$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa File: 2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa (raw, json) Hash identifier: L7IrGkimdp+naAXjq7+OzPenDk6bn0ZqnUknfdtvyig= Subject key identifier: 1D:F6:D8:AF:20:CB:D8:12:50:68:72:94:88:E8:26:23:D0:47:5B:55 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4972AB6F50DF16F61C1B1F80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.50.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ab:6f:50:df:16:f6:1c:1b:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=99cc1f6d-1754-4e84-8a9e-e3c6921a4936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:cd:27:14:16:98:74:60:e5:51:53:e6:12: 3e:9b:d9:34:15:98:ed:79:23:3b:a1:a4:03:09:d3: 99:59:85:fb:86:4b:c6:be:52:34:fd:4a:2e:81:bd: 7a:84:3b:28:9d:76:e0:e4:14:34:26:92:71:54:c0: b0:58:4e:8a:0a:db:fb:75:a9:3e:f5:04:3e:32:32: 00:9e:21:ad:f0:a5:ef:1d:a6:bb:9c:9e:5f:56:07: c5:1b:a5:06:0f:b1:a2:97:d2:a0:0d:6a:d4:4b:d2: 13:3e:09:71:7f:47:4c:72:7c:9c:d8:3c:26:a8:43: 98:87:21:5b:fa:b4:92:d1:32:7e:11:15:89:ae:0c: 5b:1a:51:0a:bc:53:d4:56:f2:c2:b0:bf:b7:13:7b: 30:55:b1:f3:9c:dc:00:26:26:01:4c:d4:77:82:a0: e2:60:0b:c7:aa:1a:55:dc:c0:d5:c5:86:d4:26:db: b6:5a:b8:1b:34:5e:2d:24:ea:b6:b4:1e:ad:9c:d9: 08:74:4b:b5:0f:bc:70:6e:17:af:af:37:79:9c:02: 1e:d6:25:7c:7a:0f:17:d4:3d:f6:5b:9c:a8:d1:d8: 53:31:c5:5f:ce:fe:89:a2:a7:66:af:99:cb:98:96: cd:03:2f:eb:db:36:4c:d6:97:af:1f:c5:a0:f3:67: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F6:D8:AF:20:CB:D8:12:50:68:72:94:88:E8:26:23:D0:47:5B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:91:ff:d2:88:a9:f6:bd:d4:24:ea:64:76:fb:9a:37:4c:5a: 98:6f:39:49:f7:df:f0:fb:89:9d:e2:b4:ee:10:26:e7:76:50: 7b:7d:25:84:31:07:1a:34:54:71:1a:3b:c4:79:45:5c:bb:94: eb:de:88:0e:ee:87:b3:41:e7:be:d5:90:55:23:81:2d:6f:49: 68:f1:88:5c:e6:ba:13:15:5f:2f:ce:39:87:fc:e8:ea:3d:2e: 66:e7:52:67:2c:69:4b:4b:2c:1d:a8:53:84:d3:27:a3:df:72: 91:5c:7c:1e:57:1f:60:d0:ba:c7:61:97:63:21:5f:33:eb:6f: af:5b:f8:a4:29:d3:3e:96:f1:df:25:e7:b6:ec:7b:09:10:bf: 6a:9b:0a:da:55:44:84:ed:c3:9b:83:ae:87:44:ad:9f:06:6f: 19:00:39:ff:fd:ab:bf:48:a0:42:07:b7:c1:da:3c:bd:83:5a: 08:8d:ad:07:2d:00:b6:93:fe:fd:ca:61:1b:94:0e:62:b5:af: 9e:24:c8:96:e9:3f:91:ac:ad:dd:f5:73:f7:16:0f:ff:03:f2: ee:a9:e7:54:46:eb:55:6a:87:a9:6f:e2:de:27:3c:03:fb:3b: a2:e6:12:a1:73:a8:ac:80:27:b8:00:a4:7a:37:b8:8c:bd:df: e7:95:70:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqtvUN8W9hwbH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTljYzFmNmQtMTc1NC00ZTg0LThhOWUtZTNjNjkyMWE0OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02HNJxQWmHRg5VFT5hI+m9k0FZjteSM7oaQD CdOZWYX7hkvGvlI0/Uougb16hDsonXbg5BQ0JpJxVMCwWE6KCtv7dak+9QQ+MjIA niGt8KXvHaa7nJ5fVgfFG6UGD7Gil9KgDWrUS9ITPglxf0dMcnyc2DwmqEOYhyFb +rSS0TJ+ERWJrgxbGlEKvFPUVvLCsL+3E3swVbHznNwAJiYBTNR3gqDiYAvHqhpV 3MDVxYbUJtu2WrgbNF4tJOq2tB6tnNkIdEu1D7xwbhevrzd5nAIe1iV8eg8X1D32 W5yo0dhTMcVfzv6Joqdmr5nLmJbNAy/r2zZM1pevH8Wg82eyTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB322K8gy9gSUGhylIjoJiPQR1tVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmQxMjNhOTgtNDg0Ny0z Y2Y1LThmMzMtNzUwOGNkMWQzMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2R/9KIqfa91CTqZHb7mjdMWphvOUn33/D7iZ3itO4QJud2UHt9JYQx Bxo0VHEaO8R5RVy7lOveiA7uh7NB577VkFUjgS1vSWjxiFzmuhMVXy/OOYf86Oo9 LmbnUmcsaUtLLB2oU4TTJ6PfcpFcfB5XH2DQusdhl2MhXzPrb69b+KQp0z6W8d8l 57bsewkQv2qbCtpVRITtw5uDrodErZ8GbxkAOf/9q79IoEIHt8HaPL2DWgiNrQct ALaT/v3KYRuUDmK1r54kyJbpP5Gsrd31c/cWD/8D8u6p51RG61Vqh6lv4t4nPAP7 O6LmEqFzqKyAJ7gApHo3uIy93+eVcI0= -----END CERTIFICATE-----Generated at Sat Sep 26 22:19:33 2026 by rpki-client