$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa File: a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa (raw, json) Hash identifier: qlWBOU77WOn5F+/O0FhM7R8jTO+S3nPrEiuVEZEACqk= Subject key identifier: A6:3E:42:62:0F:24:0C:1E:AA:95:B1:48:07:23:79:9D:36:EC:3A:C9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49748E749057740AF3E8BB40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.49.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8e:74:90:57:74:0a:f3:e8:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d9043748-17a7-469a-ac3f-c31f9e73e5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:2f:b0:60:9e:d2:7c:f7:a6:9a:b9:57:d9: 83:5a:3c:aa:f0:6d:03:77:28:c8:b9:d2:92:e8:cf: 18:d7:9e:25:96:74:aa:cc:1d:72:48:e7:73:bf:ce: 52:78:fb:6b:b1:a2:b6:79:f3:1c:31:8a:23:62:30: 71:70:ad:6d:d3:8d:d2:f6:92:5e:c7:ab:b3:21:bd: 47:b2:12:b8:43:31:75:9c:83:91:f9:7e:07:51:84: a3:17:df:e6:c0:a6:76:7c:35:7b:7f:3a:db:0d:0e: a9:a1:cb:2b:77:ce:ca:14:a0:76:22:3d:05:3a:bb: 3e:ff:58:0c:fa:17:ff:58:ef:cd:73:3c:89:57:3c: 8a:51:d8:9a:59:13:2c:d3:5f:84:b2:fc:a2:be:b2: 5f:11:77:83:9f:62:74:e7:60:01:1d:07:7b:70:13: b1:4e:b8:0e:d9:83:8c:3e:95:fb:2d:f1:9c:f9:da: a3:d7:60:37:3e:2c:2b:5e:c7:8e:d5:2b:e2:8d:fc: 1b:a9:77:1d:16:79:e5:3f:c4:46:c3:f4:d5:7a:7c: e3:5f:89:9e:7b:6d:ec:21:fa:a1:44:7d:41:dd:b6: 80:00:d5:78:e1:f4:3a:3a:03:58:8a:25:62:1d:6f: 69:be:5d:84:34:ea:64:54:98:96:a1:e0:ca:7e:cf: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:42:62:0F:24:0C:1E:AA:95:B1:48:07:23:79:9D:36:EC:3A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a1:16:da:63:e2:4d:3d:4a:af:30:d0:aa:28:3d:d5:93:d5: a0:58:9a:a5:87:8f:a2:81:eb:1e:8e:36:42:dc:9b:38:13:9c: 8f:67:07:79:33:87:1a:22:d7:99:5f:42:e0:db:18:15:b4:2f: 3d:15:9d:5f:ad:5c:f0:f8:fa:6d:ba:48:e0:a9:a4:e3:4a:3a: 73:11:3b:38:b6:17:51:01:10:a8:6a:f1:36:a0:3b:5f:f3:e9: 95:f0:5d:5a:8f:cc:a7:f3:82:f5:dc:32:02:7e:6c:cc:ce:73: 29:7d:27:fb:1a:23:d9:bc:f6:83:37:fa:ea:4a:b1:df:1d:37: 5c:02:e7:5e:ef:ee:71:bf:dc:db:f3:b8:09:77:0b:d9:70:db: b1:cf:c4:6b:0d:b7:22:e5:3b:15:5f:8e:8d:45:fc:e5:18:2d: 99:8e:ea:32:35:95:d9:ee:c3:d6:48:db:43:b2:4c:7a:6c:b5: 44:94:3c:cf:bf:b6:52:21:50:54:8c:cd:89:c9:8a:b4:c4:05: cd:4f:86:f9:f1:a1:d6:5b:a9:7f:8d:cc:10:b0:f6:43:d4:94: a1:fa:06:c1:25:b1:e6:f3:dc:b3:57:59:84:eb:26:cf:a5:b3: b1:31:0e:93:0e:d9:10:7c:a8:ba:7a:ee:f6:e6:0a:1d:55:63: 6d:d4:3a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI50kFd0CvPou0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkwNDM3NDgtMTdhNy00NjlhLWFjM2YtYzMxZjllNzNlNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXYvsGCe0nz3ppq5V9mDWjyq8G0DdyjIudKS 6M8Y154llnSqzB1ySOdzv85SePtrsaK2efMcMYojYjBxcK1t043S9pJex6uzIb1H shK4QzF1nIOR+X4HUYSjF9/mwKZ2fDV7fzrbDQ6pocsrd87KFKB2Ij0FOrs+/1gM +hf/WO/NczyJVzyKUdiaWRMs01+EsvyivrJfEXeDn2J052ABHQd7cBOxTrgO2YOM PpX7LfGc+dqj12A3PiwrXseO1SvijfwbqXcdFnnlP8RGw/TVenzjX4mee23sIfqh RH1B3baAANV44fQ6OgNYiiViHW9pvl2ENOpkVJiWoeDKfs9rPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY+QmIPJAweqpWxSAcjeZ027DrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTNmNTM2YjItZjQ1NS0z NWMyLWJhMzctNTRhOGVlOWQ2NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmhFtpj4k09Sq8w0KooPdWT1aBYmqWHj6KB6x6ONkLcmzgTnI9nB3kz hxoi15lfQuDbGBW0Lz0VnV+tXPD4+m26SOCppONKOnMROzi2F1EBEKhq8TagO1/z 6ZXwXVqPzKfzgvXcMgJ+bMzOcyl9J/saI9m89oM3+upKsd8dN1wC517v7nG/3Nvz uAl3C9lw27HPxGsNtyLlOxVfjo1F/OUYLZmO6jI1ldnuw9ZI20OyTHpstUSUPM+/ tlIhUFSMzYnJirTEBc1PhvnxodZbqX+NzBCw9kPUlKH6BsElsebz3LNXWYTrJs+l s7ExDpMO2RB8qLp67vbmCh1VY23UOuA= -----END CERTIFICATE-----Generated at Sun Oct 4 08:43:15 2026 by rpki-client