$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa File: 2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json) Hash identifier: 5ek61oR9EkufzYpdX8pA+Nu2OcB9Hy0Y6q0VzZWEjmE= Subject key identifier: 82:D8:03:D7:2A:67:A5:45:A9:35:47:C0:7C:70:3E:CB:F9:3F:24:CC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4972B13035FAF09E2899DE80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.57.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b1:30:35:fa:f0:9e:28:99:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dacee3be-d42e-4d59-bf6e-c2bbe990ed60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:f5:db:7f:b7:cc:5c:1e:1b:05:7d:2d:f2: f5:2a:1f:f2:d6:63:37:42:73:96:79:fb:d3:ea:ef: fb:b9:4b:2d:98:87:58:05:2e:fe:f1:e0:44:bc:89: 96:33:87:0e:a3:84:3e:22:67:19:6a:5f:ab:95:fe: 62:9c:21:01:e7:39:3e:f0:b2:53:93:d6:08:a8:38: 67:c6:72:fd:8e:b3:85:4d:e7:42:85:6a:44:83:4a: c2:08:44:9c:c1:09:aa:e2:37:87:df:b2:a7:af:f3: 54:86:cd:56:1a:49:3b:19:2f:f0:e3:1d:e4:93:e0: 93:38:ce:5e:84:aa:73:be:a2:e2:4b:e4:37:ef:91: 0b:c2:5d:73:ec:e6:21:f5:f4:12:f4:0f:44:bd:c1: cf:d9:66:ff:0b:49:80:4f:a4:e8:13:f9:e7:13:b7: 84:fd:0c:39:50:80:ca:a8:b5:ac:c2:bf:97:d2:4c: f2:f4:7e:ce:f2:18:92:c3:e7:f7:06:8d:53:fa:3e: ab:40:e8:50:81:b8:ab:c3:e5:8d:21:8f:9d:0b:7c: 55:01:c2:bc:85:15:7c:be:cf:b6:a8:ac:cb:5e:62: 92:fa:94:ca:7b:3e:e4:bf:73:3e:07:cd:31:36:73: e1:00:c0:25:a8:72:06:4a:48:04:37:21:88:b5:68: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D8:03:D7:2A:67:A5:45:A9:35:47:C0:7C:70:3E:CB:F9:3F:24:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:01:20:00:c4:ae:e7:3e:9b:c9:b1:2f:53:61:24:8e:c0:40: d4:c6:cf:a3:01:48:0e:32:28:e0:8b:41:c5:17:5f:c4:db:ce: de:3a:5d:28:26:73:22:dc:02:6d:31:a5:a7:5f:21:09:6e:dc: 9b:e8:31:0e:9e:a5:f9:46:c1:7e:97:1c:5a:a0:79:ca:ce:16: 81:7b:6b:c8:6e:0d:88:76:b9:a0:40:ec:06:69:f3:61:88:e1: 2b:1c:48:27:0a:fd:b5:5b:de:57:fa:e8:df:1b:81:65:a3:e6: 72:f2:95:34:06:e4:24:7e:70:f6:12:83:b7:f8:f8:d6:29:13: 5e:6e:2a:f5:01:ad:0d:1a:79:2c:ab:db:56:bf:c4:6a:e6:7d: d7:c0:f7:3d:4a:72:4e:02:bc:58:54:5e:46:62:d5:6f:a2:98: 0e:5c:66:a1:d0:c1:89:ab:9a:5e:21:c4:72:38:e6:aa:7f:9b: 6d:19:5f:67:db:32:ad:76:e3:e4:8a:ce:7e:b0:9c:bf:11:23: a7:70:2b:5d:9f:12:4b:18:ea:a0:99:80:14:d5:77:d3:89:14: 55:32:2c:4c:10:b8:73:a3:4e:38:fc:54:1c:8d:5c:94:6a:bb: ed:a0:75:3b:02:08:8e:fc:b7:f7:eb:c7:9a:a3:e5:2c:f2:76: 01:97:e9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrEwNfrwniiZ3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFjZWUzYmUtZDQyZS00ZDU5LWJmNmUtYzJiYmU5OTBlZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfb123+3zFweGwV9LfL1Kh/y1mM3QnOWefvT 6u/7uUstmIdYBS7+8eBEvImWM4cOo4Q+ImcZal+rlf5inCEB5zk+8LJTk9YIqDhn xnL9jrOFTedChWpEg0rCCEScwQmq4jeH37Knr/NUhs1WGkk7GS/w4x3kk+CTOM5e hKpzvqLiS+Q375ELwl1z7OYh9fQS9A9EvcHP2Wb/C0mAT6ToE/nnE7eE/Qw5UIDK qLWswr+X0kzy9H7O8hiSw+f3Bo1T+j6rQOhQgbirw+WNIY+dC3xVAcK8hRV8vs+2 qKzLXmKS+pTKez7kv3M+B80xNnPhAMAlqHIGSkgENyGItWiTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILYA9cqZ6VFqTVHwHxwPsv5PyTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjg0MGI4ZTktNjlhYi0z YThmLWFiODUtZjgzZDg1MmIwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEBIADEruc+m8mxL1NhJI7AQNTGz6MBSA4yKOCLQcUXX8Tbzt46XSgm cyLcAm0xpadfIQlu3JvoMQ6epflGwX6XHFqgecrOFoF7a8huDYh2uaBA7AZp82GI 4SscSCcK/bVb3lf66N8bgWWj5nLylTQG5CR+cPYSg7f4+NYpE15uKvUBrQ0aeSyr 21a/xGrmfdfA9z1Kck4CvFhUXkZi1W+imA5cZqHQwYmrml4hxHI45qp/m20ZX2fb Mq124+SKzn6wnL8RI6dwK12fEksY6qCZgBTVd9OJFFUyLEwQuHOjTjj8VByNXJRq u+2gdTsCCI78t/frx5qj5SzydgGX6U0= -----END CERTIFICATE-----Generated at Mon Sep 28 11:03:41 2026 by rpki-client