$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa File: dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa (raw, json) Hash identifier: ZLKmBHc7XkrFVjAZkxGxIRfwOFej12Yik5+KVJ+6qbw= Subject key identifier: A4:E6:E4:64:02:3B:5E:64:EC:67:FF:C5:4A:36:62:A3:74:51:97:78 Certificate issuer: /CN=290d06b5-40de-4ade-b707-b5e165af8b33 Certificate serial: 010D0C9F4328584F498ADE23EBD7595F86A4EA80 Authority key identifier: 6D:61:84:98:4C:41:4F:CD:82:AC:C9:F4:FD:6A:A7:62:2A:69:FB:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16276 IP address blocks: 136.143.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:de:23:eb:d7:59:5f:86:a4:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290d06b5-40de-4ade-b707-b5e165af8b33 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d60a0f5d-6a7a-40cc-a067-d2198264f864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9f:00:ae:35:46:61:d9:8b:c6:65:4d:97:33: 1a:40:1e:e8:c2:2e:1d:3a:8f:a9:1f:e7:8e:4d:f9: 24:b2:f6:84:ef:21:b4:df:e1:f9:ed:3e:f6:9f:5e: d9:7d:64:1f:b3:b6:8b:19:c5:85:71:3c:36:8b:fd: 19:ae:2f:71:f5:78:81:20:3c:73:2a:1a:5b:b1:1e: 6d:e5:a9:89:16:b9:d6:75:55:78:73:fb:78:c0:27: cc:07:e4:db:93:3a:8f:8c:e1:3b:62:22:52:4a:f3: e9:6e:6e:86:21:fa:ee:aa:78:dc:3d:3c:46:a0:3b: 8d:a7:31:02:e7:2c:21:1e:a0:3b:40:b7:49:bc:53: 9a:8d:3c:e3:79:9a:4c:f7:10:c9:75:a9:be:c5:da: 03:eb:cc:67:f0:8c:73:70:8a:de:c5:45:e7:aa:65: 9b:93:ee:39:59:c7:dd:99:9c:95:73:00:d5:97:b3: 36:dc:df:b2:4f:84:2d:77:e6:97:a9:9d:9a:c1:65: 39:80:d6:bf:2f:45:fb:61:b8:f4:12:89:01:54:b5: 6d:cc:f9:98:95:ce:30:54:0b:15:6e:1f:fe:7c:56: f2:96:7f:45:2a:36:9d:a2:f2:21:f2:6f:46:19:b8: 8d:14:13:a2:6a:a1:07:36:02:ac:c5:d0:08:41:86: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E6:E4:64:02:3B:5E:64:EC:67:FF:C5:4A:36:62:A3:74:51:97:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/dfac43be-96c9-3168-8ce2-5e356aa49ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.crl X509v3 Authority Key Identifier: keyid:6D:61:84:98:4C:41:4F:CD:82:AC:C9:F4:FD:6A:A7:62:2A:69:FB:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer sbgp-ipAddrBlock: critical IPv4: 136.143.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b9:01:ce:a7:a3:77:24:62:a4:2e:54:63:99:23:67:a0:b7: 3a:70:84:99:5c:11:f6:d3:2d:c5:87:2a:62:9c:af:8e:26:26: 27:17:50:49:c4:75:3e:81:f3:f7:aa:47:e4:44:55:47:6c:c9: df:6d:be:2a:c0:db:1a:07:97:0a:c4:f9:05:55:39:ec:d8:7d: ca:19:4b:9f:1d:8d:dd:f5:6f:a8:ea:42:8e:b3:c5:3c:3a:ad: 65:fa:97:29:da:c9:55:18:95:25:2f:47:d4:89:11:73:89:8d: 5d:a2:0c:ad:b3:61:e1:b6:d3:2e:69:0f:85:4c:39:10:c0:a8: 99:e8:c5:ac:ea:de:82:11:e3:b2:67:e1:4d:6c:05:3d:0e:d9: 7f:62:ed:50:0b:84:62:d4:a1:73:0a:fc:47:3e:b5:34:e6:5c: 1a:e8:f4:54:dc:27:4f:22:0b:a7:bd:f4:1c:17:1e:e2:bb:ee: 92:21:38:03:94:28:2a:47:79:f1:6f:af:1c:b8:a0:0a:0f:fc: 03:1c:de:4c:36:5d:8a:f6:ef:11:7c:cd:93:b9:1f:a2:e4:34: 59:be:5f:de:ca:83:f5:7e:a4:73:3b:01:23:ce:b5:e6:d9:cd: 10:23:1f:ff:df:c1:2d:66:fe:20:03:5f:25:cb:59:b7:a0:0a: 59:ed:3c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jit4j69dZX4ak6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkwZDA2YjUtNDBkZS00YWRlLWI3MDctYjVlMTY1YWY4 YjMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDYwYTBmNWQtNmE3YS00MGNjLWEwNjctZDIxOTgyNjRmODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ8ArjVGYdmLxmVNlzMaQB7owi4dOo+pH+eO TfkksvaE7yG03+H57T72n17ZfWQfs7aLGcWFcTw2i/0Zri9x9XiBIDxzKhpbsR5t 5amJFrnWdVV4c/t4wCfMB+TbkzqPjOE7YiJSSvPpbm6GIfruqnjcPTxGoDuNpzEC 5ywhHqA7QLdJvFOajTzjeZpM9xDJdam+xdoD68xn8IxzcIrexUXnqmWbk+45Wcfd mZyVcwDVl7M23N+yT4Qtd+aXqZ2awWU5gNa/L0X7Ybj0EokBVLVtzPmYlc4wVAsV bh/+fFbyln9FKjadovIh8m9GGbiNFBOiaqEHNgKsxdAIQYbWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTm5GQCO15k7Gf/xUo2YqN0UZd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yOTBk MDZiNS00MGRlLTRhZGUtYjcwNy1iNWUxNjVhZjhiMzMvZGZhYzQzYmUtOTZjOS0z MTY4LThjZTItNWUzNTZhYTQ5ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjkwZDA2YjUtNDBkZS00YWRlLWI3 MDctYjVlMTY1YWY4YjMzLzI5MGQwNmI1LTQwZGUtNGFkZS1iNzA3LWI1ZTE2NWFm OGIzMy5jcmwwHwYDVR0jBBgwFoAUbWGEmExBT82CrMn0/WqnYipp+7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yOTBkMDZiNS00MGRlLTRhZGUtYjcwNy1iNWUx NjVhZjhiMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiI/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu5Ac6no3ckYqQuVGOZI2egtzpwhJlcEfbTLcWHKmKcr44mJicXUEnE dT6B8/eqR+REVUdsyd9tvirA2xoHlwrE+QVVOezYfcoZS58djd31b6jqQo6zxTw6 rWX6lynayVUYlSUvR9SJEXOJjV2iDK2zYeG20y5pD4VMORDAqJnoxazq3oIR47Jn 4U1sBT0O2X9i7VALhGLUoXMK/Ec+tTTmXBro9FTcJ08iC6e99BwXHuK77pIhOAOU KCpHefFvrxy4oAoP/AMc3kw2XYr27xF8zZO5H6LkNFm+X97Kg/V+pHM7ASPOtebZ zRAjH//fwS1m/iADXyXLWbegClntPBw= -----END CERTIFICATE-----Generated at Tue Sep 29 02:47:24 2026 by rpki-client