$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa File: a98512e7-344c-36be-b82d-198e7f9783ca.roa (raw, json) Hash identifier: 0BMgBlJmjN164OHuUH3Nk4/G1J89+CxKzh2c864gPtM= Subject key identifier: AA:31:22:8E:5D:3C:BA:B6:6B:02:35:A2:04:40:43:A2:20:A6:76:44 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584F8F3DB5855CC6A71BB6693F80 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 14593 IP address blocks: 135.129.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b5:85:5c:c6:a7:1b:b6:69:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=63b0d3e3-3a84-4665-811d-8de8d3327629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:4c:0e:c0:f5:59:e9:12:5c:01:d6:f2:d8: ef:61:bb:46:d4:42:49:7d:8b:3e:dc:da:d1:87:35: 22:cd:78:09:42:b5:9e:79:b9:16:d5:aa:0c:74:c5: 00:0b:2c:d2:a0:e3:82:7a:8b:8f:41:5b:b8:c1:83: 65:7e:f7:6c:90:40:ad:97:4d:46:cb:37:ec:63:3a: 21:a3:b9:ba:2a:49:d1:20:83:4d:7b:87:6c:d3:4e: 7c:91:8b:ea:53:c4:91:67:f1:5a:3a:40:e2:e6:8a: a0:07:93:df:dc:f5:2e:6b:03:4f:db:18:ff:af:69: 9b:ce:7a:e4:bf:49:fa:a3:5d:8d:64:6a:5e:6a:d2: 80:92:b7:e6:b1:e8:fa:b7:bc:7a:34:39:08:1c:21: ee:0e:94:85:31:fa:ba:33:b8:65:3c:90:7a:da:e4: f0:c2:08:a6:23:28:b4:e2:26:a6:18:43:08:1f:aa: b3:13:8d:0e:cf:14:30:f4:5e:0a:dc:13:6f:af:7a: bd:c2:50:9e:02:a1:18:90:26:ce:60:c6:db:d7:24: e5:fb:41:1d:cc:07:d8:b3:94:75:1b:e4:a5:92:b9: 9f:27:3e:9e:2f:85:8b:8c:6b:11:73:c9:90:28:30: 89:13:88:04:e1:62:4b:ba:42:7d:c7:e3:c6:ee:15: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:31:22:8E:5D:3C:BA:B6:6B:02:35:A2:04:40:43:A2:20:A6:76:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 135.129.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:99:f8:5c:d3:50:e0:ee:ae:7c:2b:28:87:14:61:00:12:91: 7f:72:e4:8e:78:7a:ac:f7:1a:66:9f:48:16:53:fb:82:03:4c: d2:ce:a4:b4:ca:ce:4e:b4:cf:8d:b9:41:6b:06:a9:d8:28:be: 07:ca:46:22:cb:f9:1a:6f:84:d2:fc:17:b7:79:d2:77:60:7a: 38:30:e0:81:b1:c6:f0:fd:db:bf:d0:6f:5b:d2:b5:0a:e7:d4: 00:66:56:fb:68:7b:fa:71:ac:d4:06:3e:f9:74:99:ee:61:87: 31:ae:c9:3d:b4:37:ee:4b:da:6f:ba:27:f1:ee:63:c8:14:69: b1:0a:26:1f:ea:60:4a:43:93:3c:2f:af:f9:5b:dc:6f:28:ed: 59:ae:b9:87:a4:9f:ab:3f:4b:4d:b4:c3:23:41:45:10:02:cf: 59:dc:64:34:64:61:ae:7e:36:72:c7:4d:74:0e:8e:c0:4f:8d: b0:c4:16:21:b3:6d:98:e3:6c:1c:78:6a:e9:0e:b1:46:ad:1e: 5f:a0:9e:92:e0:96:e5:fe:e1:a8:4d:7e:22:54:f7:9a:d0:25: ee:01:59:df:f1:fc:ee:c3:77:53:f6:fc:dc:be:91:af:c4:2f: 76:38:1d:52:db:26:85:d6:d0:87:7b:94:f3:6b:6b:e3:23:73: d8:f9:10:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbWFXManG7ZpP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NjNiMGQzZTMtM2E4NC00NjY1LTgxMWQtOGRlOGQzMzI3NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrBMDsD1WekSXAHW8tjvYbtG1EJJfYs+3NrR hzUizXgJQrWeebkW1aoMdMUACyzSoOOCeouPQVu4wYNlfvdskECtl01GyzfsYzoh o7m6KknRIINNe4ds0058kYvqU8SRZ/FaOkDi5oqgB5Pf3PUuawNP2xj/r2mbznrk v0n6o12NZGpeatKAkrfmsej6t7x6NDkIHCHuDpSFMfq6M7hlPJB62uTwwgimIyi0 4iamGEMIH6qzE40OzxQw9F4K3BNvr3q9wlCeAqEYkCbOYMbb1yTl+0EdzAfYs5R1 G+SlkrmfJz6eL4WLjGsRc8mQKDCJE4gE4WJLukJ9x+PG7hUV0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoxIo5dPLq2awI1ogRAQ6IgpnZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYTk4NTEyZTctMzQ0Yy0z NmJlLWI4MmQtMTk4ZTdmOTc4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGh4EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+Z+FzTUODurnwrKIcUYQASkX9y5I54eqz3GmafSBZT+4IDTNLOpLTK zk60z425QWsGqdgovgfKRiLL+RpvhNL8F7d50ndgejgw4IGxxvD927/Qb1vStQrn 1ABmVvtoe/pxrNQGPvl0me5hhzGuyT20N+5L2m+6J/HuY8gUabEKJh/qYEpDkzwv r/lb3G8o7VmuuYekn6s/S020wyNBRRACz1ncZDRkYa5+NnLHTXQOjsBPjbDEFiGz bZjjbBx4aukOsUatHl+gnpLgluX+4ahNfiJU95rQJe4BWd/x/O7Dd1P2/Ny+ka/E L3Y4HVLbJoXW0Id7lPNra+Mjc9j5EE8= -----END CERTIFICATE-----Generated at Sun Nov 1 17:36:41 2026 by rpki-client