$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/571af571-6df9-342f-9fbd-bfce123e0686.roa File: 571af571-6df9-342f-9fbd-bfce123e0686.roa (raw, json) Hash identifier: rPzMYSjTOX6Clapoe4A4t0d3WHglafh1XMetzHM+4CA= Subject key identifier: BF:3E:AB:93:65:80:AF:1D:3E:E2:D1:A8:0C:CC:5A:70:69:41:AC:F0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49734BD77596A45F2BD73E80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/571af571-6df9-342f-9fbd-bfce123e0686.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.58.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4b:d7:75:96:a4:5f:2b:d7:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1f187a6-5d6b-441b-bb7a-3e25f56d75d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:dc:05:46:d5:58:a6:00:c3:06:a4:41:1a: 7f:8d:fd:87:6d:b1:66:3c:4e:88:d5:45:8a:1c:44: 52:34:c7:75:a7:d6:22:4b:d3:bb:4c:ba:a2:b5:b1: e0:eb:93:97:87:42:d5:dc:b0:5e:db:04:1a:a5:6a: 1d:00:29:26:91:12:fa:7a:34:d2:3f:eb:31:48:b6: 13:70:37:4c:db:8a:01:7c:79:c4:2f:10:90:cb:42: d9:1b:6b:1a:60:37:c1:cf:70:5f:ef:11:92:26:bb: 21:70:ef:54:92:db:d2:ec:39:c8:a8:27:32:42:54: 8a:fc:a9:1c:3c:bd:72:e2:50:12:bb:8e:a7:b2:45: a8:11:12:52:15:70:3a:74:c2:f0:45:de:e2:3d:d6: a2:44:01:7c:ef:d8:30:97:7d:e1:6c:90:dd:17:25: 56:f3:a7:5a:be:e8:18:26:86:82:e6:92:f9:85:cc: 17:d0:80:b0:fa:c2:3c:5d:1c:95:2c:4b:66:c8:c0: 14:57:6d:f1:13:73:43:e2:fe:79:d6:79:70:61:06: 29:99:c4:91:a2:26:45:ce:21:2c:de:54:21:53:76: 12:16:39:ba:8c:df:9d:cf:34:14:33:86:be:75:25: 24:b9:5e:a7:b2:a7:a5:4d:6e:4e:a8:b3:3c:06:24: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3E:AB:93:65:80:AF:1D:3E:E2:D1:A8:0C:CC:5A:70:69:41:AC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/571af571-6df9-342f-9fbd-bfce123e0686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6e:14:75:ef:9e:c1:0b:22:aa:79:43:1a:6d:f4:40:d2:1c: 9d:e5:d7:85:15:87:be:ef:b4:11:68:91:c0:bc:3c:b4:a9:4c: b4:76:35:06:6d:f6:e0:13:e0:68:26:da:23:2d:b0:27:8f:3b: 06:65:50:69:cd:95:7b:a0:57:4d:17:fb:1a:fb:11:f0:fe:0b: ec:e3:4e:d5:3b:86:a4:d3:24:46:88:e6:a1:95:ac:8f:8b:db: 2f:0b:7f:31:d8:3c:d9:51:5d:94:4a:d9:bd:c9:c6:c4:19:4a: ef:2f:5b:51:44:63:19:a7:95:15:5a:24:0e:07:f8:fe:fe:ac: c0:c5:0c:ae:26:9e:a2:a6:4c:c7:7b:57:21:97:68:24:22:b0: 2e:96:d3:2a:24:07:4a:8a:03:fd:0e:cc:d4:0e:f0:26:37:81: 62:63:50:1c:51:57:5f:06:06:78:3f:fc:bd:87:59:95:4e:7e: eb:3d:8d:c6:56:95:7a:f6:c9:f6:59:30:3e:b3:38:f1:27:9b: 15:cb:dc:eb:e0:21:f8:c1:7b:30:da:36:3b:38:fe:08:da:93: 7f:2f:de:be:fa:be:b2:f3:db:61:6e:b6:65:b5:18:f9:ed:ac: fd:f5:72:4f:59:9a:b8:c8:1a:a9:f9:b1:0c:b7:8a:df:4f:6b: ce:0f:50:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0vXdZakXyvXPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFmMTg3YTYtNWQ2Yi00NDFiLWJiN2EtM2UyNWY1NmQ3NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl/cBUbVWKYAwwakQRp/jf2HbbFmPE6I1UWK HERSNMd1p9YiS9O7TLqitbHg65OXh0LV3LBe2wQapWodACkmkRL6ejTSP+sxSLYT cDdM24oBfHnELxCQy0LZG2saYDfBz3Bf7xGSJrshcO9UktvS7DnIqCcyQlSK/Kkc PL1y4lASu46nskWoERJSFXA6dMLwRd7iPdaiRAF879gwl33hbJDdFyVW86davugY JoaC5pL5hcwX0ICw+sI8XRyVLEtmyMAUV23xE3ND4v551nlwYQYpmcSRoiZFziEs 3lQhU3YSFjm6jN+dzzQUM4a+dSUkuV6nsqelTW5OqLM8BiQPJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8+q5NlgK8dPuLRqAzMWnBpQazwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTcxYWY1NzEtNmRmOS0z NDJmLTlmYmQtYmZjZTEyM2UwNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9uFHXvnsELIqp5Qxpt9EDSHJ3l14UVh77vtBFokcC8PLSpTLR2NQZt 9uAT4Ggm2iMtsCePOwZlUGnNlXugV00X+xr7EfD+C+zjTtU7hqTTJEaI5qGVrI+L 2y8LfzHYPNlRXZRK2b3JxsQZSu8vW1FEYxmnlRVaJA4H+P7+rMDFDK4mnqKmTMd7 VyGXaCQisC6W0yokB0qKA/0OzNQO8CY3gWJjUBxRV18GBng//L2HWZVOfus9jcZW lXr2yfZZMD6zOPEnmxXL3OvgIfjBezDaNjs4/gjak38v3r76vrLz22FutmW1GPnt rP31ck9ZmrjIGqn5sQy3it9Pa84PUHg= -----END CERTIFICATE-----Generated at Sat Sep 26 15:01:34 2026 by rpki-client