$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1479a392-d2f6-3e46-85a3-8703b4a934f8.roa File: 1479a392-d2f6-3e46-85a3-8703b4a934f8.roa (raw, json) Hash identifier: 3X/TrYi6wgrLu2Caf8eGPgpRDwqSXCon1S0U2fTlWws= Subject key identifier: 6B:11:2C:82:D1:04:09:6E:7C:71:42:9B:26:94:67:41:F8:C1:30:C6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4972EE662A2BC6DB420AC1C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1479a392-d2f6-3e46-85a3-8703b4a934f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.56.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ee:66:2a:2b:c6:db:42:0a:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7b52d0d-0d5b-4899-8b8e-cda441fcb700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:38:f8:73:24:6c:e2:77:de:54:5e:a2:c6: 3b:38:3c:ba:00:e2:13:2a:11:20:49:7a:f5:c7:d2: f2:cc:c8:c7:0b:aa:55:6e:fd:80:ae:64:46:37:a1: 53:9c:b6:ce:11:fd:4d:bf:88:a3:be:3e:34:68:a0: f8:62:d6:ef:65:7a:e0:63:e7:d9:12:a1:84:33:8c: 29:6b:67:d8:cd:2e:60:10:4d:0f:57:5a:d5:e0:6c: 88:a7:2e:ce:d6:ce:c8:0d:48:09:d6:d3:ad:85:b3: c4:96:9e:45:0f:9d:61:2a:43:d2:28:f1:a6:d3:21: 57:e2:38:9c:44:9d:d1:f3:9c:4f:09:15:64:c9:70: 47:2f:f3:2d:3b:95:95:96:69:c7:3b:14:57:0a:44: c2:07:0c:2e:76:4e:7a:db:9f:c5:5a:87:31:12:a0: 28:4d:e6:dc:fe:8c:79:f7:bf:b9:9f:80:d3:a5:c7: da:7c:19:d6:74:37:c6:3f:87:8e:4f:74:e9:49:79: d6:c3:89:dc:9f:2a:56:ab:ae:42:06:bb:a5:a6:7f: 37:15:08:0a:f0:bd:3e:11:22:43:99:31:fe:95:56: 23:13:8c:10:e9:03:9c:db:28:02:05:db:92:16:9b: 51:b3:7a:56:87:46:44:73:96:ec:e3:1c:9d:57:fd: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:2C:82:D1:04:09:6E:7C:71:42:9B:26:94:67:41:F8:C1:30:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1479a392-d2f6-3e46-85a3-8703b4a934f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:98:52:12:7e:fe:25:42:b4:ad:d3:a6:4d:b6:cf:6a:73:3c: 8b:dc:07:52:9e:34:23:f9:75:35:33:e5:b7:99:1b:d2:4b:b5: 32:a5:b2:aa:c9:95:a5:8e:d3:9e:da:78:7e:88:55:1c:66:04: db:c4:81:e2:57:33:0a:61:37:3d:60:c6:da:16:9d:da:ab:7a: 37:97:10:7c:67:f6:d8:c1:0f:a4:0a:44:70:0a:fe:47:10:41: 0f:5a:2b:91:01:19:87:bb:71:e4:dd:3f:ce:5d:a4:ec:3e:58: 01:e2:85:8a:83:1d:df:f3:65:eb:f4:4a:2a:f9:23:60:2a:1e: b2:35:09:25:07:f7:6c:89:75:f4:8d:85:85:95:0b:f4:a9:f4: ff:02:3b:e0:35:7d:0c:13:46:78:a1:8f:57:5b:cc:e1:37:51: e6:b5:a3:14:cc:13:fd:92:b6:99:3f:dc:6e:6f:54:35:8b:3d: 5e:a9:d1:c9:ff:1e:a4:ff:51:ec:e6:66:1f:61:93:3e:d3:fe: af:7b:1d:77:c5:83:1d:86:89:20:2b:4a:d1:f1:d0:88:4d:a1: 46:d3:2e:4b:e9:ea:70:00:b2:06:f0:6b:ce:80:28:7d:f7:0f: 63:88:68:a7:ee:62:84:95:64:a4:a5:e7:f1:af:8d:b7:55:7d: 21:d1:d8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu5mKivG20IKwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdiNTJkMGQtMGQ1Yi00ODk5LThiOGUtY2RhNDQxZmNiNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzg4+HMkbOJ33lReosY7ODy6AOITKhEgSXr1 x9LyzMjHC6pVbv2ArmRGN6FTnLbOEf1Nv4ijvj40aKD4YtbvZXrgY+fZEqGEM4wp a2fYzS5gEE0PV1rV4GyIpy7O1s7IDUgJ1tOthbPElp5FD51hKkPSKPGm0yFX4jic RJ3R85xPCRVkyXBHL/MtO5WVlmnHOxRXCkTCBwwudk5625/FWocxEqAoTebc/ox5 97+5n4DTpcfafBnWdDfGP4eOT3TpSXnWw4ncnypWq65CBrulpn83FQgK8L0+ESJD mTH+lVYjE4wQ6QOc2ygCBduSFptRs3pWh0ZEc5bs4xydV/38CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsRLILRBAlufHFCmyaUZ0H4wTDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTQ3OWEzOTItZDJmNi0z ZTQ2LTg1YTMtODcwM2I0YTkzNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2YUhJ+/iVCtK3Tpk22z2pzPIvcB1KeNCP5dTUz5beZG9JLtTKlsqrJ laWO057aeH6IVRxmBNvEgeJXMwphNz1gxtoWndqrejeXEHxn9tjBD6QKRHAK/kcQ QQ9aK5EBGYe7ceTdP85dpOw+WAHihYqDHd/zZev0Sir5I2AqHrI1CSUH92yJdfSN hYWVC/Sp9P8CO+A1fQwTRnihj1dbzOE3Uea1oxTME/2Stpk/3G5vVDWLPV6p0cn/ HqT/UezmZh9hkz7T/q97HXfFgx2GiSArStHx0IhNoUbTLkvp6nAAsgbwa86AKH33 D2OIaKfuYoSVZKSl5/GvjbdVfSHR2CE= -----END CERTIFICATE-----Generated at Tue Sep 29 08:28:25 2026 by rpki-client