$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa File: b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa (raw, json) Hash identifier: pOQ+AKS7hOtNQ2mP0Nu6pooBYM/xjJxSwrWNx8jvxEE= Subject key identifier: CF:FA:E6:3A:E7:F1:D0:B4:57:BA:C5:5D:43:00:B3:6E:0F:A2:99:3C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49733BCB69DB5A6A81E523C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3b:cb:69:db:5a:6a:81:e5:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=971a47dd-98d3-48ad-9920-5f44ba8ea179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:2c:58:b7:38:92:fd:8b:9f:d6:dc:0a:6e: d9:4f:99:5a:df:bd:3f:88:9b:a7:67:aa:85:52:9e: 2d:53:e5:4c:6d:e3:45:18:4d:0c:1f:1d:fd:6d:2c: 13:2c:f8:be:62:a9:6f:dc:fb:0b:4a:af:85:d0:9e: ca:3a:9e:61:01:e9:34:d2:c5:56:16:a8:50:63:7a: 00:77:c6:67:b1:ce:04:96:84:99:25:ec:b3:74:f8: 63:2a:32:18:80:fb:0b:36:d4:bd:f1:99:79:d2:bf: 4f:b0:69:89:bb:48:79:9d:a7:a5:11:41:41:15:56: 63:21:8a:7a:f9:f3:a2:54:2d:9e:ac:05:43:80:bd: 13:9a:4d:38:cf:3a:5b:b2:20:8b:9a:8d:f9:d5:b2: 83:51:fc:80:d2:dd:83:1e:1e:61:41:4e:f6:b0:94: 0b:4e:ba:1b:2e:ef:91:22:e3:16:41:dc:be:1e:08: 1f:72:b0:be:2b:d5:e7:a6:f6:8d:7f:4f:82:b0:3b: 2c:63:3b:72:0d:76:22:c1:69:0e:e5:ae:06:db:b7: 3b:63:19:e7:4c:35:2f:10:ae:34:17:02:c1:91:b6: 56:84:fa:31:79:6d:a3:f5:d9:53:92:ac:cb:f7:1d: 70:b9:e2:cc:cc:e4:b4:8b:26:4a:28:55:71:a7:3b: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FA:E6:3A:E7:F1:D0:B4:57:BA:C5:5D:43:00:B3:6E:0F:A2:99:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:82:5c:31:c4:ca:2c:e2:c4:e1:e0:b0:60:0f:97:3e:bf:f7: cb:8f:00:fe:fb:56:6d:68:ec:f9:12:5b:e1:ca:7e:5a:de:27: 5e:5a:b0:d5:86:f7:a3:00:a0:5c:8a:45:77:2b:94:45:82:a6: 6b:98:1f:79:43:d6:e6:ca:90:5d:95:16:ae:ef:e0:9b:15:22: 06:a7:35:e5:32:6e:f0:74:80:e5:4c:83:9e:16:4a:19:f4:84: 1a:3e:bb:5d:1f:13:f7:7a:f1:c4:7f:65:f2:11:49:75:74:7b: e7:4d:f0:ad:a2:77:1e:98:3d:ea:ab:ee:3e:5d:0b:d8:bc:74: 45:9b:22:e1:d9:ca:4e:f3:f8:5c:ac:e6:ec:ea:fa:1b:e8:9c: 0b:cd:92:a5:b6:52:59:91:86:55:05:56:f0:e5:e2:df:25:c6: 90:c8:d7:f0:cf:2b:93:69:e4:00:2c:ec:b0:3c:ad:09:17:5a: 08:ed:0a:69:e8:f0:7d:4a:7d:e9:11:a9:1a:e7:50:cd:ca:e4: 9e:76:09:27:d1:93:ea:98:95:af:8d:ab:f1:d5:67:21:29:f1: a6:06:35:a5:f8:1d:c7:3d:84:48:39:d5:ae:d1:07:77:3f:a6: 77:11:36:fb:65:33:cd:6d:b5:7c:84:f6:01:92:38:ac:ec:7c: 7a:76:b4:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczvLadtaaoHlI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTcxYTQ3ZGQtOThkMy00OGFkLTk5MjAtNWY0NGJhOGVhMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuAsWLc4kv2Ln9bcCm7ZT5la370/iJunZ6qF Up4tU+VMbeNFGE0MHx39bSwTLPi+Yqlv3PsLSq+F0J7KOp5hAek00sVWFqhQY3oA d8Znsc4EloSZJeyzdPhjKjIYgPsLNtS98Zl50r9PsGmJu0h5naelEUFBFVZjIYp6 +fOiVC2erAVDgL0Tmk04zzpbsiCLmo351bKDUfyA0t2DHh5hQU72sJQLTrobLu+R IuMWQdy+HggfcrC+K9XnpvaNf0+CsDssYztyDXYiwWkO5a4G27c7YxnnTDUvEK40 FwLBkbZWhPoxeW2j9dlTkqzL9x1wueLMzOS0iyZKKFVxpzu5FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/65jrn8dC0V7rFXUMAs24Popk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc0OGNjNGMtYjc1Ni0z YTU4LWE1ZWYtMmEyMDViYTA0N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaCXDHEyizixOHgsGAPlz6/98uPAP77Vm1o7PkSW+HKflreJ15asNWG 96MAoFyKRXcrlEWCpmuYH3lD1ubKkF2VFq7v4JsVIganNeUybvB0gOVMg54WShn0 hBo+u10fE/d68cR/ZfIRSXV0e+dN8K2idx6YPeqr7j5dC9i8dEWbIuHZyk7z+Fys 5uzq+hvonAvNkqW2UlmRhlUFVvDl4t8lxpDI1/DPK5Np5AAs7LA8rQkXWgjtCmno 8H1KfekRqRrnUM3K5J52CSfRk+qYla+Nq/HVZyEp8aYGNaX4Hcc9hEg51a7RB3c/ pncRNvtlM81ttXyE9gGSOKzsfHp2tBI= -----END CERTIFICATE-----Generated at Sat Sep 26 06:56:44 2026 by rpki-client