$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/683ff661-5954-3899-8149-eb11625c97ad.roa File: 683ff661-5954-3899-8149-eb11625c97ad.roa (raw, json) Hash identifier: /XgnD1Bvyisi8Cqn6y5IEE5BRWnfyFNABfpEivFHHhk= Subject key identifier: 28:F0:1E:F0:F9:CF:C4:E9:AA:A4:15:BE:FF:06:62:E0:22:76:18:37 Certificate issuer: /CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Certificate serial: 010D0C9F4328584F8DD467D6F852E2DBF97E87A0 Authority key identifier: E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/683ff661-5954-3899-8149-eb11625c97ad.roa Signing time: Mon 19 Oct 2026 12:52:24 +0000 ROA not before: Mon 19 Oct 2026 12:52:24 +0000 ROA not after: Sun 17 Jan 2027 13:52:24 +0000 asID: 21757 IP address blocks: 45.42.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d4:67:d6:f8:52:e2:db:f9:7e:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Validity Not Before: Oct 19 12:52:24 2026 GMT Not After : Jan 17 13:52:24 2027 GMT Subject: CN=69e27385-ac59-46db-a653-1f01753386c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:84:6d:1c:f7:a8:90:ab:fc:c2:1b:52:df: b4:56:13:88:4c:a2:fa:de:98:16:f2:dc:d0:c5:0a: 95:4d:01:4c:b1:d4:4e:e4:81:ab:fa:50:c4:d4:a9: 2f:30:3d:ab:7e:cd:c0:33:6f:f7:50:85:76:7b:91: ce:19:10:24:5b:1e:69:6c:b2:d6:b7:38:ce:95:3e: 56:65:66:59:41:70:ba:e6:21:1c:63:9f:f9:d0:13: ec:3c:f1:54:a5:a6:a4:56:6c:2b:ac:48:30:60:61: 35:54:6e:53:16:6e:13:a1:33:2a:18:6f:60:26:01: 3d:e6:78:6c:22:db:76:d0:bc:9f:37:19:3f:34:34: 13:6e:94:02:ff:4e:0a:32:a6:86:91:51:88:1c:32: e1:6e:6a:96:26:63:af:41:d1:3e:28:7d:14:f6:fc: 08:d8:c0:dc:89:5e:7f:58:08:7d:4b:a1:87:23:7b: 48:f9:53:e9:5d:9d:42:d9:55:01:e6:c9:42:9b:d7: 95:c6:44:80:a1:d6:48:27:a6:9d:77:32:68:10:99: 46:b0:91:89:97:06:b9:39:5e:77:40:73:3d:f2:0c: 91:89:e5:7e:33:45:55:f8:5a:5b:dd:52:dc:d3:3e: 56:c7:21:88:5b:1c:cf:90:e5:07:5a:d7:68:70:c8: e7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:1E:F0:F9:CF:C4:E9:AA:A4:15:BE:FF:06:62:E0:22:76:18:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/683ff661-5954-3899-8149-eb11625c97ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.crl X509v3 Authority Key Identifier: keyid:E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer sbgp-ipAddrBlock: critical IPv4: 45.42.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:41:d9:e6:bb:b2:9c:17:81:3f:73:ca:93:8d:e4:ed:33:22: 4f:a1:f4:ae:71:ff:e3:b2:a0:ea:98:a4:3b:48:f0:d9:33:25: 07:6f:6b:dd:d4:07:9a:68:56:2e:d0:ef:a0:3a:68:6c:29:82: 72:ba:72:64:a6:74:3f:fa:2f:ed:c1:36:85:ae:d0:c9:6b:74: 46:d3:48:54:27:3f:ff:e8:6f:52:8c:8e:22:1d:0a:d7:5c:78: f6:7b:46:86:77:1c:dd:9b:1b:4e:15:27:eb:d8:c7:9b:f3:98: d6:90:3e:9f:db:db:1e:a1:b2:12:b9:bf:81:2b:53:41:ae:de: 62:38:39:a1:35:16:f0:61:b7:7b:7a:d7:5b:d2:27:5a:57:93: 88:77:6b:c5:c2:f5:73:40:c4:fd:ad:4b:ef:43:ac:71:ae:e7: c8:c0:61:12:25:cc:20:55:bb:2e:9c:b6:a1:f9:51:c5:8a:9e: b2:e5:d8:f5:67:8e:98:51:fe:47:41:80:09:5d:75:65:d3:28: 50:19:51:a2:89:2f:2d:89:6c:b3:88:9f:da:d9:df:8a:cd:7c: cc:71:b2:89:80:f3:8a:45:87:3e:fc:01:f2:f4:ba:0b:9d:de: 70:56:f5:bf:8b:de:5d:a9:7b:2d:42:e4:1b:de:59:f7:c7:b0: 19:8f:d8:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N1GfW+FLi2/l+h6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI2MzZiYTUtNGZlMC00YWRmLWFhYTUtMzU3MmVkYTgw MTQ4MB4XDTI2MTAxOTEyNTIyNFoXDTI3MDExNzEzNTIyNFowLzEtMCsGA1UEAxMk NjllMjczODUtYWM1OS00NmRiLWE2NTMtMWYwMTc1MzM4NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrWEbRz3qJCr/MIbUt+0VhOITKL63pgW8tzQ xQqVTQFMsdRO5IGr+lDE1KkvMD2rfs3AM2/3UIV2e5HOGRAkWx5pbLLWtzjOlT5W ZWZZQXC65iEcY5/50BPsPPFUpaakVmwrrEgwYGE1VG5TFm4ToTMqGG9gJgE95nhs Itt20LyfNxk/NDQTbpQC/04KMqaGkVGIHDLhbmqWJmOvQdE+KH0U9vwI2MDciV5/ WAh9S6GHI3tI+VPpXZ1C2VUB5slCm9eVxkSAodZIJ6addzJoEJlGsJGJlwa5OV53 QHM98gyRieV+M0VV+Fpb3VLc0z5WxyGIWxzPkOUHWtdocMjnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjwHvD5z8TpqqQVvv8GYuAidhg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jMjYz NmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcyZWRhODAxNDgvNjgzZmY2NjEtNTk1NC0z ODk5LTgxNDktZWIxMTYyNWM5N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzI2MzZiYTUtNGZlMC00YWRmLWFh YTUtMzU3MmVkYTgwMTQ4L2MyNjM2YmE1LTRmZTAtNGFkZi1hYWE1LTM1NzJlZGE4 MDE0OC5jcmwwHwYDVR0jBBgwFoAU56ZajIemlQa2dtbRgdbQfBByx1YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jMjYzNmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcy ZWRhODAxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5B2ea7spwXgT9zypON5O0zIk+h9K5x/+OyoOqYpDtI8NkzJQdva93U B5poVi7Q76A6aGwpgnK6cmSmdD/6L+3BNoWu0MlrdEbTSFQnP//ob1KMjiIdCtdc ePZ7RoZ3HN2bG04VJ+vYx5vzmNaQPp/b2x6hshK5v4ErU0Gu3mI4OaE1FvBht3t6 11vSJ1pXk4h3a8XC9XNAxP2tS+9DrHGu58jAYRIlzCBVuy6ctqH5UcWKnrLl2PVn jphR/kdBgAlddWXTKFAZUaKJLy2JbLOIn9rZ34rNfMxxsomA84pFhz78AfL0ugud 3nBW9b+L3l2pey1C5BveWffHsBmP2HE= -----END CERTIFICATE-----Generated at Mon Oct 26 06:23:53 2026 by rpki-client