$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa File: 5ec3dafb-0c5c-33db-868e-2f679742f920.roa (raw, json) Hash identifier: pVUE142YQGzhmOMuYy/sRldrSFj/ILOt2z1dnvWWn5U= Subject key identifier: 90:5D:72:30:AB:1D:A2:F7:66:27:CF:96:EB:0B:82:59:89:FF:2D:56 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584EED5206F98E85D599653BEC00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 14340 IP address blocks: 136.147.164.0/22 maxlen: 24 136.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:06:f9:8e:85:d5:99:65:3b:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=cdda4c9c-b5f4-4aeb-a905-0d7bd0818306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:0e:56:c0:a2:0c:87:9b:c6:aa:83:a5:76: d9:d8:da:2b:1d:b6:c9:f2:13:15:c7:bc:f0:2f:de: f7:72:65:55:69:41:3a:1e:0c:44:b9:01:66:fc:30: 55:40:2c:35:79:51:50:8d:49:42:4f:e3:37:3c:70: 94:1c:89:01:07:c7:70:00:f0:9f:12:32:38:af:ea: d9:b8:e8:a4:81:32:2a:a3:53:d2:e7:0d:79:93:21: 26:f9:d9:e7:e1:ce:d8:f3:b0:04:91:f3:9f:79:34: f8:75:9c:63:47:c2:f8:17:29:92:02:09:1d:b2:79: d9:9f:a6:e0:81:e1:fb:ab:56:15:43:3a:92:60:d3: 71:be:f9:39:c6:ad:a0:67:23:c8:6b:f9:45:49:23: 2b:fb:58:3e:43:99:bf:44:85:b4:5f:a3:3b:79:07: 16:f0:e4:5e:ed:45:d2:e9:17:b4:da:6d:97:1d:2a: 38:f0:15:9f:df:f1:cf:5f:96:32:eb:d3:35:24:e2: 7c:45:f4:5a:cf:95:52:8a:b5:55:c6:ce:d1:5b:9f: 68:4d:e1:d6:5c:b0:80:c7:eb:ef:aa:b9:c1:ad:7e: 1f:09:59:c1:e0:29:74:91:da:71:e3:0d:f4:a5:55: ca:79:a2:aa:d9:f1:ab:b5:49:60:26:a8:c5:14:30: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:72:30:AB:1D:A2:F7:66:27:CF:96:EB:0B:82:59:89:FF:2D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.164.0/22 136.147.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:47:f4:ea:8a:6a:d6:7e:16:ef:bd:89:b7:02:c2:78:c2:0b: e6:92:24:45:21:b2:b7:50:58:02:70:72:80:e6:aa:4b:bb:18: 6e:05:35:32:53:45:40:a8:5d:ad:32:3e:a6:3d:61:8f:e2:00: 6f:7f:bd:ef:03:f1:38:92:08:fa:34:46:7b:e2:e6:5f:99:67: 69:92:07:34:21:c5:a5:52:56:ce:1a:ff:82:8f:b4:ad:27:b7: cd:7e:eb:eb:d0:58:77:b5:f0:ca:32:27:2b:07:90:fe:e9:4a: 9b:ab:d9:f9:05:e4:1f:5e:a0:1c:12:4c:94:87:a5:89:db:61: 6b:2b:82:99:c7:47:96:f6:f2:14:78:2e:4a:23:3a:c7:08:bf: a4:5a:05:2a:35:bb:ba:d1:72:0e:12:50:34:4b:23:26:30:a3: b5:3d:2c:83:0f:2c:20:19:5d:ad:a3:da:c4:3d:f6:e6:d0:c4: 54:3f:f6:ab:a6:d4:da:24:f1:06:e0:4f:23:e9:d0:81:92:2d: 52:ea:bc:34:95:c4:42:67:99:29:16:d9:9f:06:73:3b:37:50: 84:04:21:fb:07:a3:9b:fe:d0:9b:72:e9:1e:81:48:47:4a:40: c9:ba:bc:68:6f:5d:61:01:08:f6:44:01:f6:c2:bf:65:3c:29: 26:5f:4c:cc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7tUgb5joXVmWU77AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2RkYTRjOWMtYjVmNC00YWViLWE5MDUtMGQ3YmQwODE4MzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwsOVsCiDIebxqqDpXbZ2NorHbbJ8hMVx7zw L973cmVVaUE6HgxEuQFm/DBVQCw1eVFQjUlCT+M3PHCUHIkBB8dwAPCfEjI4r+rZ uOikgTIqo1PS5w15kyEm+dnn4c7Y87AEkfOfeTT4dZxjR8L4FymSAgkdsnnZn6bg geH7q1YVQzqSYNNxvvk5xq2gZyPIa/lFSSMr+1g+Q5m/RIW0X6M7eQcW8ORe7UXS 6Re02m2XHSo48BWf3/HPX5Yy69M1JOJ8RfRaz5VSirVVxs7RW59oTeHWXLCAx+vv qrnBrX4fCVnB4Cl0kdpx4w30pVXKeaKq2fGrtUlgJqjFFDBhxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJBdcjCrHaL3ZifPlusLglmJ/y1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWVjM2RhZmItMGM1Yy0z M2RiLTg2OGUtMmY2Nzk3NDJmOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKdH9OqKatZ+Fu+9ibcCwnjCC+aSJEUhsrdQWAJwcoDmqku7 GG4FNTJTRUCoXa0yPqY9YY/iAG9/ve8D8TiSCPo0Rnvi5l+ZZ2mSBzQhxaVSVs4a /4KPtK0nt81+6+vQWHe18MoyJysHkP7pSpur2fkF5B9eoBwSTJSHpYnbYWsrgpnH R5b28hR4LkojOscIv6RaBSo1u7rRcg4SUDRLIyYwo7U9LIMPLCAZXa2j2sQ99ubQ xFQ/9qum1Nok8QbgTyPp0IGSLVLqvDSVxEJnmSkW2Z8Gczs3UIQEIfsHo5v+0Jty 6R6BSEdKQMm6vGhvXWEBCPZEAfbCv2U8KSZfTMw= -----END CERTIFICATE-----Generated at Sat Sep 26 04:20:24 2026 by rpki-client