$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/ddd51249-cc34-30af-9a06-ae5df178997d.roa File: ddd51249-cc34-30af-9a06-ae5df178997d.roa (raw, json) Hash identifier: x2DnkhC0M+poJ4Etab5+9IJMMvnsN99SUswQNFx0tzw= Subject key identifier: 85:95:02:3D:CA:78:84:CB:0A:0F:72:E5:4A:A7:67:44:3F:16:65:54 Certificate issuer: /CN=5b5b70d4-ae45-4386-977d-1875706017e9 Certificate serial: 010D0C9F4328584F225D021ED2DE93ACB45A7C80 Authority key identifier: 7B:A9:7F:7E:C9:40:BD:38:1D:0A:39:19:B5:F5:74:05:E3:82:0A:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/ddd51249-cc34-30af-9a06-ae5df178997d.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 65000 IP address blocks: 136.175.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:02:1e:d2:de:93:ac:b4:5a:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5b70d4-ae45-4386-977d-1875706017e9 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=25c6817f-eaff-4324-b9b8-4b1c7a637cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:54:88:89:8f:cd:e2:b5:15:eb:f7:a1:a1: fd:16:83:ed:ee:e1:80:ab:1a:7e:a9:99:11:f8:ce: 7f:c3:52:80:40:7f:5e:07:0a:34:e5:56:1f:c9:32: 11:da:49:4a:0c:8b:41:36:87:e0:46:5c:a2:2d:f2: 91:b5:c0:e8:8f:32:41:3d:71:96:8d:72:20:b2:2a: da:82:87:34:22:61:f9:b4:55:96:db:c5:51:dc:82: c7:94:67:4b:2c:14:66:92:5e:9b:e3:b4:5f:9c:a6: 3f:c5:35:aa:b0:73:fe:fd:f1:a6:aa:d6:a2:d1:e0: e2:ef:eb:58:2d:84:38:8f:51:05:16:84:fd:f1:c8: c7:c7:0d:b6:3f:02:19:05:14:f4:b6:7e:85:54:bf: 14:72:1b:9f:ab:3a:4a:aa:db:77:92:40:11:f6:0e: 04:19:93:63:cb:c4:0d:a1:74:51:44:dc:5f:64:9f: 3c:2a:c4:67:c9:f5:97:5f:30:21:f1:fb:13:e2:1e: 63:f4:a8:41:58:67:d3:9d:48:5a:e0:a2:5b:23:74: 33:ce:ff:b5:4b:a6:c1:81:89:ca:0a:13:ab:cf:00: b9:a6:93:ca:cb:30:f6:9a:ad:e8:16:e4:30:1f:d5: 20:37:22:09:5f:57:de:c6:55:41:59:2f:ec:f9:4d: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:02:3D:CA:78:84:CB:0A:0F:72:E5:4A:A7:67:44:3F:16:65:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/ddd51249-cc34-30af-9a06-ae5df178997d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.crl X509v3 Authority Key Identifier: keyid:7B:A9:7F:7E:C9:40:BD:38:1D:0A:39:19:B5:F5:74:05:E3:82:0A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer sbgp-ipAddrBlock: critical IPv4: 136.175.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e5:e2:73:e5:0f:7a:3d:a4:8e:ea:18:c5:ee:92:32:27:0c: 9f:01:0f:71:49:1c:5d:67:9e:61:52:68:8f:76:69:a2:68:01: 0c:41:f6:37:e7:b5:da:a3:66:53:9d:60:64:3c:f2:21:e6:ea: 05:a6:54:5b:20:2b:b9:03:67:a7:cb:0f:4a:60:ca:ea:8c:a2: 9c:05:53:ec:ec:42:fc:40:3e:b1:e7:45:09:c9:87:cb:af:05: ec:9f:55:8b:10:bf:f4:80:58:a8:ad:06:c8:9a:18:e5:be:bf: 52:cd:bf:c0:0e:08:e4:d2:49:7c:32:88:eb:ae:44:64:77:f9: b9:89:93:c3:9c:de:b0:c6:13:59:be:70:01:b6:53:df:37:ac: 4f:91:cd:c3:1e:5e:e4:fd:1b:b8:ed:b4:3e:63:86:1f:05:52: 7d:3e:90:1f:ba:94:35:62:01:d1:b2:1a:60:69:9b:5c:7c:7d: 87:12:4b:ef:65:d6:85:a2:e8:f4:b3:cc:30:56:9c:cb:81:81: c1:9f:57:a7:63:0b:cb:60:ae:a4:ec:26:ea:40:d3:4f:2f:af: ac:67:c8:be:ad:41:3e:16:1e:cc:71:ab:31:9a:c2:18:87:15: 43:52:41:4e:ad:6e:a8:bd:c7:c1:fd:31:7a:e4:30:cf:53:cd: f1:48:3c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQIe0t6TrLRafIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI1YjcwZDQtYWU0NS00Mzg2LTk3N2QtMTg3NTcwNjAx N2U5MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MjVjNjgxN2YtZWFmZi00MzI0LWI5YjgtNGIxYzdhNjM3Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrdUiImPzeK1Fev3oaH9FoPt7uGAqxp+qZkR +M5/w1KAQH9eBwo05VYfyTIR2klKDItBNofgRlyiLfKRtcDojzJBPXGWjXIgsira goc0ImH5tFWW28VR3ILHlGdLLBRmkl6b47RfnKY/xTWqsHP+/fGmqtai0eDi7+tY LYQ4j1EFFoT98cjHxw22PwIZBRT0tn6FVL8UchufqzpKqtt3kkAR9g4EGZNjy8QN oXRRRNxfZJ88KsRnyfWXXzAh8fsT4h5j9KhBWGfTnUha4KJbI3Qzzv+1S6bBgYnK ChOrzwC5ppPKyzD2mq3oFuQwH9UgNyIJX1fexlVBWS/s+U3eewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWVAj3KeITLCg9y5UqnZ0Q/FmVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81YjVi NzBkNC1hZTQ1LTQzODYtOTc3ZC0xODc1NzA2MDE3ZTkvZGRkNTEyNDktY2MzNC0z MGFmLTlhMDYtYWU1ZGYxNzg5OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWI1YjcwZDQtYWU0NS00Mzg2LTk3 N2QtMTg3NTcwNjAxN2U5LzViNWI3MGQ0LWFlNDUtNDM4Ni05NzdkLTE4NzU3MDYw MTdlOS5jcmwwHwYDVR0jBBgwFoAUe6l/fslAvTgdCjkZtfV0BeOCCiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YjViNzBkNC1hZTQ1LTQzODYtOTc3ZC0xODc1 NzA2MDE3ZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfl4nPlD3o9pI7qGMXukjInDJ8BD3FJHF1nnmFSaI92aaJoAQxB9jfn tdqjZlOdYGQ88iHm6gWmVFsgK7kDZ6fLD0pgyuqMopwFU+zsQvxAPrHnRQnJh8uv BeyfVYsQv/SAWKitBsiaGOW+v1LNv8AOCOTSSXwyiOuuRGR3+bmJk8Oc3rDGE1m+ cAG2U983rE+RzcMeXuT9G7jttD5jhh8FUn0+kB+6lDViAdGyGmBpm1x8fYcSS+9l 1oWi6PSzzDBWnMuBgcGfV6djC8tgrqTsJupA008vr6xnyL6tQT4WHsxxqzGawhiH FUNSQU6tbqi9x8H9MXrkMM9TzfFIPCE= -----END CERTIFICATE-----Generated at Sat Sep 19 00:11:59 2026 by rpki-client