$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a33076ca-fcc0-379d-aa92-4f3e982487f1.roa File: a33076ca-fcc0-379d-aa92-4f3e982487f1.roa (raw, json) Hash identifier: x6HNP64OWY7DdLCjUwxvyfZL4oKlmlxAe4aVZ5Gd4Fo= Subject key identifier: 61:62:C7:F3:5A:12:59:94:AE:97:FA:D7:38:35:97:2B:45:B5:3E:EA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4972EA321312166057F82AA0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a33076ca-fcc0-379d-aa92-4f3e982487f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.61.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ea:32:13:12:16:60:57:f8:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3665bae9-487d-4806-8416-648717c7197c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:05:a9:57:6d:4d:7a:7c:f6:ad:ff:2f:65:4d: 84:02:c5:10:3c:27:30:41:b5:1a:1c:fb:83:ca:6c: 3a:72:1a:ad:b0:1b:e8:f3:8d:62:5d:11:9e:3d:ee: c0:99:63:a4:e5:56:0c:3c:fa:64:e0:c8:1b:07:76: 37:15:ff:eb:cc:7d:40:47:2f:51:17:89:cc:d9:7a: 13:70:e6:d0:ed:db:be:6a:93:a0:af:09:fd:48:d0: 76:ce:e6:56:16:01:b7:4e:e5:4a:51:b1:b5:82:cb: d6:d0:87:94:1b:38:22:68:93:91:22:a4:86:77:f1: 5b:15:81:e8:c2:39:ae:15:43:5d:8c:12:7e:2f:6f: aa:6f:01:36:ae:3f:ff:17:57:2e:af:87:5c:18:d7: 89:87:e2:75:44:88:6c:05:a1:54:ca:01:22:d5:b9: fa:ea:6c:8a:97:ba:b4:78:f8:c0:69:0b:9c:df:7d: 54:bb:36:91:e1:83:dd:50:d3:f5:16:42:1f:74:f4: 59:7c:7b:2a:f3:e2:6d:b3:b5:f5:bb:0f:bb:e0:23: 7c:e5:9d:e9:79:db:4d:60:bd:21:f3:c5:c0:aa:93: b5:b7:9d:ac:7f:09:24:f7:1b:45:86:43:0e:d1:eb: ac:69:ea:58:8d:87:52:5f:8f:b9:99:b2:a3:a6:dc: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:C7:F3:5A:12:59:94:AE:97:FA:D7:38:35:97:2B:45:B5:3E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a33076ca-fcc0-379d-aa92-4f3e982487f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d7:88:f4:7a:17:f4:d9:69:55:14:3a:19:92:01:28:44:a0: 8b:b8:ab:92:c9:4a:82:63:f8:ef:b6:7d:02:bc:83:3a:9f:e1: bc:d5:cf:19:76:f1:b5:77:63:df:22:94:8f:b5:55:7c:99:b8: b9:02:ee:d3:fb:76:5e:47:98:3b:d8:a2:25:60:e1:ea:d5:8d: 7a:55:c2:f9:f2:e1:0a:76:de:04:27:0a:10:a4:ae:71:72:ce: 64:a4:eb:dd:28:53:b5:60:15:c4:ab:d1:db:de:0e:bd:4f:a5: 2b:2d:e6:a7:db:8d:9c:c8:ce:43:4e:77:04:66:89:19:0c:3a: 69:5f:73:eb:6d:77:d0:d2:c7:d3:17:59:a5:ab:86:8c:98:23: e2:15:ba:eb:40:52:51:90:80:67:14:f3:ca:1e:b3:bf:81:b8: 73:79:a9:55:a6:47:f6:15:04:25:5d:08:0f:6d:86:7a:30:25: b5:e1:5b:ef:ce:0c:ba:2b:be:70:af:c8:28:17:d5:28:6a:f6: 8c:77:d8:f2:83:69:21:81:54:ec:08:42:02:5e:2b:a2:e3:fd: 6c:01:f5:a5:c6:5f:86:24:f3:2d:75:82:fd:2f:3c:41:63:99: c5:2c:db:15:98:34:b1:25:ca:26:22:d3:99:49:27:9f:b4:a1: 4f:f8:4b:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuoyExIWYFf4KqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzY2NWJhZTktNDg3ZC00ODA2LTg0MTYtNjQ4NzE3YzcxOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AWpV21Nenz2rf8vZU2EAsUQPCcwQbUaHPuD ymw6chqtsBvo841iXRGePe7AmWOk5VYMPPpk4MgbB3Y3Ff/rzH1ARy9RF4nM2XoT cObQ7du+apOgrwn9SNB2zuZWFgG3TuVKUbG1gsvW0IeUGzgiaJORIqSGd/FbFYHo wjmuFUNdjBJ+L2+qbwE2rj//F1cur4dcGNeJh+J1RIhsBaFUygEi1bn66myKl7q0 ePjAaQuc331UuzaR4YPdUNP1FkIfdPRZfHsq8+Jts7X1uw+74CN85Z3pedtNYL0h 88XAqpO1t52sfwkk9xtFhkMO0eusaepYjYdSX4+5mbKjptzRhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFix/NaElmUrpf61zg1lytFtT7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTMzMDc2Y2EtZmNjMC0z NzlkLWFhOTItNGYzZTk4MjQ4N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbXiPR6F/TZaVUUOhmSAShEoIu4q5LJSoJj+O+2fQK8gzqf4bzVzxl2 8bV3Y98ilI+1VXyZuLkC7tP7dl5HmDvYoiVg4erVjXpVwvny4Qp23gQnChCkrnFy zmSk690oU7VgFcSr0dveDr1PpSst5qfbjZzIzkNOdwRmiRkMOmlfc+ttd9DSx9MX WaWrhoyYI+IVuutAUlGQgGcU88oes7+BuHN5qVWmR/YVBCVdCA9thnowJbXhW+/O DLorvnCvyCgX1Shq9ox32PKDaSGBVOwIQgJeK6Lj/WwB9aXGX4Yk8y11gv0vPEFj mcUs2xWYNLElyiYi05lJJ5+0oU/4S8Q= -----END CERTIFICATE-----Generated at Mon Sep 28 21:22:50 2026 by rpki-client