$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa File: 5e637b51-80c2-35fa-ad18-b5f148be60c5.roa (raw, json) Hash identifier: mT9jzGzZNEXngZ2ZOqBuYMA6+1kQbOSAY4w+rFimKFI= Subject key identifier: 23:2D:4B:F5:F4:9C:4C:3B:E8:C7:D7:88:54:1F:6D:05:7A:99:B1:C3 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584F374D2F46F458635657BC9400 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 2152 IP address blocks: 137.164.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2f:46:f4:58:63:56:57:bc:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=0073d696-d934-4636-a21b-ab853f3df72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:76:c4:9a:bc:37:62:20:0b:f1:27:87:60: 78:8d:af:f8:27:4c:e9:48:f2:ca:79:ae:9e:83:b4: 8b:ea:6f:e5:ea:21:26:12:62:34:0e:1e:28:64:64: 0d:32:4c:f2:2e:19:28:ec:37:a5:60:54:b1:71:87: 46:08:fb:f3:5a:ab:1c:b5:b2:dd:6e:9d:8c:ab:39: 8f:34:6f:3f:ad:75:c1:d7:dd:51:0f:0a:54:9b:f0: 5e:95:6e:e6:f4:d5:1e:9c:99:1a:99:87:70:0a:e6: 6c:75:9c:7a:51:5b:94:d4:6a:d6:5b:29:85:90:e7: e8:fe:23:c7:d8:24:30:df:33:da:7e:ac:15:82:ae: fb:66:6e:f8:f4:95:da:ed:a4:82:1a:2d:7f:a7:37: 51:0b:15:f7:d7:0d:19:03:6f:a1:04:6c:f2:a0:16: 60:70:79:1d:12:eb:f7:27:48:da:dd:bb:38:b2:6b: d1:4c:5a:4a:c2:0a:8f:c1:16:17:bb:c3:be:e2:f7: 50:42:e1:db:23:35:df:55:85:12:ea:e6:13:62:5d: e3:6e:d3:23:fc:9d:33:81:49:89:45:5a:d4:d4:f2: 08:5b:79:6f:70:1a:52:0a:9a:ae:cf:45:5a:4f:da: 6a:14:07:5f:fb:e4:fa:dc:64:2d:7c:16:1e:3c:cb: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:4B:F5:F4:9C:4C:3B:E8:C7:D7:88:54:1F:6D:05:7A:99:B1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4d:3c:8e:55:7c:c0:33:89:c7:34:62:84:d6:7e:2d:a0:b2: 2b:69:05:d2:e3:bd:85:95:23:30:39:6d:c8:36:4a:0a:3e:26: 3f:10:42:98:07:ac:a5:be:86:8e:9d:bc:a2:fc:e2:f5:8f:a2: 04:8d:62:67:ec:1b:8a:6a:60:31:f1:3d:bc:8d:40:d8:64:42: ef:40:ac:32:e3:12:83:06:eb:ab:83:f6:b9:a7:d7:0a:43:9f: 29:5f:e7:ab:ec:a4:4f:ef:94:1a:ce:0c:07:6a:e2:1d:ad:0a: d2:3c:67:b4:20:0d:79:06:c5:1c:60:2d:22:d4:5a:32:a5:77: 6f:d0:09:16:29:2c:36:11:4c:ff:1d:80:fa:c4:6e:6b:38:bc: d9:63:36:c6:97:06:fa:c6:ef:c0:89:fe:84:d0:2e:c6:d5:fd: d5:e7:6e:8b:e8:21:bf:3e:51:d3:91:c9:c0:d3:de:fd:de:60: 07:45:71:5f:56:01:00:9b:7f:06:37:5f:93:67:9d:a1:11:c4: ad:a5:e3:dc:0f:4b:9d:66:a9:f7:11:31:dc:6a:12:33:04:46: ad:3a:e8:d5:30:3a:a1:3b:87:13:a2:76:78:d0:62:55:b8:4d: c8:65:38:7f:b0:a7:9a:8a:1c:13:75:ce:7c:d6:99:8c:82:bd: 35:bc:ff:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TS9G9FhjVle8lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MDA3M2Q2OTYtZDkzNC00NjM2LWEyMWItYWI4NTNmM2RmNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9l2xJq8N2IgC/Enh2B4ja/4J0zpSPLKea6e g7SL6m/l6iEmEmI0Dh4oZGQNMkzyLhko7DelYFSxcYdGCPvzWqsctbLdbp2MqzmP NG8/rXXB191RDwpUm/BelW7m9NUenJkamYdwCuZsdZx6UVuU1GrWWymFkOfo/iPH 2CQw3zPafqwVgq77Zm749JXa7aSCGi1/pzdRCxX31w0ZA2+hBGzyoBZgcHkdEuv3 J0ja3bs4smvRTFpKwgqPwRYXu8O+4vdQQuHbIzXfVYUS6uYTYl3jbtMj/J0zgUmJ RVrU1PIIW3lvcBpSCpquz0VaT9pqFAdf++T63GQtfBYePMsA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMtS/X0nEw76MfXiFQfbQV6mbHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNWU2MzdiNTEtODBjMi0z NWZhLWFkMTgtYjVmMTQ4YmU2MGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExNPI5VfMAzicc0YoTWfi2gsitpBdLjvYWVIzA5bcg2Sgo+Jj8QQpgH rKW+ho6dvKL84vWPogSNYmfsG4pqYDHxPbyNQNhkQu9ArDLjEoMG66uD9rmn1wpD nylf56vspE/vlBrODAdq4h2tCtI8Z7QgDXkGxRxgLSLUWjKld2/QCRYpLDYRTP8d gPrEbms4vNljNsaXBvrG78CJ/oTQLsbV/dXnbovoIb8+UdORycDT3v3eYAdFcV9W AQCbfwY3X5NnnaERxK2l49wPS51mqfcRMdxqEjMERq066NUwOqE7hxOidnjQYlW4 TchlOH+wp5qKHBN1znzWmYyCvTW8/1I= -----END CERTIFICATE-----Generated at Tue Sep 22 22:58:18 2026 by rpki-client