$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa File: a436ac52-91aa-3c41-8e92-858df4f15e6d.roa (raw, json) Hash identifier: XTqEOH9FFYuUiO7hniTMYr8eCebOEpILV5UhExK84es= Subject key identifier: C2:FF:58:71:EB:C1:66:E6:74:9A:9A:54:B8:9D:9D:71:4A:E1:3C:4C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4974A554E6F22C4D3A8ACD80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.32.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a5:54:e6:f2:2c:4d:3a:8a:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6130bd66-64e2-4474-b25d-6ad810ae409b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:a5:47:80:45:30:20:c5:12:74:19:69:76: 67:74:c3:53:6a:dc:f4:2a:01:d1:42:6e:e2:75:97: 7f:39:37:b7:e9:0b:67:d7:85:83:a4:20:18:2c:7e: ac:65:b3:41:c2:c4:f6:d0:51:b3:2b:2e:3d:61:75: 8d:02:77:1a:c6:c9:1a:cd:ef:1c:9f:79:69:a3:0c: 52:02:bd:4d:b0:22:34:39:b1:87:bb:5d:f5:c8:5d: 65:19:db:05:60:24:0a:5e:09:63:c7:ec:3d:ab:87: fd:4b:b4:85:f5:94:ec:77:fb:68:e4:30:83:d1:f6: 28:3a:05:39:53:4e:27:4e:75:a6:0a:27:48:35:dd: 64:a5:f4:ee:f8:5f:eb:76:82:03:68:bf:15:68:99: 89:bc:b4:77:d3:95:4d:e0:e5:f6:01:5a:5f:7a:be: fe:fa:82:f9:26:75:c9:e4:c8:99:60:49:b6:74:44: ee:ef:9e:40:50:15:3f:47:89:73:f7:6a:9e:09:0d: d9:e8:76:12:94:9b:29:39:dc:60:65:e6:ec:8d:e0: 52:11:b6:10:f6:d5:29:56:85:1c:23:41:bf:25:e4: 22:e9:be:5e:51:83:ea:e2:4a:5f:68:41:85:8d:76: 62:4a:f5:92:db:8d:63:66:be:13:31:fc:d9:7e:6a: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FF:58:71:EB:C1:66:E6:74:9A:9A:54:B8:9D:9D:71:4A:E1:3C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0b:7c:12:81:80:6a:28:5a:1a:d9:78:f3:c8:23:af:57:98: 4d:90:0d:39:e0:7b:ea:5b:03:10:a3:fa:11:b8:f4:f4:d5:f5: 4f:f0:70:06:98:88:04:9b:f1:a3:5b:95:72:63:18:e6:b9:9a: 0c:04:cb:6f:20:f4:aa:62:ed:44:32:dd:59:eb:4d:d4:fd:19: f6:87:13:9f:d5:42:f8:7d:dd:17:4a:9e:28:4b:eb:0d:c3:49: 9e:75:60:ca:e3:ed:bb:6f:f4:ec:5b:2e:55:84:ed:62:be:31: 7f:78:d7:8a:5c:22:19:3a:b4:a5:76:9d:79:c0:cb:bf:db:de: e0:78:16:2b:54:da:06:b5:a5:e4:a8:bc:3a:88:d8:ae:c0:a4: 42:40:d7:6d:8c:18:d4:36:16:87:e5:82:ef:99:36:b8:8d:98: 1e:1f:42:79:82:d7:1f:fa:6b:86:e7:89:30:21:ea:72:7e:af: e9:8a:03:c5:75:ad:08:11:b6:6c:e5:9b:a5:15:19:7e:36:56: 52:28:ae:db:81:12:76:bc:5d:ff:76:ac:92:88:6d:fd:eb:a1: e9:66:af:af:1b:7c:50:70:2a:6d:56:17:4b:ba:fb:17:96:36: 07:75:62:dd:0d:f7:65:23:c6:59:02:d6:31:26:23:96:d7:9a: 3e:92:ba:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKVU5vIsTTqKzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjEzMGJkNjYtNjRlMi00NDc0LWIyNWQtNmFkODEwYWU0MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiOlR4BFMCDFEnQZaXZndMNTatz0KgHRQm7i dZd/OTe36Qtn14WDpCAYLH6sZbNBwsT20FGzKy49YXWNAncaxskaze8cn3lpowxS Ar1NsCI0ObGHu131yF1lGdsFYCQKXgljx+w9q4f9S7SF9ZTsd/to5DCD0fYoOgU5 U04nTnWmCidINd1kpfTu+F/rdoIDaL8VaJmJvLR305VN4OX2AVpfer7++oL5JnXJ 5MiZYEm2dETu755AUBU/R4lz92qeCQ3Z6HYSlJspOdxgZebsjeBSEbYQ9tUpVoUc I0G/JeQi6b5eUYPq4kpfaEGFjXZiSvWS241jZr4TMfzZfmporQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML/WHHrwWbmdJqaVLidnXFK4TxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTQzNmFjNTItOTFhYS0z YzQxLThlOTItODU4ZGY0ZjE1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsLfBKBgGooWhrZePPII69XmE2QDTnge+pbAxCj+hG49PTV9U/wcAaY iASb8aNblXJjGOa5mgwEy28g9Kpi7UQy3VnrTdT9GfaHE5/VQvh93RdKnihL6w3D SZ51YMrj7btv9OxbLlWE7WK+MX9414pcIhk6tKV2nXnAy7/b3uB4FitU2ga1peSo vDqI2K7ApEJA122MGNQ2Foflgu+ZNriNmB4fQnmC1x/6a4bniTAh6nJ+r+mKA8V1 rQgRtmzlm6UVGX42VlIortuBEna8Xf92rJKIbf3roelmr68bfFBwKm1WF0u6+xeW Ngd1Yt0N92UjxlkC1jEmI5bXmj6SunE= -----END CERTIFICATE-----Generated at Sat Sep 26 13:16:58 2026 by rpki-client