$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa File: 36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa (raw, json) Hash identifier: iBJEw/rVLMWBRtM0UqyY1XV6ldjVnr4dzkl3YyGlLd4= Subject key identifier: 78:44:FB:AD:5F:5C:63:5E:EB:D9:41:2A:F7:FC:57:7D:AF:F4:05:7D Certificate issuer: /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410 Certificate serial: 010D0C9F4328584F497448DA4244DB2F6D633880 Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20213 IP address blocks: 172.99.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:48:da:42:44:db:2f:6d:63:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f701672-d397-49d3-8be1-539321a27cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:6c:fb:57:fa:35:4b:51:ae:07:31:db:bc: fb:81:95:ae:1b:d1:06:31:c7:93:52:7b:8a:e3:ab: 50:f1:b8:71:67:00:96:d4:aa:e7:a2:2d:d1:23:0f: 36:bf:c4:f4:02:7e:d4:e9:b9:09:17:3e:38:76:6e: 6e:c4:5a:55:66:17:47:6d:e0:bc:7d:8a:ea:15:2c: 37:05:82:0a:96:fb:92:2b:1e:ee:1d:52:2e:c9:bb: 0b:61:f4:1a:5b:7d:99:53:3f:0e:af:d5:c7:24:ec: 4d:22:5f:36:99:86:11:d9:ad:6b:81:84:ac:c1:b6: 8a:ca:f5:f5:1e:0e:62:07:5a:f1:90:75:f4:9f:32: 5a:e4:9b:21:5f:2b:c8:8f:89:4e:df:03:8d:40:ff: 8a:05:27:db:79:ef:0a:ce:22:28:6b:9c:de:8e:86: 70:71:8e:76:96:de:25:7f:83:bf:1f:86:da:c6:83: 78:da:31:44:0b:b9:3e:d7:c0:86:0b:5b:98:91:f1: 25:5d:b7:3c:68:b5:eb:59:d5:ce:34:d0:b1:7f:a8: dc:b8:a8:c0:74:4a:5c:44:cf:0e:45:12:b0:bf:9f: 8d:6e:83:c2:bf:ed:6c:9e:00:60:29:41:b6:23:ea: 62:7a:c3:24:19:b2:fd:dd:17:62:57:03:b7:a0:36: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:44:FB:AD:5F:5C:63:5E:EB:D9:41:2A:F7:FC:57:7D:AF:F4:05:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/36863e60-1d4c-31d4-bc24-b41e7f3489c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl X509v3 Authority Key Identifier: keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer sbgp-ipAddrBlock: critical IPv4: 172.99.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:09:cd:a1:d8:be:12:af:14:13:a2:9f:01:62:1b:4e:91:5b: 1a:d6:78:82:1f:e3:66:db:39:bc:f0:68:67:a8:0a:fc:77:3b: a4:0e:21:c4:2f:1c:c2:72:f4:6f:19:cd:5e:e6:3c:43:cb:58: 82:2a:6f:ad:e6:3f:e4:cb:20:18:50:57:24:a8:28:be:a4:0e: 8d:62:7c:68:b0:38:58:61:9c:9a:53:58:3f:e5:42:a5:b2:07: 54:a9:ca:b5:50:b0:1e:90:c4:b2:36:69:92:0a:c8:27:23:ab: 91:22:eb:d8:4a:67:6e:3c:c0:a2:6f:69:78:0a:e8:8f:a0:11: 49:ea:f5:70:2a:bb:d3:29:ec:30:99:45:13:c5:c5:01:8d:4a: d0:6b:a8:02:44:d7:f4:b0:f1:a1:99:e6:d9:07:01:23:3d:a8: 4c:d8:df:1b:db:76:ec:8b:df:7f:fa:a3:23:b0:3b:b0:4f:31: ab:73:df:c1:ce:0d:38:85:14:06:7c:e5:27:4b:b6:4a:9c:6c: 6a:ca:d1:3d:37:b9:32:3f:b3:2a:31:19:2d:1b:14:b9:ae:38: 5f:a7:c3:5b:b3:ad:fc:bb:7f:e0:d8:30:f5:67:94:46:65:c2: 66:d0:d0:f0:a0:ae:ac:57:93:e0:f9:0b:7d:cd:93:c7:45:91: d7:65:93:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEjaQkTbL21jOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM4ZWYxN2UtZDhkMy00OGU5LTkyZTctODRlOTZmYTY0 NDEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY3MDE2NzItZDM5Ny00OWQzLThiZTEtNTM5MzIxYTI3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Vs+1f6NUtRrgcx27z7gZWuG9EGMceTUnuK 46tQ8bhxZwCW1Krnoi3RIw82v8T0An7U6bkJFz44dm5uxFpVZhdHbeC8fYrqFSw3 BYIKlvuSKx7uHVIuybsLYfQaW32ZUz8Or9XHJOxNIl82mYYR2a1rgYSswbaKyvX1 Hg5iB1rxkHX0nzJa5JshXyvIj4lO3wONQP+KBSfbee8KziIoa5zejoZwcY52lt4l f4O/H4baxoN42jFEC7k+18CGC1uYkfElXbc8aLXrWdXONNCxf6jcuKjAdEpcRM8O RRKwv5+NboPCv+1sngBgKUG2I+piesMkGbL93RdiVwO3oDbvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhE+61fXGNe69lBKvf8V32v9AV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYzhl ZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5NmZhNjQ0MTAvMzY4NjNlNjAtMWQ0Yy0z MWQ0LWJjMjQtYjQxZTdmMzQ4OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWM4ZWYxN2UtZDhkMy00OGU5LTky ZTctODRlOTZmYTY0NDEwL2VjOGVmMTdlLWQ4ZDMtNDhlOS05MmU3LTg0ZTk2ZmE2 NDQxMC5jcmwwHwYDVR0jBBgwFoAUZQxKdrJ6pcgHAo7/MgLEdbQ0974wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lYzhlZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5 NmZhNjQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8JzaHYvhKvFBOinwFiG06RWxrWeIIf42bbObzwaGeoCvx3O6QOIcQv HMJy9G8ZzV7mPEPLWIIqb63mP+TLIBhQVySoKL6kDo1ifGiwOFhhnJpTWD/lQqWy B1SpyrVQsB6QxLI2aZIKyCcjq5Ei69hKZ248wKJvaXgK6I+gEUnq9XAqu9Mp7DCZ RRPFxQGNStBrqAJE1/Sw8aGZ5tkHASM9qEzY3xvbduyL33/6oyOwO7BPMatz38HO DTiFFAZ85SdLtkqcbGrK0T03uTI/syoxGS0bFLmuOF+nw1uzrfy7f+DYMPVnlEZl wmbQ0PCgrqxXk+D5C33Nk8dFkddlk54= -----END CERTIFICATE-----Generated at Sat Sep 26 18:34:22 2026 by rpki-client