$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa File: 128a74c3-e6aa-3d06-ac4a-655a48640308.roa (raw, json) Hash identifier: FQSj0JOCXfgpWySEqNP+IS84tms7uwCVOQ9xsWF74t8= Subject key identifier: 41:57:74:74:CF:87:4F:EE:FA:BA:85:97:89:9D:EB:74:B7:B2:50:92 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F497464F0A9421989A7F25700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.33.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:64:f0:a9:42:19:89:a7:f2:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03612ee9-5073-40c5-bf71-59387b23568c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:65:0b:e7:8b:7c:bb:c4:49:cc:a4:0e:3f: 66:35:59:2d:04:81:bc:35:09:40:fa:64:a0:90:c8: e0:c8:72:d5:6b:66:ed:33:3f:48:fa:12:36:a0:19: 8f:f6:b2:df:07:9e:1e:3b:6e:64:67:71:c2:cd:bb: 5b:02:b6:cb:7c:bd:98:28:e6:6f:46:8a:76:f1:f4: d4:00:a2:3e:83:d8:2b:1c:64:95:b9:07:3d:1a:b8: 26:4e:94:5a:88:d3:9e:f3:4c:91:26:c1:d5:40:11: 52:7f:02:60:78:5a:47:96:3f:44:4f:aa:bc:d9:99: d9:30:e0:80:97:eb:68:ae:25:bc:a8:f7:fc:81:54: 34:a8:38:ad:bf:42:65:23:a5:87:90:6b:30:cb:5c: 4c:4d:f6:94:e6:6a:78:24:d2:6d:2e:47:16:d4:6a: 2a:6c:2b:54:99:9f:ee:37:3c:28:7b:f7:e2:ed:9a: 31:57:42:da:61:a4:5d:08:a3:8f:9f:e4:41:1b:9a: f9:58:33:2f:24:e8:52:27:bf:26:8b:ae:3d:a7:db: 00:67:15:67:8a:e6:84:9e:0d:dd:83:a1:13:a0:4b: d3:77:16:80:d1:05:8b:06:17:f8:92:ff:b3:0a:31: bb:c0:4c:0a:10:91:ae:85:5b:0a:63:4a:99:f3:de: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:74:74:CF:87:4F:EE:FA:BA:85:97:89:9D:EB:74:B7:B2:50:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:91:98:7b:12:87:8e:c7:fd:5a:a3:42:fc:3b:af:47:d2:3a: 60:7b:b8:e0:ee:c0:ac:31:a6:50:80:56:9b:38:de:50:ad:22: 24:c1:4b:3f:e7:f9:d6:4d:ac:11:38:0b:05:af:e5:ba:e8:27: 1c:9b:4a:58:cc:68:d8:86:ab:5f:3d:b6:f9:d8:c8:a4:59:ad: 7e:1c:8e:f8:0d:0d:fb:80:76:1e:9f:a6:84:cf:ee:e8:14:7f: 82:c6:f1:51:a7:6c:26:be:89:40:3f:63:d9:6c:06:dd:bf:46: 8e:dd:62:91:44:86:df:4f:b8:b1:10:29:63:c8:80:67:b2:96: 8b:1f:a6:aa:ac:11:1c:44:e6:22:db:36:c4:88:aa:2a:35:8c: bf:c8:9f:2e:10:d3:c1:56:de:27:a7:21:f8:2a:54:f2:93:78: 42:9d:df:81:f0:77:a7:6b:f8:c7:3b:d5:db:97:86:27:49:17: ac:03:e2:50:91:f5:c7:e3:b2:b7:cf:c2:0e:7d:47:ba:72:0e: 78:13:b8:3d:78:6b:ac:2b:27:1c:7c:3c:55:19:87:5a:b2:ae: 61:c8:8c:ed:50:2a:86:e5:35:a0:d2:d6:43:19:e8:b1:ab:86: a4:98:86:4c:28:c0:5a:23:09:b7:30:7b:69:dc:18:ea:d8:7f: d1:62:b7:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGTwqUIZiafyVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDM2MTJlZTktNTA3My00MGM1LWJmNzEtNTkzODdiMjM1NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbplC+eLfLvEScykDj9mNVktBIG8NQlA+mSg kMjgyHLVa2btMz9I+hI2oBmP9rLfB54eO25kZ3HCzbtbArbLfL2YKOZvRop28fTU AKI+g9grHGSVuQc9GrgmTpRaiNOe80yRJsHVQBFSfwJgeFpHlj9ET6q82ZnZMOCA l+toriW8qPf8gVQ0qDitv0JlI6WHkGswy1xMTfaU5mp4JNJtLkcW1GoqbCtUmZ/u Nzwoe/fi7ZoxV0LaYaRdCKOPn+RBG5r5WDMvJOhSJ78mi649p9sAZxVniuaEng3d g6EToEvTdxaA0QWLBhf4kv+zCjG7wEwKEJGuhVsKY0qZ894PWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFXdHTPh0/u+rqFl4md63S3slCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTI4YTc0YzMtZTZhYS0z ZDA2LWFjNGEtNjU1YTQ4NjQwMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeRmHsSh47H/VqjQvw7r0fSOmB7uODuwKwxplCAVps43lCtIiTBSz/n +dZNrBE4CwWv5broJxybSljMaNiGq189tvnYyKRZrX4cjvgNDfuAdh6fpoTP7ugU f4LG8VGnbCa+iUA/Y9lsBt2/Ro7dYpFEht9PuLEQKWPIgGeylosfpqqsERxE5iLb NsSIqio1jL/Iny4Q08FW3ienIfgqVPKTeEKd34Hwd6dr+Mc71duXhidJF6wD4lCR 9cfjsrfPwg59R7pyDngTuD14a6wrJxx8PFUZh1qyrmHIjO1QKoblNaDS1kMZ6LGr hqSYhkwowFojCbcwe2ncGOrYf9Fitzg= -----END CERTIFICATE-----Generated at Fri Sep 25 17:14:07 2026 by rpki-client