$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa File: fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa (raw, json) Hash identifier: EHHBE6zQaUEi4rCBysri53qdxOM7McxpJXbI0Rd+6as= Subject key identifier: 89:5E:E5:08:21:7F:8F:4D:58:6C:9B:7A:01:5C:7E:23:54:7D:CF:86 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4974566615A85067085CA200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.38.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:56:66:15:a8:50:67:08:5c:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb306ccb-c0f0-44f2-af86-2bd926a31c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:45:ad:14:27:6a:92:28:7d:42:c2:f3:4c: 14:16:37:4e:95:f0:cd:95:31:81:16:ea:60:63:3d: 6e:b8:e4:55:c1:19:86:14:ef:0a:a2:22:1b:da:b9: c9:99:f9:3d:23:97:7e:97:c7:8b:4c:fc:b7:6d:32: 8d:f9:dd:3e:51:5f:4f:94:77:d8:44:e5:2c:66:14: cf:1a:1d:28:0d:e1:b4:c5:f0:66:9e:a8:f4:01:78: 87:47:3c:03:64:26:a0:71:37:b5:fb:8d:1b:9a:df: 6d:73:59:ae:29:3a:3b:de:94:9b:59:97:ce:51:e7: 88:20:f4:9d:ca:48:4d:ac:0e:43:bb:bf:31:d3:88: 19:75:df:d2:16:eb:56:30:ee:2a:32:f6:dc:1e:68: 56:84:41:38:6a:b6:c3:e4:d0:7c:d7:a3:49:5f:15: 82:0f:a0:75:01:1c:ba:47:b4:26:05:84:92:55:d6: 31:b8:50:63:6b:1e:63:ff:9f:f4:b5:82:01:41:8b: dd:62:c1:f5:6a:91:9f:96:a7:58:43:c7:8e:a8:ef: 0c:78:f5:9d:9d:ab:88:e6:ef:35:8c:a4:68:73:7d: 90:f8:8c:f9:87:30:be:e8:4a:74:0b:34:23:9c:4b: 6c:5d:7e:70:e3:9e:d4:c7:80:76:70:09:05:08:23: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5E:E5:08:21:7F:8F:4D:58:6C:9B:7A:01:5C:7E:23:54:7D:CF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ee:97:9f:fc:bb:dd:4d:1e:62:d6:6f:90:1a:bf:30:b9:52: 6f:d7:20:5d:a0:74:28:73:49:a3:8f:49:19:c9:1e:16:df:59: 61:41:f7:38:b8:26:ae:0a:a3:c6:c6:18:1f:48:50:c7:3b:ac: 8a:1b:c7:59:60:5c:b5:e7:ca:81:05:90:0d:60:09:55:4e:b1: 20:c9:71:19:37:37:6e:74:fd:24:f6:64:fd:3b:e6:c3:3c:cc: 37:f5:1f:ac:5e:37:53:68:b3:d5:c3:32:b3:ee:3c:c8:74:76: 6e:3f:3e:1b:35:56:43:02:83:97:a8:50:db:2e:2d:9f:a8:45: ca:9f:ff:62:68:64:f3:9d:e3:a7:58:80:6f:7e:48:d2:f7:09: d2:70:7a:cd:ba:74:af:f4:3d:f6:95:0f:95:c3:ae:a6:8f:f9: 04:a5:3b:39:ef:d6:5c:44:c3:66:b5:6b:c5:b7:62:fe:03:42: 54:c7:ac:26:05:f7:40:d5:53:71:39:42:e4:25:82:ff:b0:88: 85:a9:2b:04:fe:3c:62:5a:fa:aa:21:2c:e6:09:92:f7:9c:fc: 85:8f:5d:b8:53:bc:4d:b9:08:8b:05:c9:7f:d2:a7:f3:00:2a: d4:c0:33:cb:bd:7b:ad:2f:a5:c7:b6:1b:1d:3c:1b:43:19:76: 95:69:85:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFZmFahQZwhcogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmIzMDZjY2ItYzBmMC00NGYyLWFmODYtMmJkOTI2YTMxYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTJFrRQnapIofULC80wUFjdOlfDNlTGBFupg Yz1uuORVwRmGFO8KoiIb2rnJmfk9I5d+l8eLTPy3bTKN+d0+UV9PlHfYROUsZhTP Gh0oDeG0xfBmnqj0AXiHRzwDZCagcTe1+40bmt9tc1muKTo73pSbWZfOUeeIIPSd ykhNrA5Du78x04gZdd/SFutWMO4qMvbcHmhWhEE4arbD5NB816NJXxWCD6B1ARy6 R7QmBYSSVdYxuFBjax5j/5/0tYIBQYvdYsH1apGflqdYQ8eOqO8MePWdnauI5u81 jKRoc32Q+Iz5hzC+6Ep0CzQjnEtsXX5w457Ux4B2cAkFCCNJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIle5Qghf49NWGybegFcfiNUfc+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmJlNzA3NmQtN2Q2OS0z OGI1LTlkOWYtYmFkNjgyYTY5MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjul5/8u91NHmLWb5AavzC5Um/XIF2gdChzSaOPSRnJHhbfWWFB9zi4 Jq4Ko8bGGB9IUMc7rIobx1lgXLXnyoEFkA1gCVVOsSDJcRk3N250/ST2ZP075sM8 zDf1H6xeN1Nos9XDMrPuPMh0dm4/Phs1VkMCg5eoUNsuLZ+oRcqf/2JoZPOd46dY gG9+SNL3CdJwes26dK/0PfaVD5XDrqaP+QSlOznv1lxEw2a1a8W3Yv4DQlTHrCYF 90DVU3E5QuQlgv+wiIWpKwT+PGJa+qohLOYJkvec/IWPXbhTvE25CIsFyX/Sp/MA KtTAM8u9e60vpce2Gx08G0MZdpVphbU= -----END CERTIFICATE-----Generated at Sat Sep 26 13:38:48 2026 by rpki-client