$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/245cc0b3-dd88-332d-a7ff-ebb61f8fa18a.roa File: 245cc0b3-dd88-332d-a7ff-ebb61f8fa18a.roa (raw, json) Hash identifier: szt7MHxKGC06kP7DAn1zEaT8eKqWwbzY0IEVN4gfGy4= Subject key identifier: 41:47:41:43:FE:5A:EC:1E:54:D9:25:77:AC:CC:37:16:34:CB:33:2D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49879901D4F57B7E9D4E4F00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/245cc0b3-dd88-332d-a7ff-ebb61f8fa18a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.58.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:99:01:d4:f5:7b:7e:9d:4e:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=938fe928-91d4-4b7c-9a16-54d4cc8f53f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:6f:05:fc:0e:ce:73:03:02:ea:95:75:9d: 8a:85:4c:e8:bf:98:5a:cb:e6:5b:9e:d9:cd:0a:76: 3e:84:c2:ea:53:93:a2:f5:ac:31:db:e4:18:f9:9b: 7e:dd:b6:f9:21:bb:35:b1:97:1a:53:45:f0:b4:dc: 8a:ae:6a:bf:dc:b2:37:53:53:04:3e:20:f7:b5:0d: 76:f9:2b:1c:6e:b3:85:56:65:41:55:a4:cc:7c:52: cc:2d:fb:13:54:5c:cf:32:ae:8d:71:0a:eb:cb:bd: ca:8a:41:e5:cd:0c:2c:07:8a:e6:06:a3:91:64:9f: 4b:96:80:cf:86:1a:20:74:7f:8f:96:a9:bd:95:e1: e3:6c:a3:48:ad:70:32:7e:ed:c1:d8:30:55:8b:69: 3c:d5:04:e8:a6:df:fe:92:46:d5:cd:50:06:a1:f6: b9:7e:b2:1c:39:8c:b7:df:7e:9a:4e:2a:f3:d8:81: e0:89:95:17:54:f2:d9:d6:44:24:6e:25:cb:e9:e0: 26:04:84:d5:39:42:2e:8d:a0:b4:21:28:2f:95:f7: 08:9c:b2:a2:f4:de:93:d0:ab:80:e6:ac:0e:aa:b9: eb:9a:d9:89:06:5d:47:ff:bb:bb:23:5c:37:27:04: e1:10:58:c0:ff:ca:fd:42:a5:f3:7b:82:34:90:27: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:47:41:43:FE:5A:EC:1E:54:D9:25:77:AC:CC:37:16:34:CB:33:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/245cc0b3-dd88-332d-a7ff-ebb61f8fa18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5b:af:0c:8e:5b:64:08:39:ee:93:b8:49:25:c6:7b:9d:94: fb:99:c9:24:4b:41:1e:b1:c7:69:cb:eb:7c:4f:6c:38:1c:c1: 5e:fd:08:90:de:bd:df:b5:11:5e:07:2e:ad:39:cb:2b:1c:f3: 16:62:58:21:bc:15:24:ed:41:87:50:13:a4:12:c6:41:65:8a: 7b:97:50:85:9d:07:a2:77:33:97:84:35:5d:92:f5:1b:c5:fb: 51:f3:1c:1e:66:f9:fb:f5:72:6d:fc:68:de:7b:4e:e6:48:7b: 16:25:6c:85:43:79:7f:97:04:45:dd:72:7a:80:f4:e8:50:dd: 9b:31:4a:6d:03:6c:20:81:4c:d9:c2:85:05:1a:32:ac:d8:f9: 56:f1:10:b8:61:e4:ff:79:84:04:1c:dd:83:36:09:aa:59:ed: 5b:f3:be:10:a3:93:3d:a8:42:e3:0e:41:65:63:3e:1e:e3:39: 18:75:e6:1e:59:60:b5:50:a4:c5:de:8c:a6:df:87:8e:be:5f: 3b:18:d2:6f:12:ef:d4:17:60:72:eb:05:d9:15:51:93:fa:2b: 9e:5d:b9:d3:b2:5e:ee:b8:fa:10:60:58:cd:e4:d4:18:b9:b2: 5f:22:21:a9:16:8d:b9:d9:e9:1c:94:c7:91:8a:ba:f0:c8:cb: 41:18:1a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh5kB1PV7fp1OTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTM4ZmU5MjgtOTFkNC00YjdjLTlhMTYtNTRkNGNjOGY1M2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd5vBfwOznMDAuqVdZ2KhUzov5hay+ZbntnN CnY+hMLqU5Oi9awx2+QY+Zt+3bb5Ibs1sZcaU0XwtNyKrmq/3LI3U1MEPiD3tQ12 +SscbrOFVmVBVaTMfFLMLfsTVFzPMq6NcQrry73KikHlzQwsB4rmBqORZJ9LloDP hhogdH+Plqm9leHjbKNIrXAyfu3B2DBVi2k81QTopt/+kkbVzVAGofa5frIcOYy3 336aTirz2IHgiZUXVPLZ1kQkbiXL6eAmBITVOUIujaC0ISgvlfcInLKi9N6T0KuA 5qwOqrnrmtmJBl1H/7u7I1w3JwThEFjA/8r9QqXze4I0kCfBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFHQUP+WuweVNkld6zMNxY0yzMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjQ1Y2MwYjMtZGQ4OC0z MzJkLWE3ZmYtZWJiNjFmOGZhMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChbrwyOW2QIOe6TuEklxnudlPuZySRLQR6xx2nL63xPbDgcwV79CJDe vd+1EV4HLq05yysc8xZiWCG8FSTtQYdQE6QSxkFlinuXUIWdB6J3M5eENV2S9RvF +1HzHB5m+fv1cm38aN57TuZIexYlbIVDeX+XBEXdcnqA9OhQ3ZsxSm0DbCCBTNnC hQUaMqzY+VbxELhh5P95hAQc3YM2CapZ7VvzvhCjkz2oQuMOQWVjPh7jORh15h5Z YLVQpMXejKbfh46+XzsY0m8S79QXYHLrBdkVUZP6K55dudOyXu64+hBgWM3k1Bi5 sl8iIakWjbnZ6RyUx5GKuvDIy0EYGiw= -----END CERTIFICATE-----Generated at Sat Sep 26 10:03:37 2026 by rpki-client