$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/003e5639-576c-314a-99fe-2ac8033cd018.roa File: 003e5639-576c-314a-99fe-2ac8033cd018.roa (raw, json) Hash identifier: 21BSEoRFegt0QoobjlSg0eh+m/2sCOn2ZhF14jnHGmM= Subject key identifier: 98:02:F4:9C:95:4A:96:C6:12:CE:3B:0A:E7:3B:B0:6C:28:CF:14:F8 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F4328584F497CDB3D513DF464E4CFD940 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/003e5639-576c-314a-99fe-2ac8033cd018.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36492 IP address blocks: 136.23.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:db:3d:51:3d:f4:64:e4:cf:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b9accc8-0d17-453d-b8c2-e055920da697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:3b:42:2f:07:89:15:d6:b4:aa:8c:ff:12: 83:fb:45:a9:4f:5a:ed:f0:7a:db:00:c7:8f:7b:77: a2:4c:26:8d:53:61:33:48:c2:27:88:19:f4:92:74: 70:40:ca:39:6e:74:c3:b9:8f:3c:39:b7:e8:0b:35: e3:78:a0:8f:64:2f:56:da:c5:62:99:64:60:9e:71: 40:8f:bf:57:78:77:d9:9c:fd:eb:67:91:87:34:f8: 98:71:2d:85:9d:24:6a:49:87:be:da:95:44:19:bb: fd:76:d5:8b:aa:64:25:b5:e0:15:07:31:e7:ab:69: 0c:77:32:7a:0a:3e:2b:8e:14:56:f9:17:61:40:0d: fd:44:7c:1e:cd:2b:d7:30:86:b9:8a:9d:ef:7b:ff: f1:29:ae:fa:27:59:41:3e:e1:0d:b7:68:af:59:29: ba:2c:66:e3:ba:11:fd:a3:6f:f3:a1:be:86:ba:56: 1c:f5:f4:41:f3:e9:d8:3a:04:5f:06:7b:c9:18:ab: fe:87:ba:95:a6:03:39:22:52:70:dc:46:a7:3b:07: ed:d2:5a:90:16:ec:e0:50:51:b6:36:88:0f:a2:1d: bb:35:92:7d:74:2e:2a:6d:f2:be:e7:98:6e:ce:f0: 4d:98:2f:4a:be:d7:b3:e6:2e:d4:58:5d:ea:a5:11: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:02:F4:9C:95:4A:96:C6:12:CE:3B:0A:E7:3B:B0:6C:28:CF:14:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/003e5639-576c-314a-99fe-2ac8033cd018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6d:37:31:9c:71:f2:58:47:9c:d2:ad:af:07:9b:66:d2:3f: 43:1a:fd:9e:42:ec:36:65:bf:d8:21:f3:b1:0b:07:94:55:3d: 88:52:7c:30:03:fd:23:f7:79:72:00:d8:b7:09:4a:9a:bc:b0: eb:91:69:a0:fc:58:40:1f:8b:5e:1a:be:9b:a0:e4:1b:dc:fc: e6:d4:00:da:8f:d3:94:78:5f:17:29:2c:11:f8:5c:06:64:92: ad:aa:d8:83:d7:69:e4:f2:96:ed:b7:41:ad:21:d0:83:83:ae: 15:21:da:68:00:83:5b:63:0a:76:dc:50:b7:f0:a8:a0:8c:57: 53:01:f7:3a:97:fd:66:04:5b:75:58:d5:30:b0:c2:0c:57:67: 63:a7:e6:1d:37:8e:d0:84:77:b6:5a:d9:f4:4e:94:15:2a:b2: d8:fa:5f:e5:30:a9:95:e1:80:d6:95:45:ee:6d:ed:72:e9:1d: 2c:e2:48:9a:8a:68:eb:54:98:ef:0d:22:7f:93:b2:b7:c5:78: 22:36:59:8e:d3:5b:be:e1:57:f1:00:84:fa:40:ce:0f:92:c1: 75:a7:5d:2c:6c:bc:f3:5f:9a:29:d6:65:7c:b0:de:ec:51:23: ca:22:1f:36:e1:5b:17:53:ec:9f:2e:b0:67:47:74:8f:98:2e: 89:ed:b2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNs9UT30ZOTP2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI5YWNjYzgtMGQxNy00NTNkLWI4YzItZTA1NTkyMGRhNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS07Qi8HiRXWtKqM/xKD+0WpT1rt8HrbAMeP e3eiTCaNU2EzSMIniBn0knRwQMo5bnTDuY88ObfoCzXjeKCPZC9W2sVimWRgnnFA j79XeHfZnP3rZ5GHNPiYcS2FnSRqSYe+2pVEGbv9dtWLqmQlteAVBzHnq2kMdzJ6 Cj4rjhRW+RdhQA39RHwezSvXMIa5ip3ve//xKa76J1lBPuENt2ivWSm6LGbjuhH9 o2/zob6GulYc9fRB8+nYOgRfBnvJGKv+h7qVpgM5IlJw3EanOwft0lqQFuzgUFG2 NogPoh27NZJ9dC4qbfK+55huzvBNmC9Kvtez5i7UWF3qpRFUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgC9JyVSpbGEs47Cuc7sGwozxT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMDAzZTU2MzktNTc2Yy0z MTRhLTk5ZmUtMmFjODAzM2NkMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBtNzGccfJYR5zSra8Hm2bSP0Ma/Z5C7DZlv9gh87ELB5RVPYhSfDAD /SP3eXIA2LcJSpq8sOuRaaD8WEAfi14avpug5Bvc/ObUANqP05R4XxcpLBH4XAZk kq2q2IPXaeTylu23Qa0h0IODrhUh2mgAg1tjCnbcULfwqKCMV1MB9zqX/WYEW3VY 1TCwwgxXZ2On5h03jtCEd7Za2fROlBUqstj6X+UwqZXhgNaVRe5t7XLpHSziSJqK aOtUmO8NIn+TsrfFeCI2WY7TW77hV/EAhPpAzg+SwXWnXSxsvPNfminWZXyw3uxR I8oiHzbhWxdT7J8usGdHdI+YLontsmk= -----END CERTIFICATE-----Generated at Sun Sep 27 23:45:45 2026 by rpki-client