$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa File: 1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa (raw, json) Hash identifier: uQpc+UC4m3MR+GxOoW471tLHkuXgoA2nghBuUmpozQI= Subject key identifier: 9E:1B:35:EC:78:22:F6:59:3E:6C:D9:6B:4D:2E:00:65:A2:F2:B1:66 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49730F45BA30187AE6A19220 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.38.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0f:45:ba:30:18:7a:e6:a1:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f85043f-7865-4119-b6bc-87863a0a5db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:b8:58:f1:18:18:7c:94:ef:ba:06:39:5b: d8:6d:cb:13:d5:aa:0e:61:c9:7a:e9:5e:bd:e6:5f: c2:62:fe:2d:38:cd:09:55:03:e8:ea:19:05:92:37: 61:60:b5:d3:ac:04:1a:2b:86:51:df:c9:95:31:99: 75:ef:57:8b:0d:ac:08:bf:fa:8b:78:5f:69:17:23: f7:2d:60:35:cc:1e:df:4d:b7:f3:50:b1:f7:5b:95: f6:09:59:3e:fe:97:2d:64:bc:b0:5f:e5:92:b4:bd: ac:20:42:8b:fc:19:a0:dd:bf:7e:5c:ac:fe:ba:13: 77:14:b8:04:03:3f:69:0a:bf:b0:2a:f7:a7:40:f1: e0:78:4e:de:6f:b3:25:4c:77:fa:4e:a0:1a:f7:d1: fb:f2:00:c2:40:d8:ec:de:c2:6f:c1:ab:66:3d:6c: a3:aa:60:03:08:c9:d2:07:6c:e3:9e:7b:bb:cb:31: 78:49:24:ae:b4:9e:62:00:0b:0d:68:b1:27:64:da: cd:e7:2e:bb:e3:e0:94:f9:97:19:55:57:f7:77:65: 87:72:51:04:76:e0:5d:36:20:98:26:d3:7b:9d:1b: 33:27:40:c1:93:a7:eb:cf:aa:84:27:6d:56:f2:93: 36:f3:2e:ae:d8:27:4b:63:07:40:df:10:94:c2:f2: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:35:EC:78:22:F6:59:3E:6C:D9:6B:4D:2E:00:65:A2:F2:B1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e5:28:a1:73:3f:77:ef:92:01:e4:e9:be:06:20:24:69:71: ae:22:2c:d3:6b:93:eb:b9:14:c0:ac:11:9f:80:9c:6f:6e:8f: 74:47:90:27:e3:f4:e8:f8:87:0f:6b:57:35:52:70:3b:66:ec: e9:f0:96:d2:23:a0:0c:e0:96:fa:12:48:e6:bc:5c:69:7a:d0: a4:09:d0:bb:4d:24:cc:8e:71:6e:e6:60:c7:e9:bb:53:35:35: 86:9a:4e:b1:a7:93:92:34:9d:40:7e:c9:16:36:88:30:a8:6e: 3f:5c:5d:de:d0:1a:70:0c:0c:04:b2:30:72:ee:be:76:78:10: 88:18:fc:9d:58:06:c7:dc:c2:af:98:4c:23:70:c2:c3:18:31: a8:14:a8:06:ad:16:6e:6c:79:6c:cd:5d:92:46:35:01:92:33: 1d:d0:65:3e:66:5b:a3:56:60:3d:22:29:95:0e:4a:e4:25:65: 32:d8:e7:45:b9:78:29:d9:ed:e2:e7:91:34:73:15:d3:5e:f3: 76:78:f4:fd:dd:6a:d1:e6:82:7d:0d:73:6f:87:c2:b2:4e:9f: 5c:6b:d7:40:48:c3:0a:bb:46:6b:5c:84:0e:32:d9:e8:06:9e: ba:fa:d0:b7:60:6c:f3:9c:c2:79:9f:e4:12:6f:e9:4a:ea:c4: 9f:38:c4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcw9FujAYeuahkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y4NTA0M2YtNzg2NS00MTE5LWI2YmMtODc4NjNhMGE1ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre64WPEYGHyU77oGOVvYbcsT1aoOYcl66V69 5l/CYv4tOM0JVQPo6hkFkjdhYLXTrAQaK4ZR38mVMZl171eLDawIv/qLeF9pFyP3 LWA1zB7fTbfzULH3W5X2CVk+/pctZLywX+WStL2sIEKL/Bmg3b9+XKz+uhN3FLgE Az9pCr+wKvenQPHgeE7eb7MlTHf6TqAa99H78gDCQNjs3sJvwatmPWyjqmADCMnS B2zjnnu7yzF4SSSutJ5iAAsNaLEnZNrN5y674+CU+ZcZVVf3d2WHclEEduBdNiCY JtN7nRszJ0DBk6frz6qEJ21W8pM28y6u2CdLYwdA3xCUwvKtMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4bNex4IvZZPmzZa00uAGWi8rFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWVjZjZhMGEtOGM0NS0z ZDU3LTgyMGEtOTRjNDcwZjY1NmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3lKKFzP3fvkgHk6b4GICRpca4iLNNrk+u5FMCsEZ+AnG9uj3RHkCfj 9Oj4hw9rVzVScDtm7OnwltIjoAzglvoSSOa8XGl60KQJ0LtNJMyOcW7mYMfpu1M1 NYaaTrGnk5I0nUB+yRY2iDCobj9cXd7QGnAMDASyMHLuvnZ4EIgY/J1YBsfcwq+Y TCNwwsMYMagUqAatFm5seWzNXZJGNQGSMx3QZT5mW6NWYD0iKZUOSuQlZTLY50W5 eCnZ7eLnkTRzFdNe83Z49P3datHmgn0Nc2+HwrJOn1xr10BIwwq7RmtchA4y2egG nrr60LdgbPOcwnmf5BJv6UrqxJ84xB8= -----END CERTIFICATE-----Generated at Sun Sep 27 06:58:38 2026 by rpki-client