$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa File: 2a6696a7-932c-33f0-8980-bef83d9fb70c.roa (raw, json) Hash identifier: wX7SL85Lt/yEyxqs7bCyKsxT1M09yhVE5KQG1knn2tg= Subject key identifier: 4B:B7:9F:E3:B0:2E:63:43:FB:2A:71:37:72:AA:83:04:82:4B:48:70 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4986CE059BA9844726CBF7A5 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.35.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ce:05:9b:a9:84:47:26:cb:f7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a12d71c-33f9-4f85-a3fe-2e3261389860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0b:2f:e3:95:92:06:a8:fb:b7:0d:8b:8c:41: 02:ab:8b:fe:b5:d6:dc:30:24:2c:9a:67:56:52:5b: c6:e2:aa:18:e9:17:5f:b4:3c:cd:88:a3:60:08:6d: 68:13:b0:ac:b0:75:52:62:d9:ae:8b:f7:e5:5b:42: 72:83:2c:48:f0:be:c0:da:87:ea:ee:1c:24:ec:c6: 06:26:5b:31:0e:3e:59:d5:31:5d:f4:fe:06:9c:09: 5e:fc:8a:19:13:49:9a:56:fa:f4:68:77:25:28:c2: 94:bd:c4:52:6e:5a:75:62:2e:8c:d0:7d:1d:84:17: 74:1e:3e:a0:0b:6b:e5:59:b1:5f:64:6a:24:21:b8: 1f:6c:af:04:e8:83:ab:f3:b9:0d:70:32:5a:66:6f: b5:4f:5c:27:40:23:4b:12:1a:1c:f2:7f:c4:64:a2: 63:20:1a:03:0f:60:53:61:e3:fb:07:8f:53:87:f3: 35:94:b9:31:86:24:d7:c1:10:fd:fa:3c:b3:03:20: f6:d1:7f:18:22:61:71:f1:1e:36:1a:86:2c:a5:58: dc:dd:59:38:b2:18:27:67:c0:e4:27:10:72:b1:2d: 63:9e:13:9e:52:33:c0:ee:e4:54:81:4c:88:0b:fb: 72:3b:27:df:e2:90:7e:5b:50:bd:3c:fe:5a:16:42: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:9F:E3:B0:2E:63:43:FB:2A:71:37:72:AA:83:04:82:4B:48:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8c:98:69:ca:31:d1:43:40:0d:f8:2e:e9:dd:a1:8e:67:7f: ec:6c:49:6f:f2:87:33:db:b1:81:fc:10:f7:d3:76:a5:76:be: 6a:96:70:e2:9e:9e:79:88:27:77:53:c7:f9:79:21:54:10:49: 7f:4e:5d:b6:70:a7:75:6f:68:07:8e:48:16:55:e6:f6:92:57: 68:a6:6a:04:54:e8:e7:dc:62:7c:90:37:c0:fc:0a:5b:7e:76: 2e:b3:71:a5:1d:4c:14:61:40:19:59:a5:41:51:76:2e:76:20: 05:bd:fa:42:4d:0d:a4:4d:b2:68:54:c5:2f:e7:06:e4:b5:dc: 1b:be:28:02:2c:7f:e1:94:bd:d3:4a:d8:0b:78:89:17:9c:df: 4d:53:a9:ca:56:b2:98:0a:cd:cb:aa:ce:fb:2d:3d:80:98:14: 90:3f:c9:e4:6d:ee:f5:d7:cc:aa:69:c7:14:32:77:a2:7a:46: 8f:ff:ca:85:b7:c9:93:24:dd:56:61:03:33:55:6f:8b:9a:0f: 2c:38:ac:a1:1f:73:b5:f8:44:51:c0:56:76:13:9a:8a:a7:6f: 70:81:e8:87:37:e0:be:3f:1d:e2:b9:a3:27:be:3a:a6:de:3a: 05:6d:f3:dc:65:7e:c2:e8:4a:e9:a4:f2:f3:5b:c8:d1:ca:a0: c2:37:52:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhs4Fm6mERybL96UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGExMmQ3MWMtMzNmOS00Zjg1LWEzZmUtMmUzMjYxMzg5ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAsv45WSBqj7tw2LjEECq4v+tdbcMCQsmmdW UlvG4qoY6RdftDzNiKNgCG1oE7CssHVSYtmui/flW0JygyxI8L7A2ofq7hwk7MYG JlsxDj5Z1TFd9P4GnAle/IoZE0maVvr0aHclKMKUvcRSblp1Yi6M0H0dhBd0Hj6g C2vlWbFfZGokIbgfbK8E6IOr87kNcDJaZm+1T1wnQCNLEhoc8n/EZKJjIBoDD2BT YeP7B49Th/M1lLkxhiTXwRD9+jyzAyD20X8YImFx8R42GoYspVjc3Vk4shgnZ8Dk JxBysS1jnhOeUjPA7uRUgUyIC/tyOyff4pB+W1C9PP5aFkIwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu3n+OwLmND+ypxN3KqgwSCS0hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmE2Njk2YTctOTMyYy0z M2YwLTg5ODAtYmVmODNkOWZiNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCMmGnKMdFDQA34LundoY5nf+xsSW/yhzPbsYH8EPfTdqV2vmqWcOKe nnmIJ3dTx/l5IVQQSX9OXbZwp3VvaAeOSBZV5vaSV2imagRU6OfcYnyQN8D8Clt+ di6zcaUdTBRhQBlZpUFRdi52IAW9+kJNDaRNsmhUxS/nBuS13Bu+KAIsf+GUvdNK 2At4iRec301TqcpWspgKzcuqzvstPYCYFJA/yeRt7vXXzKppxxQyd6J6Ro//yoW3 yZMk3VZhAzNVb4uaDyw4rKEfc7X4RFHAVnYTmoqnb3CB6Ic34L4/HeK5oye+Oqbe OgVt89xlfsLoSumk8vNbyNHKoMI3Ulw= -----END CERTIFICATE-----Generated at Mon Sep 28 10:25:45 2026 by rpki-client