$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa File: b972c047-2afd-30a4-a40b-2b850202cf41.roa (raw, json) Hash identifier: CEsuOOfC0HttFuyCs/W+ZV4ocqHQAuqXlmhV8lKwVok= Subject key identifier: 1C:F5:C7:04:3A:E7:11:2E:70:11:E8:D5:E5:A8:67:C5:F3:94:E9:22 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584F49741348B536641259E3EC40 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14593 IP address blocks: 135.129.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:13:48:b5:36:64:12:59:e3:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f5dc39d8-961c-494d-a08e-dcaac40a2cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:36:f6:bf:46:6d:0b:d1:c0:91:8d:53:b9: b8:fe:2f:59:f0:0b:2e:b6:c7:4d:21:ae:50:0a:1e: b6:af:7d:d5:2e:43:bb:cc:2b:ef:2b:8b:bc:c4:48: d7:24:00:52:06:db:2b:1b:7e:64:c1:9b:d4:be:b6: 74:22:29:2f:a8:d8:bf:85:b0:5d:4c:52:6d:f5:fc: 44:b7:8d:80:9a:27:c8:1b:aa:1c:bd:60:85:bc:39: e5:fc:2c:d0:cb:4b:43:95:f4:3f:cf:aa:c6:60:17: 26:bc:53:12:53:1c:21:9e:04:5f:a8:24:a4:25:5f: 05:8c:cb:50:8d:08:c5:e5:11:63:69:d8:55:b4:aa: 87:81:c6:9b:a9:e7:ae:97:16:63:ba:7e:99:64:76: 15:ce:4a:8c:97:56:e4:53:ac:71:7e:46:d2:17:60: 3a:40:b8:0c:f3:96:6b:c2:7c:ef:bd:be:f1:71:b7: 49:60:ce:70:dc:88:bc:d6:20:24:a9:1b:c2:c1:c1: 73:a5:a3:5f:66:7b:b7:07:1e:f1:c8:92:3b:5a:4c: ba:f7:9f:e6:3c:45:c0:55:99:8f:28:05:ae:fe:ac: af:e6:c3:47:64:e8:73:df:3b:66:47:62:64:ca:84: f0:eb:49:30:bb:60:a5:cf:d3:3b:d7:8c:4e:cf:14: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F5:C7:04:3A:E7:11:2E:70:11:E8:D5:E5:A8:67:C5:F3:94:E9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 135.129.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:c6:88:62:f8:ea:f2:2f:c4:cf:79:b5:1d:a2:7f:d9:d7:ad: df:5f:47:a1:6f:64:8f:1b:5b:dd:30:fc:7b:95:99:95:bc:11: 6c:73:09:a7:f7:09:49:3d:1d:52:51:f3:64:4d:60:3c:53:fa: e6:d4:27:f4:93:1e:4f:37:a1:79:e3:f1:ef:65:d8:10:75:b7: a5:57:e6:47:0a:a0:fa:0e:b8:0c:6a:49:80:0c:d1:2b:1f:55: 41:60:0d:a6:44:72:17:3d:3d:8a:2a:80:75:a4:8f:ef:99:ae: 52:bc:64:da:c7:9b:c1:e4:82:71:47:71:21:61:63:d2:dc:b6: 62:7e:6d:87:c5:4b:6e:34:60:cb:6e:d4:91:1f:ad:f2:52:51: d8:b9:54:38:8d:85:fa:23:bb:70:ab:c0:f6:2a:c9:67:16:3b: 62:20:9c:cc:e7:24:08:d3:7e:e3:07:66:5c:cb:36:47:d2:87: 6a:f1:35:e9:aa:37:e9:49:2b:cc:56:05:59:5c:7b:da:73:42: 26:a7:eb:7d:d0:c0:db:64:5d:d7:0c:3f:9a:3a:81:e5:5b:5c: 8f:84:b9:72:a2:0c:28:03:58:b1:63:7d:f9:8b:68:dc:cd:72: e3:40:2e:01:0b:42:b2:b3:48:22:a0:4e:61:aa:73:71:fa:fb: f4:94:a6:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBNItTZkElnj7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjVkYzM5ZDgtOTYxYy00OTRkLWEwOGUtZGNhYWM0MGEyY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKw29r9GbQvRwJGNU7m4/i9Z8AsutsdNIa5Q Ch62r33VLkO7zCvvK4u8xEjXJABSBtsrG35kwZvUvrZ0IikvqNi/hbBdTFJt9fxE t42AmifIG6ocvWCFvDnl/CzQy0tDlfQ/z6rGYBcmvFMSUxwhngRfqCSkJV8FjMtQ jQjF5RFjadhVtKqHgcabqeeulxZjun6ZZHYVzkqMl1bkU6xxfkbSF2A6QLgM85Zr wnzvvb7xcbdJYM5w3Ii81iAkqRvCwcFzpaNfZnu3Bx7xyJI7Wky695/mPEXAVZmP KAWu/qyv5sNHZOhz3ztmR2JkyoTw60kwu2Clz9M714xOzxQezQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz1xwQ65xEucBHo1eWoZ8XzlOkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYjk3MmMwNDctMmFmZC0z MGE0LWE0MGItMmI4NTAyMDJjZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEh4HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7GiGL46vIvxM95tR2if9nXrd9fR6FvZI8bW90w/HuVmZW8EWxzCaf3 CUk9HVJR82RNYDxT+ubUJ/STHk83oXnj8e9l2BB1t6VX5kcKoPoOuAxqSYAM0Ssf VUFgDaZEchc9PYoqgHWkj++ZrlK8ZNrHm8HkgnFHcSFhY9LctmJ+bYfFS240YMtu 1JEfrfJSUdi5VDiNhfoju3CrwPYqyWcWO2IgnMznJAjTfuMHZlzLNkfSh2rxNemq N+lJK8xWBVlce9pzQian633QwNtkXdcMP5o6geVbXI+EuXKiDCgDWLFjffmLaNzN cuNALgELQrKzSCKgTmGqc3H6+/SUpqw= -----END CERTIFICATE-----Generated at Sat Sep 26 20:54:50 2026 by rpki-client