$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/3b094856-54d1-3395-a907-a0de1a1301f5.roa File: 3b094856-54d1-3395-a907-a0de1a1301f5.roa (raw, json) Hash identifier: vTUuvfA6cROEWEveHi/hZinSO+HW35e0fwzTwYLnars= Subject key identifier: 16:BF:3F:B7:EE:FE:0F:70:15:B4:F4:43:F2:7A:7E:2C:DC:0D:9D:88 Certificate issuer: /CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Certificate serial: 010D0C9F4328584F90988AF1EF428DAD32B24780 Authority key identifier: E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/3b094856-54d1-3395-a907-a0de1a1301f5.roa Signing time: Tue 20 Oct 2026 12:39:12 +0000 ROA not before: Tue 20 Oct 2026 12:39:12 +0000 ROA not after: Mon 18 Jan 2027 13:39:12 +0000 asID: 21757 IP address blocks: 163.123.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:98:8a:f1:ef:42:8d:ad:32:b2:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Validity Not Before: Oct 20 12:39:12 2026 GMT Not After : Jan 18 13:39:12 2027 GMT Subject: CN=d042a45d-5781-4e47-8042-bb056677b954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:7d:6d:ee:8b:ec:bc:e7:f4:81:0d:d2:81: c3:f1:8e:d0:c0:23:e8:13:67:82:1f:bb:4b:05:cd: 73:f4:82:6b:6a:c2:f5:fc:2e:ab:42:08:6c:20:fa: c2:46:1e:c4:41:07:b4:6e:ef:47:15:b1:ad:9d:2e: 2e:85:ea:58:52:52:bf:f8:02:d1:ac:aa:b8:a4:f9: a5:e7:55:76:2b:32:a2:04:e7:13:53:a6:a6:54:f2: df:6f:65:6d:66:9b:34:d8:42:4b:d2:00:71:36:f4: 3b:f5:cc:dc:9e:9f:db:a9:44:3e:3f:16:7e:dd:02: b5:c8:16:e2:69:88:3a:ef:3d:9e:53:e5:91:1e:9e: 95:c8:6b:c0:ba:3b:01:08:8f:c3:95:81:62:74:c8: 47:ff:62:4c:0e:29:2c:8f:bd:14:84:9c:b7:c3:7f: 1b:70:ef:2d:3f:31:77:d5:bc:30:b4:97:01:eb:ca: 3f:08:5e:d4:d3:92:5b:15:1f:92:81:26:90:ae:53: cb:f2:35:b7:c6:d4:26:8a:aa:78:3e:b1:79:6d:74: a4:9a:83:20:ce:12:10:52:71:a9:d3:97:4f:2a:e4: 9a:d8:1b:18:90:63:7e:81:6e:68:d2:aa:ac:e3:f7: a5:d4:f8:5c:c9:61:26:73:d3:90:71:bb:7a:85:2f: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:3F:B7:EE:FE:0F:70:15:B4:F4:43:F2:7A:7E:2C:DC:0D:9D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/3b094856-54d1-3395-a907-a0de1a1301f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.crl X509v3 Authority Key Identifier: keyid:E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer sbgp-ipAddrBlock: critical IPv4: 163.123.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:55:5a:7f:80:c6:1f:87:8b:87:58:12:f6:59:72:2a:db:ce: c5:b2:2e:33:02:95:5c:bc:4d:87:bd:34:a9:e9:ae:b2:b2:6f: a8:eb:75:3d:9d:80:b3:2c:b5:53:c0:0b:50:6b:f1:cb:f3:ed: 5a:75:66:2d:4e:5e:00:f8:05:c9:ec:ad:3c:de:75:27:3a:5d: 32:f6:8f:64:73:bc:19:56:b0:82:3c:b5:7c:97:e9:3d:ce:fb: 2c:a2:24:9b:f0:04:61:ca:f4:2c:4b:63:97:b8:5c:ae:c1:d1: 2b:19:6e:f8:5b:71:02:02:1c:5c:04:bb:b8:59:d4:43:65:9e: 2e:0a:d1:97:fe:e1:cc:9f:0d:5b:8d:28:21:1e:62:60:02:d5: ca:0f:19:ed:e0:f3:de:ab:d6:f1:47:6c:11:98:21:5c:ad:00: 7f:81:ab:64:b6:a3:94:ed:05:05:30:02:62:14:63:ab:f7:98: 58:3b:dd:df:18:e5:b6:07:41:3e:34:38:bc:1a:b4:25:26:2f: 5e:29:e7:48:41:71:e9:b0:64:e8:85:9b:1d:e6:62:44:dd:10: fc:e4:89:27:4d:2a:43:f0:08:59:eb:67:19:b7:89:45:c3:68: 0a:94:a5:e5:8f:df:c4:94:16:6a:0d:47:d6:65:d2:e1:00:e1: 38:8a:be:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QmIrx70KNrTKyR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI2MzZiYTUtNGZlMC00YWRmLWFhYTUtMzU3MmVkYTgw MTQ4MB4XDTI2MTAyMDEyMzkxMloXDTI3MDExODEzMzkxMlowLzEtMCsGA1UEAxMk ZDA0MmE0NWQtNTc4MS00ZTQ3LTgwNDItYmIwNTY2NzdiOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohF9be6L7Lzn9IEN0oHD8Y7QwCPoE2eCH7tL Bc1z9IJrasL1/C6rQghsIPrCRh7EQQe0bu9HFbGtnS4uhepYUlK/+ALRrKq4pPml 51V2KzKiBOcTU6amVPLfb2VtZps02EJL0gBxNvQ79czcnp/bqUQ+PxZ+3QK1yBbi aYg67z2eU+WRHp6VyGvAujsBCI/DlYFidMhH/2JMDiksj70UhJy3w38bcO8tPzF3 1bwwtJcB68o/CF7U05JbFR+SgSaQrlPL8jW3xtQmiqp4PrF5bXSkmoMgzhIQUnGp 05dPKuSa2BsYkGN+gW5o0qqs4/el1PhcyWEmc9OQcbt6hS8xPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa/P7fu/g9wFbT0Q/J6fizcDZ2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jMjYz NmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcyZWRhODAxNDgvM2IwOTQ4NTYtNTRkMS0z Mzk1LWE5MDctYTBkZTFhMTMwMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzI2MzZiYTUtNGZlMC00YWRmLWFh YTUtMzU3MmVkYTgwMTQ4L2MyNjM2YmE1LTRmZTAtNGFkZi1hYWE1LTM1NzJlZGE4 MDE0OC5jcmwwHwYDVR0jBBgwFoAU56ZajIemlQa2dtbRgdbQfBByx1YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jMjYzNmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcy ZWRhODAxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo3uGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtVWn+Axh+Hi4dYEvZZcirbzsWyLjMClVy8TYe9NKnprrKyb6jrdT2d gLMstVPAC1Br8cvz7Vp1Zi1OXgD4BcnsrTzedSc6XTL2j2RzvBlWsII8tXyX6T3O +yyiJJvwBGHK9CxLY5e4XK7B0SsZbvhbcQICHFwEu7hZ1ENlni4K0Zf+4cyfDVuN KCEeYmAC1coPGe3g896r1vFHbBGYIVytAH+Bq2S2o5TtBQUwAmIUY6v3mFg73d8Y 5bYHQT40OLwatCUmL14p50hBcemwZOiFmx3mYkTdEPzkiSdNKkPwCFnrZxm3iUXD aAqUpeWP38SUFmoNR9Zl0uEA4TiKvsE= -----END CERTIFICATE-----Generated at Mon Oct 26 06:23:19 2026 by rpki-client