$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: o/8hq1mm3Qjck/2KuajUlVOBO2EkYgASqZ7uxllkx4U= Subject key identifier: 60:3F:4B:13:C1:56:3E:58:A6:C9:09:97:FD:6A:6B:48:3B:25:3B:6F Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F4984B7F3F20E11FC7039C700 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b7:f3:f2:0e:11:fc:70:39:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e67705e2-5d6b-4c43-b4a7-7b046a697260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:b3:f0:c3:95:8a:d1:fa:a7:66:44:a7:87: 1f:5e:ee:59:e3:e3:59:61:ea:e6:aa:ff:47:70:da: 6e:ba:4c:7a:8d:4b:a5:8a:03:c1:70:dc:21:2a:2f: 33:71:03:f5:3b:5b:13:77:02:98:85:2d:80:0c:a1: a0:dc:07:9f:77:a4:91:6d:bf:66:93:1f:0b:3f:ba: 11:83:fa:77:09:50:cc:aa:d6:98:45:2d:68:81:9d: 11:3d:eb:06:78:53:54:c1:74:ba:d2:9a:3d:f4:8a: d0:f1:52:1d:1b:d8:6a:43:e7:95:00:ac:fe:69:62: 36:9a:28:20:81:a9:b7:46:be:da:f4:96:83:64:bc: 12:9c:79:4c:24:0f:40:14:8a:45:3b:07:2a:c0:58: 2b:ac:bb:d9:95:67:2e:be:59:f8:a4:32:ec:b7:dd: 4d:3d:91:60:91:c1:bc:3c:e1:bd:66:52:13:02:89: f3:6a:96:94:41:55:d3:10:05:02:d4:36:fd:20:c5: fb:82:42:46:b2:7b:8d:78:6f:31:2c:85:ec:a6:9a: 74:8a:cb:8a:7c:19:03:2d:a8:7d:de:20:94:28:c1: ae:58:49:7c:07:71:23:ac:e6:fd:af:ad:bf:a9:8a: fa:b3:76:67:dd:46:d1:43:40:21:f6:db:62:31:b7: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:4B:13:C1:56:3E:58:A6:C9:09:97:FD:6A:6B:48:3B:25:3B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a5:ce:dd:c4:00:4f:ba:c2:71:ab:1b:93:9d:06:74:cd:5e: 5e:44:7e:a6:ce:a9:96:3b:ba:e2:04:65:06:40:56:bf:a8:8c: 60:75:8a:e4:ef:f0:67:3a:59:13:fc:3e:ff:9f:9b:44:ac:37: bc:a9:59:8a:dc:be:0b:e1:d7:e9:55:c2:69:60:53:fa:27:81: ba:29:5e:3d:3e:05:7e:f1:61:a3:d4:67:a9:7f:fd:15:c4:4d: a2:f3:e2:f9:c3:fa:d0:19:f8:69:c5:c3:e0:56:0f:ea:dd:e1: 23:5e:8c:98:8e:c0:47:c2:ca:ba:e0:06:1c:bd:7e:e5:01:8b: 18:74:aa:70:4f:3a:56:f6:40:62:7f:50:f4:b1:da:04:1b:8c: 17:5c:85:51:f8:4b:10:06:05:1c:81:9a:4e:e1:c0:35:a9:02: 8b:01:bb:7f:80:56:51:02:5f:59:fe:2a:a5:ef:d2:79:ab:95: 2a:61:e0:99:6d:e2:5f:8c:e9:2a:1a:a3:a2:14:96:4c:a6:fa: 4b:df:f2:22:b3:12:c1:12:b0:04:4e:d5:92:0f:71:98:3b:92: a3:8f:58:de:2c:19:e6:9d:31:22:7f:d0:a2:e1:79:e3:a6:41: c0:76:26:44:8a:13:87:09:0b:c2:e1:34:b6:ae:d4:41:2e:31: a0:03:d4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLfz8g4R/HA5xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTY3NzA1ZTItNWQ2Yi00YzQzLWI0YTctN2IwNDZhNjk3MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+uz8MOVitH6p2ZEp4cfXu5Z4+NZYermqv9H cNpuukx6jUuligPBcNwhKi8zcQP1O1sTdwKYhS2ADKGg3Aefd6SRbb9mkx8LP7oR g/p3CVDMqtaYRS1ogZ0RPesGeFNUwXS60po99IrQ8VIdG9hqQ+eVAKz+aWI2migg gam3Rr7a9JaDZLwSnHlMJA9AFIpFOwcqwFgrrLvZlWcuvln4pDLst91NPZFgkcG8 POG9ZlITAonzapaUQVXTEAUC1Db9IMX7gkJGsnuNeG8xLIXsppp0isuKfBkDLah9 3iCUKMGuWEl8B3EjrOb9r62/qYr6s3Zn3UbRQ0Ah9ttiMbcYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA/SxPBVj5YpskJl/1qa0g7JTtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWlzt3EAE+6wnGrG5OdBnTNXl5EfqbOqZY7uuIEZQZAVr+ojGB1iuTv 8Gc6WRP8Pv+fm0SsN7ypWYrcvgvh1+lVwmlgU/ongbopXj0+BX7xYaPUZ6l//RXE TaLz4vnD+tAZ+GnFw+BWD+rd4SNejJiOwEfCyrrgBhy9fuUBixh0qnBPOlb2QGJ/ UPSx2gQbjBdchVH4SxAGBRyBmk7hwDWpAosBu3+AVlECX1n+KqXv0nmrlSph4Jlt 4l+M6Soao6IUlkym+kvf8iKzEsESsARO1ZIPcZg7kqOPWN4sGeadMSJ/0KLheeOm QcB2JkSKE4cJC8LhNLau1EEuMaAD1J8= -----END CERTIFICATE-----Generated at Wed Oct 28 22:49:55 2026 by rpki-client