$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa File: 80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa (raw, json) Hash identifier: Su3VRwAL9Zb88ozDYO59w6f5sd3vragSH62KDTMG/Fg= Subject key identifier: 34:B3:06:1C:A6:78:17:8F:C9:FE:0F:FA:50:13:12:45:E2:5A:63:49 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584F2ABD116EDF57FAF537E901C0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 139.177.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:11:6e:df:57:fa:f5:37:e9:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=20952806-fdc3-4f9c-9cb5-dfffb4da5c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:34:6f:f9:c6:c1:73:d6:f3:92:91:8e:8f: 8c:a7:d8:49:63:4b:5b:1c:32:b8:d0:57:d3:58:fd: 06:57:98:af:33:d0:63:69:05:de:ea:2a:1c:4e:84: 62:ad:cd:1e:d5:61:ea:97:7f:a8:99:15:ff:48:ce: 05:f4:41:10:5d:b9:b8:c0:32:79:d4:3b:53:fe:55: 7b:e9:43:ac:d3:c6:08:91:9d:95:0d:90:b3:c1:f9: 95:87:da:e1:73:6f:b3:fa:a6:ae:19:f3:18:ac:3b: 0e:e6:4b:d3:a4:e5:0e:9d:42:b7:f1:77:8d:33:22: fd:ab:00:45:96:8b:53:aa:15:22:ef:07:49:7b:17: 69:32:15:26:56:32:69:ee:ef:d2:95:cd:11:55:61: f5:7c:fa:e6:bc:b4:4e:f1:34:f8:e3:c4:86:6b:ed: 75:d1:75:84:5c:8f:51:2f:82:38:3a:25:a9:3a:2c: c1:f1:8f:77:48:44:e6:1e:36:bf:38:1e:e3:e0:cf: 3d:fc:4f:6b:ac:b0:eb:ca:35:8c:80:1e:70:37:7f: 4a:a1:b8:89:e7:ae:da:1f:23:d6:45:1e:6e:36:90: 00:db:46:ed:3b:06:df:87:7c:81:01:b1:37:c0:48: 55:33:16:47:0c:03:76:0b:61:8c:b9:33:51:bb:e2: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B3:06:1C:A6:78:17:8F:C9:FE:0F:FA:50:13:12:45:E2:5A:63:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/80fa82d8-ad88-31a7-b35e-69fbde8dbf45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 139.177.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a0:0e:aa:0c:0b:55:2f:19:62:04:94:12:b5:f3:16:9a:c0: d5:ca:be:82:bd:23:23:43:8f:5e:d5:2b:66:24:1e:06:55:13: fb:86:df:14:98:c6:6c:24:40:62:a3:f2:0c:7c:e7:f5:92:1a: f2:4d:5b:54:d4:5d:6f:54:49:36:0d:ee:91:ca:5f:13:39:5c: c0:9d:bb:81:13:3f:81:e3:9b:1a:c9:25:06:fa:c3:79:46:aa: 20:ad:9a:d2:fd:b6:ff:34:54:7c:bc:1b:15:23:bc:25:3b:36: 7b:cf:d0:b3:b4:b5:a5:9f:9d:67:18:15:f1:a7:cf:26:00:9d: 77:05:e2:4d:21:0f:fd:f4:ee:63:13:a3:b0:b6:c6:ca:c9:ad: 60:75:68:fe:f6:a9:93:ad:c1:40:41:d6:36:0e:91:84:32:9c: c8:04:4a:cc:b0:61:f1:45:17:f2:b8:47:ac:cf:1b:f0:94:ac: 4e:3e:04:e9:44:b4:4e:48:65:96:d2:1c:07:02:48:69:e7:6a: 45:a7:24:5c:4d:75:c4:2f:5e:64:7f:5e:8a:c2:69:d8:c1:46: df:46:b6:a1:fc:c5:56:f7:1c:c3:54:ed:88:ed:17:1a:9d:ba: 4b:c4:95:23:38:34:3d:6d:ba:83:bc:cd:c7:a3:57:f7:72:9c: b8:d0:56:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRFu31f69TfpAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MjA5NTI4MDYtZmRjMy00ZjljLTljYjUtZGZmZmI0ZGE1YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi240b/nGwXPW85KRjo+Mp9hJY0tbHDK40FfT WP0GV5ivM9BjaQXe6iocToRirc0e1WHql3+omRX/SM4F9EEQXbm4wDJ51DtT/lV7 6UOs08YIkZ2VDZCzwfmVh9rhc2+z+qauGfMYrDsO5kvTpOUOnUK38XeNMyL9qwBF lotTqhUi7wdJexdpMhUmVjJp7u/Slc0RVWH1fPrmvLRO8TT448SGa+110XWEXI9R L4I4OiWpOizB8Y93SETmHja/OB7j4M89/E9rrLDryjWMgB5wN39KobiJ567aHyPW RR5uNpAA20btOwbfh3yBAbE3wEhVMxZHDAN2C2GMuTNRu+JAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSzBhymeBePyf4P+lATEkXiWmNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvODBmYTgyZDgtYWQ4OC0z MWE3LWIzNWUtNjlmYmRlOGRiZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7H7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGgDqoMC1UvGWIElBK18xaawNXKvoK9IyNDj17VK2YkHgZVE/uG3xSY xmwkQGKj8gx85/WSGvJNW1TUXW9USTYN7pHKXxM5XMCdu4ETP4HjmxrJJQb6w3lG qiCtmtL9tv80VHy8GxUjvCU7NnvP0LO0taWfnWcYFfGnzyYAnXcF4k0hD/307mMT o7C2xsrJrWB1aP72qZOtwUBB1jYOkYQynMgESsywYfFFF/K4R6zPG/CUrE4+BOlE tE5IZZbSHAcCSGnnakWnJFxNdcQvXmR/XorCadjBRt9GtqH8xVb3HMNU7YjtFxqd ukvElSM4ND1tuoO8zcejV/dynLjQVnQ= -----END CERTIFICATE-----Generated at Mon Sep 21 20:34:13 2026 by rpki-client