$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa File: 7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa (raw, json) Hash identifier: AsBAPZ7+jSBAbE7TQbnT/6ge8IMO4dxqFofn59iR52I= Subject key identifier: E0:17:72:08:8B:C6:27:6D:13:73:52:26:A6:92:3F:92:BC:F7:E4:58 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49873699D78C3BC1A8985E00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 216.21.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:36:99:d7:8c:3b:c1:a8:98:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7fc58cf-dcec-4cc6-b8fc-11d34f35b019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:ff:5b:49:a0:02:d4:85:63:93:ab:8b:ab: 1a:da:5c:27:07:bc:62:80:a9:1e:ca:28:3c:c4:80: cb:18:d9:e4:0f:a0:3e:9a:66:b4:39:d0:b6:be:cd: 09:f4:df:c2:da:9f:82:9f:9f:7d:70:eb:fb:57:17: ff:3d:cf:6d:14:44:ed:0d:ff:ac:b5:c3:08:59:e7: f6:34:cb:b8:cf:ad:9f:31:dd:29:4f:82:bd:fa:06: d7:1f:78:ba:e7:3c:05:5b:24:34:0b:37:c7:d5:f1: 15:42:f1:ca:18:e3:7e:b9:11:79:21:89:00:64:92: b4:2a:c2:7c:af:9a:42:52:8a:dd:88:ef:ea:26:d1: 99:d5:e7:67:53:b4:0a:61:d4:90:d4:aa:aa:dc:4e: 8e:3b:ad:b4:8e:72:1b:c7:1e:31:da:5d:43:aa:24: 41:a0:e6:b7:e8:cb:cf:ed:b0:6c:94:6d:19:dc:39: f3:0b:cc:d2:05:25:73:a5:d9:c6:d6:ec:e1:4f:b9: fe:1e:a1:63:20:69:10:eb:74:7b:da:ff:8a:2c:df: 50:4f:bd:f5:2f:7f:55:25:28:b6:fb:d0:14:5c:2b: ae:82:da:48:cb:4b:c8:7f:23:07:b0:a2:7f:70:69: 7b:f3:04:85:12:1b:96:c5:86:82:ea:ca:9d:aa:d3: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:17:72:08:8B:C6:27:6D:13:73:52:26:A6:92:3F:92:BC:F7:E4:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 216.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ba:dc:b7:a3:a6:2f:1f:d4:7e:37:cc:a6:ef:59:5f:2d:5c: d5:33:22:4d:35:2a:f0:63:79:f0:8d:91:9c:05:99:f1:16:21: 44:9a:23:11:e9:fb:62:bc:a9:cf:c5:32:60:39:23:55:61:70: 37:46:2b:90:85:e2:3f:95:ba:34:f1:29:af:c8:a3:ba:4f:ff: 90:0b:8c:f0:74:0a:49:97:87:eb:d4:aa:f9:fb:f4:20:b2:1b: 5d:b1:8e:b6:5d:ae:bd:51:40:f9:d8:00:34:7a:ee:7e:ee:e2: 95:a9:44:b8:b5:73:12:57:98:26:4a:b2:cb:17:f7:7d:8f:4c: 96:02:b9:e2:3b:51:63:2c:94:e5:dc:bd:0a:11:6e:2a:9f:3e: 76:e1:cf:c7:5e:77:9a:b0:c7:3c:fb:51:5d:5a:61:71:bb:dc: e8:02:be:82:c3:c8:0d:2a:20:3f:2f:7d:bc:59:cc:33:2f:90: a7:4c:40:a0:bc:21:77:ba:eb:0c:30:57:9c:b0:e4:82:98:5e: 2f:0f:12:de:ce:aa:0d:c8:27:87:09:3e:77:43:e0:83:b4:52: 89:49:ff:25:b6:69:60:69:1e:fd:36:b6:0d:77:4e:3b:ea:bb: f9:5d:db:17:6e:55:80:2c:b8:80:36:02:4e:8c:7d:fc:70:e2: 00:ab:d0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhzaZ14w7waiYXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdmYzU4Y2YtZGNlYy00Y2M2LWI4ZmMtMTFkMzRmMzViMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPX/W0mgAtSFY5Ori6sa2lwnB7xigKkeyig8 xIDLGNnkD6A+mma0OdC2vs0J9N/C2p+Cn599cOv7Vxf/Pc9tFETtDf+stcMIWef2 NMu4z62fMd0pT4K9+gbXH3i65zwFWyQ0CzfH1fEVQvHKGON+uRF5IYkAZJK0KsJ8 r5pCUordiO/qJtGZ1ednU7QKYdSQ1Kqq3E6OO620jnIbxx4x2l1DqiRBoOa36MvP 7bBslG0Z3DnzC8zSBSVzpdnG1uzhT7n+HqFjIGkQ63R72v+KLN9QT731L39VJSi2 +9AUXCuugtpIy0vIfyMHsKJ/cGl78wSFEhuWxYaC6sqdqtN71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAXcgiLxidtE3NSJqaSP5K89+RYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvN2Q4Y2ViYTktMTU5NC0z YzYyLWE2MTItMmM3OWMxMWNkMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe63Lejpi8f1H43zKbvWV8tXNUzIk01KvBjefCNkZwFmfEWIUSaIxHp +2K8qc/FMmA5I1VhcDdGK5CF4j+VujTxKa/Io7pP/5ALjPB0CkmXh+vUqvn79CCy G12xjrZdrr1RQPnYADR67n7u4pWpRLi1cxJXmCZKsssX932PTJYCueI7UWMslOXc vQoRbiqfPnbhz8ded5qwxzz7UV1aYXG73OgCvoLDyA0qID8vfbxZzDMvkKdMQKC8 IXe66wwwV5yw5IKYXi8PEt7Oqg3IJ4cJPndD4IO0UolJ/yW2aWBpHv02tg13Tjvq u/ld2xduVYAsuIA2Ak6Mffxw4gCr0NA= -----END CERTIFICATE-----Generated at Mon Sep 28 01:02:06 2026 by rpki-client