$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1d888c02-7951-35e3-bbad-5749a09468dd.roa File: 1d888c02-7951-35e3-bbad-5749a09468dd.roa (raw, json) Hash identifier: uXEePQMHs7vCAj1KgqWzztU8HeU7Ks4QkcvMc8luiB8= Subject key identifier: 49:A3:B1:85:7D:F5:E1:0A:C5:C1:2D:98:74:7D:C5:B3:76:EB:60:CB Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F4328584F497D03ECB9F0A04B169C5800 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1d888c02-7951-35e3-bbad-5749a09468dd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36492 IP address blocks: 136.23.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:03:ec:b9:f0:a0:4b:16:9c:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf312de5-5fe3-470d-992c-d0103ab94806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:41:0c:ca:2a:1b:34:74:7a:ca:85:1c:4b: e5:48:64:6b:6b:9f:ad:d8:73:aa:12:46:52:3e:ac: de:35:6d:c1:58:df:cd:70:99:e9:66:29:7f:ec:6d: 43:9d:8b:47:5a:20:dd:82:27:a2:5c:52:75:d7:6a: f8:d6:9e:a4:9c:31:aa:a0:92:4d:74:4b:3d:bb:f6: 5a:5c:7c:d2:57:d5:aa:7e:3f:c3:97:b6:57:6b:95: 69:46:ef:d5:a0:71:52:a4:14:fc:12:12:20:74:80: d2:04:f5:39:7d:79:f7:76:2e:a1:19:71:b9:4e:95: e2:3f:a5:51:2c:f6:83:7e:5c:9d:c5:68:55:3b:e4: ad:e7:46:c6:da:a7:1f:15:02:d7:43:7f:c0:be:44: 7c:fb:00:48:fc:d1:9e:39:34:e1:95:62:8d:2c:3b: 76:a7:ae:aa:e6:aa:e9:14:58:77:90:87:a0:a5:61: 68:b3:14:15:4e:54:d3:c3:a7:31:98:a0:1a:76:b0: ac:a1:27:8f:de:52:4d:ea:b6:22:f7:3f:6b:49:aa: 57:f6:6b:59:21:b7:b4:14:bf:f1:2b:43:0d:4b:46: 00:5e:a0:fb:23:d6:66:15:c0:c4:09:a0:d1:a8:ca: 6d:4a:96:5c:f7:0b:44:f8:04:bf:d5:47:cc:c1:dd: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A3:B1:85:7D:F5:E1:0A:C5:C1:2D:98:74:7D:C5:B3:76:EB:60:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1d888c02-7951-35e3-bbad-5749a09468dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:d8:cc:8a:dd:61:4b:d0:81:a1:fb:a3:f1:01:89:00:74:52: de:40:1f:2c:96:48:dd:97:78:b2:98:eb:93:46:74:c7:f0:9c: 45:a1:23:25:d3:34:51:f2:27:70:50:9d:51:95:04:58:d8:b3: 81:a3:b2:66:24:0c:35:3f:ba:f4:43:3b:c6:ad:64:1b:73:8a: 24:dd:7c:46:4a:03:d9:d2:8b:e4:4a:9a:20:3d:a9:e8:10:41: ec:84:bb:4d:a7:6f:07:dc:a7:d5:f6:38:fa:c7:e3:c6:ae:96: bf:13:44:90:b3:d7:5a:c3:57:2f:eb:ac:32:2f:20:71:67:fe: fd:b3:70:ad:03:a4:2f:6c:22:9b:ad:b8:44:bc:d5:31:60:20: 57:9c:d5:99:f5:90:b7:ed:15:6e:11:b8:55:42:31:73:32:93: 5a:94:e0:70:b3:32:2e:bd:16:95:43:3c:2d:41:9e:d1:3e:44: 0f:62:c0:a8:fb:c1:25:b2:c2:a7:1b:cd:20:79:16:d4:be:b6: e7:b1:63:ea:d1:c2:93:98:8e:b6:ab:0a:a9:b9:97:5d:fd:c7: bf:e9:89:80:84:ac:64:05:7f:4a:ac:24:f3:81:f1:6c:e0:45: db:dc:35:3a:4c:1d:26:a4:c7:3a:85:a4:86:a8:9e:1e:48:64: db:aa:a9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQPsufCgSxacWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmYzMTJkZTUtNWZlMy00NzBkLTk5MmMtZDAxMDNhYjk0ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0BBDMoqGzR0esqFHEvlSGRra5+t2HOqEkZS PqzeNW3BWN/NcJnpZil/7G1DnYtHWiDdgieiXFJ112r41p6knDGqoJJNdEs9u/Za XHzSV9Wqfj/Dl7ZXa5VpRu/VoHFSpBT8EhIgdIDSBPU5fXn3di6hGXG5TpXiP6VR LPaDflydxWhVO+St50bG2qcfFQLXQ3/AvkR8+wBI/NGeOTThlWKNLDt2p66q5qrp FFh3kIegpWFosxQVTlTTw6cxmKAadrCsoSeP3lJN6rYi9z9rSapX9mtZIbe0FL/x K0MNS0YAXqD7I9ZmFcDECaDRqMptSpZc9wtE+AS/1UfMwd0txQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmjsYV99eEKxcEtmHR9xbN262DLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMWQ4ODhjMDItNzk1MS0z NWUzLWJiYWQtNTc0OWEwOTQ2OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnYzIrdYUvQgaH7o/EBiQB0Ut5AHyyWSN2XeLKY65NGdMfwnEWhIyXT NFHyJ3BQnVGVBFjYs4GjsmYkDDU/uvRDO8atZBtziiTdfEZKA9nSi+RKmiA9qegQ QeyEu02nbwfcp9X2OPrH48aulr8TRJCz11rDVy/rrDIvIHFn/v2zcK0DpC9sIput uES81TFgIFec1Zn1kLftFW4RuFVCMXMyk1qU4HCzMi69FpVDPC1BntE+RA9iwKj7 wSWywqcbzSB5FtS+tuexY+rRwpOYjrarCqm5l139x7/piYCErGQFf0qsJPOB8Wzg RdvcNTpMHSakxzqFpIaonh5IZNuqqcE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:00:05 2026 by rpki-client