgWWA4AtawpdH2M0HqPeQ ENp1Twcn0MbxGrgTUoteR5XxN9CegAA= -----END CERTIFICATE-----Generated at Tue Sep 22 04:23:50 2026 by rpki-client