$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa File: 881916d5-ef11-31e5-9d97-4820bcbafc92.roa (raw, json) Hash identifier: bUgHO51iBhcKLx4r+XVnUdUvDUPH+eQEeXzQciNndkE= Subject key identifier: 72:FD:33:93:70:52:02:D3:E5:15:45:3E:49:80:C7:C2:97:32:E6:84 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498AEE00D030725ED5633940 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.57.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ee:00:d0:30:72:5e:d5:63:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=472025ff-4a56-4f7c-9d29-42a25e58806c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:6b:eb:e9:d0:dc:3b:b5:64:b1:83:c0:cf: ea:b1:43:8e:0a:a4:b1:cd:52:8b:29:67:e0:81:3f: 8a:34:0b:7a:63:40:f6:58:f4:04:47:a1:44:cb:e9: 7d:19:8b:f0:5f:34:9c:31:ed:ab:ef:4e:10:49:e7: d4:cd:1e:0a:8e:dd:d6:00:9d:27:60:8d:89:1f:ca: 1f:40:92:49:bb:3f:e2:3f:55:74:f3:bd:5c:4a:a9: 7e:9f:27:7b:36:21:17:4d:4b:19:6d:a9:ff:1a:e2: ea:cb:5f:cf:c2:db:f4:90:91:aa:7e:cb:6a:4e:86: d0:20:06:28:7d:13:44:93:63:e2:dd:3e:5c:83:a0: c8:a3:48:f6:3f:d6:95:08:5f:6f:c6:4b:ab:c1:ab: cc:98:b3:05:f1:43:76:b3:44:80:8d:c9:7c:ca:5f: bd:f9:49:38:52:21:e2:40:9a:32:b7:9d:3a:52:89: bc:d8:4a:6f:37:58:6c:29:7f:95:94:d4:63:4d:f4: 0f:53:1d:3b:64:23:46:64:9e:9d:d8:22:a8:0a:47: 6b:d4:cd:8f:44:f3:7c:f0:1e:49:ce:5d:48:ce:48: 9d:46:77:ed:9b:f5:1c:78:13:0d:4d:af:ef:fc:81: b9:c2:43:e7:ca:8e:c8:f8:d8:12:fa:84:cd:62:28: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:33:93:70:52:02:D3:E5:15:45:3E:49:80:C7:C2:97:32:E6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:20:0b:a9:9e:d8:df:23:ab:72:19:bc:cd:42:93:ad:1a:ab: a2:5c:2c:ff:b6:81:b1:0e:11:be:a0:8f:dc:44:14:0d:a6:3f: bc:b9:1f:2a:59:8e:5b:e1:bf:85:3d:fc:e6:02:7d:ff:40:c5: 33:51:bb:88:c4:30:ec:f4:76:47:2b:2c:92:eb:d8:a5:29:89: 32:59:13:06:ce:52:96:ef:ef:aa:cc:c8:10:9f:64:11:e9:41: b3:84:f8:6d:39:fd:0f:89:f1:7d:fd:cf:e6:e5:bf:a5:14:ae: fc:6e:cd:b2:62:4f:a3:65:cb:4a:3e:76:f9:17:bb:c3:ff:ce: 64:fa:10:2d:95:58:90:27:9c:03:e5:2d:1f:45:4f:43:d6:05: 1b:56:75:f3:28:63:fd:2c:d1:86:14:d1:e0:d8:d2:94:cb:4a: 5d:37:3c:d8:2c:20:b8:b8:be:f6:7a:e4:13:ae:2d:6d:49:10: ae:f0:b2:fb:b8:7b:73:88:aa:0c:91:26:7b:24:b5:4a:b9:5e: c1:f5:1b:81:c5:d5:c5:54:92:23:89:a4:1d:34:bb:d7:f9:57: 3e:aa:cd:10:90:ce:98:19:c1:36:09:4d:b3:ec:7e:c9:de:6d: a5:8d:5f:e4:ae:7d:02:96:5f:38:82:89:68:ec:05:01:73:28: 7f:13:9c:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiu4A0DByXtVjOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDcyMDI1ZmYtNGE1Ni00ZjdjLTlkMjktNDJhMjVlNTg4MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur5r6+nQ3Du1ZLGDwM/qsUOOCqSxzVKLKWfg gT+KNAt6Y0D2WPQER6FEy+l9GYvwXzScMe2r704QSefUzR4Kjt3WAJ0nYI2JH8of QJJJuz/iP1V0871cSql+nyd7NiEXTUsZban/GuLqy1/Pwtv0kJGqfstqTobQIAYo fRNEk2Pi3T5cg6DIo0j2P9aVCF9vxkurwavMmLMF8UN2s0SAjcl8yl+9+Uk4UiHi QJoyt506Uom82EpvN1hsKX+VlNRjTfQPUx07ZCNGZJ6d2CKoCkdr1M2PRPN88B5J zl1IzkidRnftm/UceBMNTa/v/IG5wkPnyo7I+NgS+oTNYijCHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL9M5NwUgLT5RVFPkmAx8KXMuaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODgxOTE2ZDUtZWYxMS0z MWU1LTlkOTctNDgyMGJjYmFmYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4gC6me2N8jq3IZvM1Ck60aq6JcLP+2gbEOEb6gj9xEFA2mP7y5HypZ jlvhv4U9/OYCff9AxTNRu4jEMOz0dkcrLJLr2KUpiTJZEwbOUpbv76rMyBCfZBHp QbOE+G05/Q+J8X39z+blv6UUrvxuzbJiT6Nly0o+dvkXu8P/zmT6EC2VWJAnnAPl LR9FT0PWBRtWdfMoY/0s0YYU0eDY0pTLSl03PNgsILi4vvZ65BOuLW1JEK7wsvu4 e3OIqgyRJnsktUq5XsH1G4HF1cVUkiOJpB00u9f5Vz6qzRCQzpgZwTYJTbPsfsne baWNX+SufQKWXziCiWjsBQFzKH8TnDk= -----END CERTIFICATE-----Generated at Mon Sep 28 14:37:32 2026 by rpki-client