$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/35fff4c8-a94f-37a6-9696-e52cacc7e814.roa File: 35fff4c8-a94f-37a6-9696-e52cacc7e814.roa (raw, json) Hash identifier: XTmrP1ctIL/3DEu2UPU7m2TI0mKz8+MbGplmcAGYpD4= Subject key identifier: 28:F2:F3:08:0C:29:6E:91:46:1F:CE:FD:BB:98:DA:A4:79:39:8E:5B Certificate issuer: /CN=06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff Certificate serial: 010D0C9F4328584F4112B7C1A147C84F08FCEAC0 Authority key identifier: 6F:BE:3B:91:BC:C7:7E:51:92:EE:36:86:B3:32:14:5A:20:B1:26:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/35fff4c8-a94f-37a6-9696-e52cacc7e814.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 26649 IP address blocks: 136.180.0.0/16 maxlen: 16 198.136.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b7:c1:a1:47:c8:4f:08:fc:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=da51c036-3015-41dd-8bce-875d6865b23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:29:a0:a4:3c:bf:7a:e3:86:e0:d8:f6:ce: 67:d7:b5:b5:66:61:66:42:a4:45:07:bf:ab:9c:bb: 11:60:b1:44:11:b3:51:87:d6:10:35:b9:ba:95:65: 42:e2:a7:25:18:1e:1a:d2:88:3c:5a:4f:af:47:af: d7:ad:b9:f8:06:e4:ba:0d:dd:c3:1c:bc:03:61:fd: b6:b3:29:4a:b1:f6:a4:84:18:ce:0b:5b:5c:b1:89: 90:f1:19:aa:26:83:31:e9:b8:a9:cb:98:88:d0:af: 03:d6:cb:1a:af:8c:e8:5e:e4:b0:6a:9e:57:cf:b6: be:e1:bf:0e:67:14:eb:5f:b9:5f:80:b2:9b:a3:3b: 73:31:1e:b4:eb:7a:54:96:ba:84:69:17:70:b0:4f: dd:ab:55:00:6b:cc:b5:7d:7e:91:57:32:96:d2:2b: dd:c2:cb:5a:0e:a2:07:2a:94:a4:07:c7:6b:99:91: 41:5a:f6:9f:79:7c:b1:04:ef:e4:18:10:ed:dc:e9: 7e:79:4d:15:fa:e2:47:02:81:72:25:c4:91:da:82: 20:ed:3a:01:5c:ee:1c:b4:39:1f:db:0c:4d:3c:e1: 87:9c:9e:46:c9:74:5f:06:a7:34:f1:0c:2a:31:cd: 52:c7:59:32:1b:e2:ca:a2:42:8f:f0:26:1f:f2:5f: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F2:F3:08:0C:29:6E:91:46:1F:CE:FD:BB:98:DA:A4:79:39:8E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/35fff4c8-a94f-37a6-9696-e52cacc7e814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.crl X509v3 Authority Key Identifier: keyid:6F:BE:3B:91:BC:C7:7E:51:92:EE:36:86:B3:32:14:5A:20:B1:26:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.cer sbgp-ipAddrBlock: critical IPv4: 136.180.0.0/16 198.136.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ab:25:b8:fe:29:d7:98:70:e0:ce:db:f1:ce:1a:9e:17:ff: ed:98:b6:b2:ba:e1:81:d9:8d:4b:42:0b:6b:20:75:b6:73:b4: 02:5b:b1:10:51:5d:3b:72:dd:00:76:c7:ca:2f:0c:9b:dd:78: 31:28:d3:76:c7:31:f0:7c:97:41:5a:26:9b:00:da:f1:d1:f0: 4c:7c:a0:74:6e:46:aa:70:79:bf:e9:d3:10:4c:ba:6b:cd:56: 4f:82:10:f8:43:47:62:b2:b7:45:05:f0:6d:5a:3a:0e:9a:5e: d8:f8:a9:56:d2:a9:c4:99:4a:b3:c5:8f:ec:ff:24:dd:7d:8f: 08:13:57:bf:5e:93:cc:f1:67:69:8c:ca:17:7e:a4:ac:d3:17: c8:b5:36:0c:41:7b:2c:eb:5e:8c:25:b4:8f:29:77:98:93:14: d5:30:ff:ef:cf:00:3b:26:78:9f:1e:f2:f6:b3:51:89:1c:12: 39:42:c6:d0:14:52:4e:8b:eb:12:2b:95:08:52:4b:00:b9:a5: a0:cf:63:9a:25:b4:65:e8:c9:4e:9b:59:84:fb:3d:a5:69:15: 0b:d2:b6:67:61:ea:38:7f:6e:cc:fa:66:81:42:cc:09:4e:82: e5:2a:2e:44:17:14:7a:19:44:c9:40:5a:88:9d:44:18:b1:7f: 91:d1:e8:5e -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE9BErfBoUfITwj86sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZhZTVjMDAtZTkxMy00YzUxLTg2ZDMtYjhlYzBmZThk NWZmMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZGE1MWMwMzYtMzAxNS00MWRkLThiY2UtODc1ZDY4NjViMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rMpoKQ8v3rjhuDY9s5n17W1ZmFmQqRFB7+r nLsRYLFEEbNRh9YQNbm6lWVC4qclGB4a0og8Wk+vR6/Xrbn4BuS6Dd3DHLwDYf22 sylKsfakhBjOC1tcsYmQ8RmqJoMx6bipy5iI0K8D1ssar4zoXuSwap5Xz7a+4b8O ZxTrX7lfgLKboztzMR6063pUlrqEaRdwsE/dq1UAa8y1fX6RVzKW0ivdwstaDqIH KpSkB8drmZFBWvafeXyxBO/kGBDt3Ol+eU0V+uJHAoFyJcSR2oIg7ToBXO4ctDkf 2wxNPOGHnJ5GyXRfBqc08QwqMc1Sx1kyG+LKokKP8CYf8l8AyQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCjy8wgMKW6RRh/O/buY2qR5OY5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNmFl NWMwMC1lOTEzLTRjNTEtODZkMy1iOGVjMGZlOGQ1ZmYvMzVmZmY0YzgtYTk0Zi0z N2E2LTk2OTYtZTUyY2FjYzdlODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDZhZTVjMDAtZTkxMy00YzUxLTg2 ZDMtYjhlYzBmZThkNWZmLzA2YWU1YzAwLWU5MTMtNGM1MS04NmQzLWI4ZWMwZmU4 ZDVmZi5jcmwwHwYDVR0jBBgwFoAUb747kbzHflGS7jaGszIUWiCxJrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNmFlNWMwMC1lOTEzLTRjNTEtODZkMy1iOGVj MGZlOGQ1ZmYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAiLQDBADG iIYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARKsluP4p15hw4M7b8c4anhf/7Zi2srrhgdmNS0ILayB1tnO0 AluxEFFdO3LdAHbHyi8Mm914MSjTdscx8HyXQVommwDa8dHwTHygdG5GqnB5v+nT EEy6a81WT4IQ+ENHYrK3RQXwbVo6Dppe2PipVtKpxJlKs8WP7P8k3X2PCBNXv16T zPFnaYzKF36krNMXyLU2DEF7LOtejCW0jyl3mJMU1TD/788AOyZ4nx7y9rNRiRwS OULG0BRSTovrEiuVCFJLALmloM9jmiW0ZejJTptZhPs9pWkVC9K2Z2HqOH9uzPpm gULMCU6C5SouRBcUehlEyUBaiJ1EGLF/kdHoXg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:34:08 2026 by rpki-client