$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa File: 680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa (raw, json) Hash identifier: Le3dWeShsOcg+iskaQvgU+UYZBtA0rVUXB+EWZ+1WKg= Subject key identifier: 2D:B3:47:20:D3:D9:D9:40:3F:50:DB:FD:62:F1:CD:11:B7:40:DE:97 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498BA83BE20AD33B3B1E6E40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.35.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a8:3b:e2:0a:d3:3b:3b:1e:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ec079cc-7705-4ad2-967a-a53c32d7fda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:d6:42:5b:ad:86:7b:0d:48:5e:a4:93:ea: 26:60:7c:3a:6b:e6:76:8e:c9:0a:f8:15:90:c2:49: 35:6f:c9:9c:c0:b9:8e:24:73:62:5f:43:a4:24:24: b0:fa:4e:1c:6b:f0:e5:62:95:53:94:05:a5:cc:fb: b8:d8:f4:16:ae:00:a1:98:7c:ba:f0:27:dd:fd:dc: 70:38:4b:b1:cd:04:09:ba:28:d9:77:11:07:66:12: 37:3d:e8:54:51:ba:da:4c:cb:8d:ac:3d:6a:a6:db: 90:63:ed:39:5a:5c:d3:af:44:30:61:70:74:07:17: 93:01:01:b7:ad:84:c6:a1:70:46:00:22:f5:c8:e2: 01:7c:2b:6b:fe:11:8c:91:af:35:a8:a8:a4:6b:ce: 86:cf:f8:2a:92:51:0e:4b:2b:31:13:f8:ef:31:7e: cc:a5:aa:d5:60:39:80:bf:f2:fe:9f:e5:a5:cc:03: c7:77:84:4e:3d:61:34:f7:7c:23:2e:ef:33:1b:34: 98:03:e2:fe:7b:79:31:32:66:76:0e:b3:5a:3d:ff: cd:35:98:04:32:fd:a7:c7:13:cf:21:c5:b1:7f:88: 6d:63:55:58:52:ab:0b:82:75:5d:42:fa:fa:7d:20: 75:09:c9:ca:df:43:fd:af:ec:55:fb:66:6b:74:75: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B3:47:20:D3:D9:D9:40:3F:50:DB:FD:62:F1:CD:11:B7:40:DE:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d8:39:15:9c:3c:95:3a:45:01:51:5b:8c:e1:df:e3:82:12: 70:fd:db:ff:47:98:08:a5:19:d6:2f:91:b3:ee:aa:48:f8:66: 7a:72:c5:ea:5c:44:e4:69:78:cd:50:f8:a3:03:01:c4:e1:f2: cd:f6:5a:98:d8:e2:d2:47:c5:e5:d4:b0:d8:10:65:cc:2e:1f: f2:5e:3a:51:de:e0:8b:29:20:ab:3b:47:67:e0:06:15:f2:31: c5:04:f5:40:05:4d:0c:54:b8:8f:bf:0f:08:db:05:f9:dd:5e: 89:79:79:95:d8:08:37:d6:c8:d2:08:46:c5:b9:56:9a:cd:92: 5a:b0:36:a5:0b:52:95:eb:d4:bf:7e:34:89:6c:f3:43:75:71: 50:78:ee:3a:91:d9:a3:27:9a:0a:a5:0c:21:5a:82:0c:8e:a1: 74:cf:da:c2:19:a3:3a:72:54:2b:47:ca:3a:83:4a:89:85:58: f8:95:90:ed:42:42:46:29:ef:0b:2f:63:ba:57:b1:a1:72:bd: 6f:0a:28:01:a9:cf:ff:2a:ba:b1:c6:93:81:61:44:1c:4f:da: 09:0d:b7:bf:ea:b1:3a:98:09:5b:dc:ac:d7:d1:5e:9e:4d:bf: 83:7a:f9:a2:1a:50:6f:ca:2e:17:a9:52:e1:0f:bf:be:04:dc: 30:9a:c2:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji6g74grTOzsebkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmVjMDc5Y2MtNzcwNS00YWQyLTk2N2EtYTUzYzMyZDdmZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWnWQluthnsNSF6kk+omYHw6a+Z2jskK+BWQ wkk1b8mcwLmOJHNiX0OkJCSw+k4ca/DlYpVTlAWlzPu42PQWrgChmHy68Cfd/dxw OEuxzQQJuijZdxEHZhI3PehUUbraTMuNrD1qptuQY+05WlzTr0QwYXB0BxeTAQG3 rYTGoXBGACL1yOIBfCtr/hGMka81qKika86Gz/gqklEOSysxE/jvMX7MparVYDmA v/L+n+WlzAPHd4ROPWE093wjLu8zGzSYA+L+e3kxMmZ2DrNaPf/NNZgEMv2nxxPP IcWxf4htY1VYUqsLgnVdQvr6fSB1CcnK30P9r+xV+2ZrdHXRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2zRyDT2dlAP1Db/WLxzRG3QN6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjgwZWJjMjctMjU5ZC0z ZDViLTk1ZWYtMGRlZDJmZTNlOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfYORWcPJU6RQFRW4zh3+OCEnD92/9HmAilGdYvkbPuqkj4Znpyxepc RORpeM1Q+KMDAcTh8s32WpjY4tJHxeXUsNgQZcwuH/JeOlHe4IspIKs7R2fgBhXy McUE9UAFTQxUuI+/DwjbBfndXol5eZXYCDfWyNIIRsW5VprNklqwNqULUpXr1L9+ NIls80N1cVB47jqR2aMnmgqlDCFaggyOoXTP2sIZozpyVCtHyjqDSomFWPiVkO1C QkYp7wsvY7pXsaFyvW8KKAGpz/8qurHGk4FhRBxP2gkNt7/qsTqYCVvcrNfRXp5N v4N6+aIaUG/KLhepUuEPv74E3DCawqU= -----END CERTIFICATE-----Generated at Tue Sep 29 17:36:28 2026 by rpki-client