$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa File: 34a9c223-7200-3018-ae98-b28abb099fa9.roa (raw, json) Hash identifier: C+Mkd0n2jmdkXB1g/ogvvuCahueKu7wzk5uhnAWrMp4= Subject key identifier: 11:05:A3:4E:EA:12:B8:E7:E3:1E:57:6F:E9:A3:F8:34:B7:4C:E5:09 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498B58C025A2100877EC2900 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.32.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:58:c0:25:a2:10:08:77:ec:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0df8edb-70d3-4fb7-9ae2-93d8bc08c1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:85:4b:72:9f:49:2e:0b:1f:66:6e:6c:95: f4:35:5d:aa:bc:cc:ef:92:17:a1:0f:5e:c3:b5:cb: 75:05:c1:64:18:37:4e:86:3e:d2:6b:06:ed:4f:a3: c4:f0:dc:bf:af:ed:e7:ae:74:7b:1a:37:fa:45:5f: 7a:20:da:6f:b9:23:1f:4a:f0:aa:7f:58:26:dc:18: fa:f3:a1:0b:5d:85:f2:d5:ed:35:32:46:11:71:04: f6:53:7b:e8:f8:b1:86:fe:2a:4f:bf:3a:56:81:ab: 0a:5c:c7:18:81:0b:57:b0:c4:b0:c3:64:68:0a:83: fa:af:d5:51:e5:4e:e0:20:d6:44:1d:ea:c0:f9:ae: 75:59:ab:0d:8b:eb:9f:8c:16:2f:f4:8f:96:0a:c0: 5b:c4:94:24:bc:60:7b:7b:0b:05:2b:81:a0:19:bb: 23:40:c8:51:0e:b2:04:27:5a:c1:b5:89:03:00:cb: 58:3a:ab:88:6d:de:a8:51:70:c3:a5:35:73:f2:dd: a6:2e:88:8d:2e:ce:48:8c:38:3b:41:62:a6:d4:58: d6:c5:b9:25:62:ec:b1:8a:8e:a1:c2:40:cf:ac:3d: 8b:b9:8f:41:f5:2e:99:45:80:1c:8e:77:4a:b9:0c: e9:c9:93:c3:6e:73:fb:a3:8c:78:02:a0:d7:72:43: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:05:A3:4E:EA:12:B8:E7:E3:1E:57:6F:E9:A3:F8:34:B7:4C:E5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:14:d2:02:e1:89:21:2a:4c:0f:a3:2e:b9:40:75:76:5c:34: dd:47:65:eb:4e:e5:d1:be:a0:ea:db:73:40:8c:a4:73:e5:4f: 10:fe:0c:ef:d9:dc:ba:c9:0c:e4:a4:bc:2e:59:62:b9:3d:82: 08:f1:fd:1a:69:2e:9e:3d:47:2a:92:bd:f5:31:d3:31:b0:ae: fa:f4:8e:4c:4e:be:18:d4:b1:09:4b:4a:cf:f6:43:be:1f:ad: 4c:cf:fb:dc:08:e4:a8:06:4b:2e:19:8d:d0:ca:d9:8d:36:9a: 5a:7d:f2:f9:3d:40:81:02:50:f0:e6:47:df:cd:da:d1:dc:52: e3:b4:a4:6a:79:4e:67:4a:43:e5:02:2a:a0:f1:d3:61:61:ca: 9b:38:07:e2:7b:11:d7:e9:a2:26:b7:d4:42:61:fe:11:d4:20: 20:60:12:b6:5b:9a:92:47:8a:9a:b6:9e:1c:36:42:21:a9:f6: e0:6d:db:95:96:8e:64:09:93:df:99:f2:2c:c4:38:f0:21:73: a2:f6:28:ad:6a:ac:db:ef:4c:b2:9c:9a:bf:13:2f:04:f8:be: 73:9a:5f:57:b9:5f:99:bd:3f:a5:8f:a5:f0:d7:e0:52:9b:ba: 6a:15:c7:20:f2:7e:74:89:92:1d:da:8e:f9:79:ac:41:e3:07: 74:36:ae:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji1jAJaIQCHfsKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjBkZjhlZGItNzBkMy00ZmI3LTlhZTItOTNkOGJjMDhjMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMyFS3KfSS4LH2ZubJX0NV2qvMzvkhehD17D tct1BcFkGDdOhj7SawbtT6PE8Ny/r+3nrnR7Gjf6RV96INpvuSMfSvCqf1gm3Bj6 86ELXYXy1e01MkYRcQT2U3vo+LGG/ipPvzpWgasKXMcYgQtXsMSww2RoCoP6r9VR 5U7gINZEHerA+a51WasNi+ufjBYv9I+WCsBbxJQkvGB7ewsFK4GgGbsjQMhRDrIE J1rBtYkDAMtYOquIbd6oUXDDpTVz8t2mLoiNLs5IjDg7QWKm1FjWxbklYuyxio6h wkDPrD2LuY9B9S6ZRYAcjndKuQzpyZPDbnP7o4x4AqDXckM5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEFo07qErjn4x5Xb+mj+DS3TOUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzRhOWMyMjMtNzIwMC0z MDE4LWFlOTgtYjI4YWJiMDk5ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoU0gLhiSEqTA+jLrlAdXZcNN1HZetO5dG+oOrbc0CMpHPlTxD+DO/Z 3LrJDOSkvC5ZYrk9ggjx/RppLp49RyqSvfUx0zGwrvr0jkxOvhjUsQlLSs/2Q74f rUzP+9wI5KgGSy4ZjdDK2Y02mlp98vk9QIECUPDmR9/N2tHcUuO0pGp5TmdKQ+UC KqDx02Fhyps4B+J7Edfpoia31EJh/hHUICBgErZbmpJHipq2nhw2QiGp9uBt25WW jmQJk9+Z8izEOPAhc6L2KK1qrNvvTLKcmr8TLwT4vnOaX1e5X5m9P6WPpfDX4FKb umoVxyDyfnSJkh3ajvl5rEHjB3Q2rjM= -----END CERTIFICATE-----Generated at Mon Sep 28 19:12:33 2026 by rpki-client