$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/88d6cdfc-ec75-3904-9246-9f834a2b2795.roa File: 88d6cdfc-ec75-3904-9246-9f834a2b2795.roa (raw, json) Hash identifier: GrSNSxK2b6yH5D8p0ztNHzDUTxDtlS0cuRPit1GAmRQ= Subject key identifier: 9D:EA:AC:B9:78:57:25:3C:E8:29:C1:E5:7C:3E:49:9C:D0:42:0D:15 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49885ACF6F0DF87DA8D97A40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/88d6cdfc-ec75-3904-9246-9f834a2b2795.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.50.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:5a:cf:6f:0d:f8:7d:a8:d9:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3db3763-29da-412e-b1e0-d2f879a3f9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:df:07:19:52:4f:9d:7e:af:80:d7:af:72: f2:9d:4c:43:ca:5c:86:2d:0d:bd:3b:9d:bd:c6:90: 48:86:2a:d2:3b:46:3e:0b:ae:64:c3:fc:0a:7a:8d: 11:4f:8d:44:14:dc:03:94:d7:a9:56:94:f0:50:47: 1d:f5:94:d4:7c:0f:4b:49:4e:22:bc:92:eb:1c:59: 43:2a:d4:c7:01:56:26:2a:90:8c:73:38:21:80:83: d3:e2:7d:11:c7:f0:51:88:23:e2:a8:8e:bd:a4:83: 1d:f6:5d:e2:73:bc:ff:a7:0c:4b:60:d8:04:d6:f5: 3b:40:89:dd:8a:f0:00:f9:a8:0c:5f:d1:87:93:7c: f8:9c:fd:4a:99:44:1d:8f:9e:9a:5e:b8:a2:a1:a8: 8c:44:2d:79:6e:6d:4d:b0:54:11:74:21:86:dc:cd: e3:1e:5a:eb:3e:40:69:56:b9:70:06:fe:83:a4:41: 84:f2:d6:f5:39:46:03:41:8b:4b:75:15:e5:dd:2b: 51:fe:6d:6d:de:af:22:b2:33:f4:56:d2:fd:b4:86: 53:5f:58:fa:a4:a7:9e:9c:7b:94:aa:e8:5d:f1:7b: 88:cb:f3:d1:1f:54:43:ab:4f:3e:5d:c6:f5:7e:75: 5b:cc:68:51:36:d7:49:92:37:88:b6:a2:3c:60:9e: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EA:AC:B9:78:57:25:3C:E8:29:C1:E5:7C:3E:49:9C:D0:42:0D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/88d6cdfc-ec75-3904-9246-9f834a2b2795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a0:ea:cf:7d:83:53:76:49:3b:e2:42:d1:23:74:2c:5f:15: 21:26:72:03:63:dc:a6:89:6d:ae:15:5c:dc:36:d3:76:d1:f1: dd:c4:07:9d:1d:c8:af:36:d3:5f:3d:fc:65:4b:e2:31:b2:0a: 23:83:3e:69:ec:05:b5:de:f5:b0:5a:4b:92:70:10:08:76:d4: 37:a8:62:1d:f3:48:40:75:05:7d:65:cf:69:37:32:de:4e:de: 87:aa:64:9d:60:c2:50:ac:10:90:6f:1a:32:e8:05:e0:33:3a: c9:63:fb:ad:67:5e:7a:42:8e:87:ec:e2:9b:fd:48:d3:2e:bf: 31:44:1e:d9:52:07:f8:9f:38:3b:1a:f1:64:94:02:cf:ec:e3: 47:9e:a0:3d:c6:86:ed:bb:49:5b:e3:48:08:d7:90:d1:1c:c4: 54:c3:76:c6:28:65:e0:23:34:16:53:d4:ae:5b:81:5e:a6:e2: 46:16:39:c3:04:a4:20:20:ca:29:13:b5:f7:cd:cd:f3:76:b3: 3b:2a:74:64:52:dd:60:c8:08:79:d9:d9:e5:81:cc:74:58:52: 9f:2b:03:bf:65:a7:a7:24:c6:46:fc:46:79:7b:52:94:05:41: 7b:8c:fc:c0:f7:56:ae:3d:ff:8e:e9:81:b7:8a:91:51:a3:ba: c3:b2:e9:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiFrPbw34fajZekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNkYjM3NjMtMjlkYS00MTJlLWIxZTAtZDJmODc5YTNmOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVzfBxlST51+r4DXr3LynUxDylyGLQ29O529 xpBIhirSO0Y+C65kw/wKeo0RT41EFNwDlNepVpTwUEcd9ZTUfA9LSU4ivJLrHFlD KtTHAVYmKpCMczghgIPT4n0Rx/BRiCPiqI69pIMd9l3ic7z/pwxLYNgE1vU7QInd ivAA+agMX9GHk3z4nP1KmUQdj56aXriioaiMRC15bm1NsFQRdCGG3M3jHlrrPkBp VrlwBv6DpEGE8tb1OUYDQYtLdRXl3StR/m1t3q8isjP0VtL9tIZTX1j6pKeenHuU quhd8XuIy/PRH1RDq08+Xcb1fnVbzGhRNtdJkjeItqI8YJ48OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3qrLl4VyU86CnB5Xw+SZzQQg0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODhkNmNkZmMtZWM3NS0z OTA0LTkyNDYtOWY4MzRhMmIyNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyg6s99g1N2STviQtEjdCxfFSEmcgNj3KaJba4VXNw203bR8d3EB50d yK820189/GVL4jGyCiODPmnsBbXe9bBaS5JwEAh21DeoYh3zSEB1BX1lz2k3Mt5O 3oeqZJ1gwlCsEJBvGjLoBeAzOslj+61nXnpCjofs4pv9SNMuvzFEHtlSB/ifODsa 8WSUAs/s40eeoD3Ghu27SVvjSAjXkNEcxFTDdsYoZeAjNBZT1K5bgV6m4kYWOcME pCAgyikTtffNzfN2szsqdGRS3WDICHnZ2eWBzHRYUp8rA79lp6ckxkb8Rnl7UpQF QXuM/MD3Vq49/47pgbeKkVGjusOy6T8= -----END CERTIFICATE-----Generated at Sat Sep 26 17:36:46 2026 by rpki-client