$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa File: bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa (raw, json) Hash identifier: hdDoOQC58sAwQOh9iO2Uxc6XrtcJELX16FUKpTgGfh8= Subject key identifier: FE:E5:6F:FF:AE:27:A3:63:C1:37:EA:65:4A:0C:20:26:75:9C:5B:12 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4972AB62479456489B976380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.57.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ab:62:47:94:56:48:9b:97:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3352ecb9-e0fb-4a8b-a659-118d8cd4c5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:75:6a:8a:73:24:78:db:b4:f9:92:2d:3b: 45:de:b1:6b:21:bb:fe:2f:d1:42:d5:b4:59:40:f3: ae:43:ed:76:e0:f5:7b:c8:c4:41:1d:a9:0f:ed:3f: 7a:3d:0b:c9:4b:a5:9f:53:8e:92:94:ab:fd:a9:9b: e8:ee:f8:15:04:e3:98:a3:8d:2e:30:af:88:47:05: 80:e7:b1:08:a3:b2:ca:d7:58:17:9c:e8:56:25:e3: c8:9b:1b:56:7e:54:be:54:fc:5d:d1:30:b2:dc:59: 41:16:4c:a3:d0:ab:cc:36:a3:70:fb:ab:49:34:69: b9:f5:4f:cb:2c:99:78:4f:f2:32:ae:8e:ab:e5:01: 7b:29:13:02:2a:c5:43:79:62:7f:fc:e9:e0:b8:02: bb:e2:b4:26:37:9e:ed:b1:9d:dc:14:d7:4e:26:d3: b2:4c:8c:56:87:55:0b:07:d4:19:78:15:79:3c:d6: d0:47:c0:cc:9d:b4:01:be:09:42:5e:28:29:49:14: d2:30:11:cd:0d:99:c5:0e:c5:a1:b1:ca:53:22:e7: c3:01:22:68:85:4f:8e:4a:e5:97:b2:76:00:c9:3c: 27:64:c0:31:c8:74:96:ab:a9:43:95:94:9e:57:62: e7:1c:e2:c5:9d:15:a3:c9:8c:54:e8:67:a2:23:0e: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E5:6F:FF:AE:27:A3:63:C1:37:EA:65:4A:0C:20:26:75:9C:5B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bb8ba5a4-a6e8-362a-b275-ee0704dcd21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fd:fb:09:e9:6c:e4:e2:09:3d:76:01:22:70:fe:0b:a1:dd: 00:44:a9:70:94:fa:60:2d:5f:3b:26:e7:03:e2:17:9d:96:16: 10:36:fe:28:6f:49:36:ff:de:7d:a1:03:05:4e:4e:ff:29:dc: bb:d5:17:88:98:6e:4f:ee:b9:cd:12:97:71:8d:5f:7b:7d:ab: c4:f5:63:ca:b1:9c:0a:63:8f:a1:e9:e9:46:ab:7d:1a:25:8e: 88:8f:17:00:3f:e9:ce:19:2b:3a:49:15:45:62:0c:12:62:e0: 42:d7:1a:10:65:60:db:e5:8c:7b:84:f2:27:1f:37:58:e5:7d: c5:5c:45:82:07:12:cf:e4:a0:04:4e:66:0d:22:2e:52:f1:ad: 6d:82:21:be:bf:8a:80:72:e2:75:0d:49:b9:53:73:46:75:70: 9d:17:72:ca:f0:c0:bd:c0:fc:6b:3d:57:a1:f3:67:5e:98:75: 71:a9:45:22:1c:e2:20:2f:93:26:db:e5:9a:f3:89:d0:bb:91: 94:64:5b:7d:41:63:df:37:4e:42:1f:95:3d:f2:f0:0e:02:f3: 22:e2:e6:7c:67:1c:34:e7:39:37:76:5a:6e:6f:2a:f1:c7:db: b5:d6:10:56:40:78:78:b1:fb:e5:0c:79:2c:76:23:72:64:e3: 89:fc:50:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqtiR5RWSJuXY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzM1MmVjYjktZTBmYi00YThiLWE2NTktMTE4ZDhjZDRjNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnd1aopzJHjbtPmSLTtF3rFrIbv+L9FC1bRZ QPOuQ+124PV7yMRBHakP7T96PQvJS6WfU46SlKv9qZvo7vgVBOOYo40uMK+IRwWA 57EIo7LK11gXnOhWJePImxtWflS+VPxd0TCy3FlBFkyj0KvMNqNw+6tJNGm59U/L LJl4T/Iyro6r5QF7KRMCKsVDeWJ//OnguAK74rQmN57tsZ3cFNdOJtOyTIxWh1UL B9QZeBV5PNbQR8DMnbQBvglCXigpSRTSMBHNDZnFDsWhscpTIufDASJohU+OSuWX snYAyTwnZMAxyHSWq6lDlZSeV2LnHOLFnRWjyYxU6GeiIw69yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7lb/+uJ6NjwTfqZUoMICZ1nFsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmI4YmE1YTQtYTZlOC0z NjJhLWIyNzUtZWUwNzA0ZGNkMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/9+wnpbOTiCT12ASJw/guh3QBEqXCU+mAtXzsm5wPiF52WFhA2/ihv STb/3n2hAwVOTv8p3LvVF4iYbk/uuc0Sl3GNX3t9q8T1Y8qxnApjj6Hp6UarfRol joiPFwA/6c4ZKzpJFUViDBJi4ELXGhBlYNvljHuE8icfN1jlfcVcRYIHEs/koARO Zg0iLlLxrW2CIb6/ioBy4nUNSblTc0Z1cJ0XcsrwwL3A/Gs9V6HzZ16YdXGpRSIc 4iAvkybb5ZrzidC7kZRkW31BY983TkIflT3y8A4C8yLi5nxnHDTnOTd2Wm5vKvHH 27XWEFZAeHix++UMeSx2I3Jk44n8UD8= -----END CERTIFICATE-----Generated at Mon Oct 5 11:17:41 2026 by rpki-client