$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/865de0fc-f14e-3558-b181-ae008e47bfa2.roa File: 865de0fc-f14e-3558-b181-ae008e47bfa2.roa (raw, json) Hash identifier: GzseNkl+yT4hYmYHCNZ4CJN1+HwsBT30Nm2qsxFTPzA= Subject key identifier: 34:36:26:4F:18:D4:B5:76:C5:4A:1A:C1:2B:B8:88:08:42:52:36:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497324D937F2B80D612F4500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/865de0fc-f14e-3558-b181-ae008e47bfa2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 136.248.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:24:d9:37:f2:b8:0d:61:2f:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=62ceedb1-fbf1-4d8c-802c-8363b86a950e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:7e:fb:c2:80:a6:01:96:80:e8:4f:32:09: 7c:5d:16:b1:60:6c:df:6d:20:9e:4c:67:1f:6d:2a: a7:a1:81:2d:a8:97:41:2f:5d:fe:45:97:50:79:b6: 09:9b:c9:fc:68:24:92:0c:93:af:14:16:63:36:b1: 96:63:14:7b:66:18:ee:d1:e6:9b:7f:9a:80:01:f0: 87:44:cc:7b:fe:0a:b0:3b:7a:fa:86:dd:14:cd:cb: 4f:1e:fb:99:a4:a8:d0:05:f5:10:ac:c8:ea:5f:19: f5:f2:18:88:3f:39:5a:b4:7d:95:13:7f:0f:fa:55: 1e:2c:0d:cc:e2:6c:6e:11:2d:b9:86:2e:35:dc:4c: c0:ff:e5:d4:e2:13:0f:bb:27:c9:45:61:29:31:b7: d1:11:0f:89:c8:f0:d1:0a:79:ba:de:23:02:d5:7f: 7b:3e:53:af:f3:84:51:ef:a7:cb:1e:ee:77:af:07: 2c:10:df:40:19:fd:dd:d8:17:ee:35:53:d4:77:6c: ff:eb:ba:e8:05:25:79:73:68:5a:c1:6f:84:d4:45: bf:02:5c:37:2d:83:a1:9d:8d:b7:c1:e5:85:d4:07: ce:ef:23:5b:b5:9a:bb:a5:4d:13:72:a5:d0:42:0b: 0a:64:2f:c8:2c:44:25:ca:b4:b9:ea:4e:43:0a:6f: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:26:4F:18:D4:B5:76:C5:4A:1A:C1:2B:B8:88:08:42:52:36:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/865de0fc-f14e-3558-b181-ae008e47bfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:64:a1:f6:21:02:f7:07:54:d6:25:2b:f7:5f:63:9d:37:b6: 45:b1:43:61:cf:e2:3a:1e:64:1d:ae:42:77:c7:d0:f8:1c:71: 21:bd:f2:a9:c4:b4:45:7b:c3:52:eb:75:c5:ae:60:55:df:0e: 8b:12:2b:c7:45:ef:19:c3:75:07:d1:e1:aa:fd:8b:88:99:ae: 0c:d1:3e:7f:3a:49:32:ae:46:10:94:e4:a3:57:56:2f:31:cc: 94:39:7c:c4:34:33:91:77:bc:4a:f0:05:1a:e3:47:9e:00:3a: 8a:af:96:52:1b:29:12:05:8c:cb:20:da:a9:0b:52:32:2e:b9: bb:43:d4:97:b2:e6:a2:a2:b9:9b:ae:e1:87:6d:cf:b5:cb:57: 45:25:59:33:aa:2e:bb:d1:63:d1:86:f0:0c:2f:11:92:e5:f7: 94:91:8a:06:5e:27:7f:86:28:cf:6e:9f:de:d2:df:96:c3:d9: 2e:fa:0c:30:c3:6e:ee:2b:19:13:d6:28:c9:de:bf:b9:e9:e6: 45:9e:3e:95:20:88:ce:61:2a:77:bd:78:c0:b9:3b:1b:0b:05: 0e:26:b8:1a:f9:81:68:69:81:42:87:23:39:3e:4b:ec:ba:5d: 11:b6:3f:5c:0b:99:25:23:a1:00:51:40:40:1d:4e:c5:fa:fd: 78:ea:d8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyTZN/K4DWEvRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjJjZWVkYjEtZmJmMS00ZDhjLTgwMmMtODM2M2I4NmE5NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9V++8KApgGWgOhPMgl8XRaxYGzfbSCeTGcf bSqnoYEtqJdBL13+RZdQebYJm8n8aCSSDJOvFBZjNrGWYxR7Zhju0eabf5qAAfCH RMx7/gqwO3r6ht0UzctPHvuZpKjQBfUQrMjqXxn18hiIPzlatH2VE38P+lUeLA3M 4mxuES25hi413EzA/+XU4hMPuyfJRWEpMbfREQ+JyPDRCnm63iMC1X97PlOv84RR 76fLHu53rwcsEN9AGf3d2BfuNVPUd2z/67roBSV5c2hawW+E1EW/Alw3LYOhnY23 weWF1AfO7yNbtZq7pU0TcqXQQgsKZC/ILEQlyrS56k5DCm+48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ2Jk8Y1LV2xUoawSu4iAhCUjY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY1ZGUwZmMtZjE0ZS0z NTU4LWIxODEtYWUwMDhlNDdiZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZkofYhAvcHVNYlK/dfY503tkWxQ2HP4joeZB2uQnfH0PgccSG98qnE tEV7w1LrdcWuYFXfDosSK8dF7xnDdQfR4ar9i4iZrgzRPn86STKuRhCU5KNXVi8x zJQ5fMQ0M5F3vErwBRrjR54AOoqvllIbKRIFjMsg2qkLUjIuubtD1Jey5qKiuZuu 4Ydtz7XLV0UlWTOqLrvRY9GG8AwvEZLl95SRigZeJ3+GKM9un97S35bD2S76DDDD bu4rGRPWKMnev7np5kWePpUgiM5hKne9eMC5OxsLBQ4muBr5gWhpgUKHIzk+S+y6 XRG2P1wLmSUjoQBRQEAdTsX6/Xjq2D0= -----END CERTIFICATE-----Generated at Sun Sep 27 21:49:06 2026 by rpki-client