$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/31c159bf-4eca-397a-82d4-9a7e2f65f731.roa File: 31c159bf-4eca-397a-82d4-9a7e2f65f731.roa (raw, json) Hash identifier: m311HQ+vzn7P3egX4C7d60ErA2bXH6x4r+wb9pJHLQM= Subject key identifier: 56:8D:15:0A:8B:4A:4C:B4:0D:E7:65:3A:28:98:9F:D6:23:AD:CD:89 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49737E6485D7E1CE21315180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/31c159bf-4eca-397a-82d4-9a7e2f65f731.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.34.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7e:64:85:d7:e1:ce:21:31:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e87756e-cbe8-4537-b4f2-a77e0d067f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:9a:da:bd:95:e0:45:39:99:2d:58:8f:95: 4c:4e:27:97:ad:82:e7:9b:83:76:3c:e1:96:8c:b6: 61:65:bb:24:48:6f:2a:6b:60:05:99:f0:c2:da:f7: 04:d0:43:70:24:61:da:00:f8:1e:4e:f1:58:2e:25: 2d:12:4b:b5:3c:ec:94:b5:a7:17:bc:b4:4f:73:87: 06:54:1e:f5:77:0c:25:94:0a:b6:49:b6:10:78:76: 33:3d:50:61:b2:e0:97:97:4a:37:7b:7a:f4:13:c3: 7c:2f:56:9e:13:44:07:ff:87:bc:29:e6:11:4a:43: 24:a4:7d:cb:e1:15:79:24:51:02:5e:73:55:a2:f6: 2e:20:25:99:70:80:42:32:e3:b4:d9:47:a0:81:80: 41:e0:94:51:a1:dc:70:50:8e:75:e4:05:5e:a2:bb: 55:50:da:fa:85:b3:d3:57:ba:d2:61:4e:49:86:1e: 36:39:83:3e:7d:e9:eb:5f:af:42:ef:1b:36:ea:31: 99:3e:f5:8c:77:b8:5f:cb:94:ff:0a:8b:50:60:41: ac:59:3c:e6:09:31:fa:0d:b2:10:47:31:a7:31:12: 46:af:96:62:e1:d8:fe:1c:e5:53:93:f4:d7:d8:dd: ef:52:fa:b9:b7:95:84:05:d3:fd:08:b5:dc:30:9d: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8D:15:0A:8B:4A:4C:B4:0D:E7:65:3A:28:98:9F:D6:23:AD:CD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/31c159bf-4eca-397a-82d4-9a7e2f65f731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:41:16:54:fd:d4:4d:3d:dd:67:ad:b2:92:41:89:4d:2b:c7: 17:77:e3:46:7b:b5:74:67:f8:9c:95:14:e9:9c:fc:3c:82:ed: a2:23:46:b5:f7:9c:92:30:9b:8f:1e:60:2e:f2:23:97:20:1d: db:2b:ab:60:9a:15:79:be:15:0a:a0:12:5d:66:de:08:2b:28: 6a:7e:a6:20:59:44:29:31:aa:27:91:ac:c6:ed:11:ec:a9:a6: 0c:da:1a:8c:cf:bf:7b:75:c7:f2:5f:f0:1a:b1:92:23:29:c6: 59:da:cc:e7:91:e7:0e:c8:fb:1e:6d:3d:39:5d:0b:3f:0f:cb: 5b:50:40:10:7e:a4:42:a3:95:f4:7b:f7:47:0a:53:c0:57:49: dc:f1:44:25:c5:d7:d9:da:79:cf:1c:c1:5c:ee:64:e3:48:10: 80:ba:0c:33:7b:e1:8a:34:7a:16:9c:ff:3e:17:b2:ad:90:40: 8e:85:41:d7:2e:49:5b:13:30:ce:95:e3:2b:7f:b3:14:23:20: cd:35:86:68:b8:73:00:06:28:35:11:47:65:17:c5:6f:bc:e9: 9b:50:6a:ed:8c:95:34:4d:5e:57:e4:3e:ab:4d:aa:84:20:16: 58:d7:ac:6a:af:5f:07:00:9a:1b:af:23:b8:84:0c:28:ad:e9: 14:14:34:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc35khdfhziExUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU4Nzc1NmUtY2JlOC00NTM3LWI0ZjItYTc3ZTBkMDY3ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm06a2r2V4EU5mS1Yj5VMTieXrYLnm4N2POGW jLZhZbskSG8qa2AFmfDC2vcE0ENwJGHaAPgeTvFYLiUtEku1POyUtacXvLRPc4cG VB71dwwllAq2SbYQeHYzPVBhsuCXl0o3e3r0E8N8L1aeE0QH/4e8KeYRSkMkpH3L 4RV5JFECXnNVovYuICWZcIBCMuO02UeggYBB4JRRodxwUI515AVeortVUNr6hbPT V7rSYU5Jhh42OYM+fenrX69C7xs26jGZPvWMd7hfy5T/CotQYEGsWTzmCTH6DbIQ RzGnMRJGr5Zi4dj+HOVTk/TX2N3vUvq5t5WEBdP9CLXcMJ0qWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaNFQqLSky0DedlOiiYn9Yjrc2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzFjMTU5YmYtNGVjYS0z OTdhLTgyZDQtOWE3ZTJmNjVmNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5BFlT91E093WetspJBiU0rxxd340Z7tXRn+JyVFOmc/DyC7aIjRrX3 nJIwm48eYC7yI5cgHdsrq2CaFXm+FQqgEl1m3ggrKGp+piBZRCkxqieRrMbtEeyp pgzaGozPv3t1x/Jf8BqxkiMpxlnazOeR5w7I+x5tPTldCz8Py1tQQBB+pEKjlfR7 90cKU8BXSdzxRCXF19naec8cwVzuZONIEIC6DDN74Yo0ehac/z4Xsq2QQI6FQdcu SVsTMM6V4yt/sxQjIM01hmi4cwAGKDURR2UXxW+86ZtQau2MlTRNXlfkPqtNqoQg FljXrGqvXwcAmhuvI7iEDCit6RQUNFE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:26:30 2026 by rpki-client