$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa File: 39708eac-3243-3a6a-88da-6bc7ae510463.roa (raw, json) Hash identifier: 0cXTI+73O7ixD6NHi7CF1EjH6wq2HCiYLiPZmFrwtBs= Subject key identifier: 44:37:C4:5F:C2:DC:BF:FA:C2:7B:19:52:B2:6C:85:12:FA:E2:68:E9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498AFFEB8A9F429AFC6DE380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.33.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ff:eb:8a:9f:42:9a:fc:6d:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c616a8c-870c-4104-a212-79a7da5ab84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:a5:58:c5:bd:d9:59:14:19:15:80:7a:44: 3c:f7:cb:c7:68:dd:55:a7:a4:5c:6a:f8:c4:f7:82: 49:f7:8f:39:9e:c1:5a:a4:f8:68:08:9c:f3:2b:ff: 0c:5f:12:26:87:d4:e5:4e:7b:3e:7d:b3:00:0b:24: 6e:7e:86:37:1a:8e:e6:15:1b:70:ec:55:b5:33:0f: a1:76:21:20:0f:5c:1f:3f:03:36:9f:69:c0:bf:e2: 3a:a6:9c:ef:1c:3f:da:21:66:05:06:b4:a9:00:8c: 83:16:94:dd:3d:21:82:92:b5:2f:fe:52:f3:1c:1c: 22:7f:99:90:b2:85:d8:9a:bb:e3:c1:90:58:62:32: 2c:17:40:ef:55:73:9e:c3:32:6a:bb:b5:54:6e:7e: b5:46:11:1c:b9:0a:0b:9a:49:d5:0d:18:6d:d8:89: 41:18:dd:51:b0:7a:e5:5f:cb:c6:bf:d6:8a:5f:57: ec:47:d0:6f:36:ac:82:e9:96:4a:b4:c0:a6:67:3f: 87:07:7f:b1:9e:06:9c:0b:3f:88:e9:8c:c3:25:01: 4f:06:0d:f1:84:1e:26:08:a1:fe:d2:30:7c:76:5b: 77:ba:52:99:97:62:9b:26:a1:49:ec:c0:d9:90:1e: 63:1c:55:6f:7a:c0:3c:f1:51:7e:cb:6a:b5:df:b2: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:37:C4:5F:C2:DC:BF:FA:C2:7B:19:52:B2:6C:85:12:FA:E2:68:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e2:68:4d:e7:3f:45:37:80:d1:20:97:7f:eb:8f:8d:23:cf: 44:78:a5:9e:d8:2a:42:55:c5:3a:1e:4e:5a:9f:8d:6d:ad:b5: d6:5a:1e:1b:7a:ca:da:cb:5b:85:73:67:b7:30:a5:5e:4a:06: b5:0c:9a:e3:84:45:48:95:39:cd:86:f0:d4:69:e6:8d:dc:16: 89:76:dd:68:14:09:f2:b3:b3:1a:59:66:77:34:08:ef:12:2c: c0:7f:7b:09:e3:96:1e:92:45:f0:f1:61:90:7e:bf:bd:89:9b: af:32:ed:f3:13:65:11:df:7e:52:a6:bf:08:79:58:cc:88:dd: 0e:ac:91:8d:f6:a6:74:b4:76:ee:eb:12:ed:47:66:0f:2c:c5: c5:54:52:1c:67:a5:af:80:53:30:08:60:ee:67:0a:b4:cb:7f: e2:fd:e8:82:1e:9a:1e:19:20:23:e9:90:27:4f:43:f0:eb:db: 4c:87:9f:67:d0:11:ce:2e:90:5b:14:54:c9:ef:66:f2:cb:16: 84:23:d4:62:2a:fa:ce:1b:3b:fd:b8:9d:1a:b3:0a:32:b0:7f: 87:17:18:19:47:ce:02:32:03:8d:e8:bb:ee:e9:15:cf:2e:96: 18:ab:ef:80:12:69:ce:19:80:ed:84:fc:ce:24:19:8c:f4:83: f2:76:d9:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiv/rip9Cmvxt44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmM2MTZhOGMtODcwYy00MTA0LWEyMTItNzlhN2RhNWFiODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBKlWMW92VkUGRWAekQ898vHaN1Vp6RcavjE 94JJ9485nsFapPhoCJzzK/8MXxImh9TlTns+fbMACyRufoY3Go7mFRtw7FW1Mw+h diEgD1wfPwM2n2nAv+I6ppzvHD/aIWYFBrSpAIyDFpTdPSGCkrUv/lLzHBwif5mQ soXYmrvjwZBYYjIsF0DvVXOewzJqu7VUbn61RhEcuQoLmknVDRht2IlBGN1RsHrl X8vGv9aKX1fsR9BvNqyC6ZZKtMCmZz+HB3+xngacCz+I6YzDJQFPBg3xhB4mCKH+ 0jB8dlt3ulKZl2KbJqFJ7MDZkB5jHFVvesA88VF+y2q137JZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ3xF/C3L/6wnsZUrJshRL64mjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzk3MDhlYWMtMzI0My0z YTZhLTg4ZGEtNmJjN2FlNTEwNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHiaE3nP0U3gNEgl3/rj40jz0R4pZ7YKkJVxToeTlqfjW2ttdZaHht6 ytrLW4VzZ7cwpV5KBrUMmuOERUiVOc2G8NRp5o3cFol23WgUCfKzsxpZZnc0CO8S LMB/ewnjlh6SRfDxYZB+v72Jm68y7fMTZRHfflKmvwh5WMyI3Q6skY32pnS0du7r Eu1HZg8sxcVUUhxnpa+AUzAIYO5nCrTLf+L96IIemh4ZICPpkCdPQ/Dr20yHn2fQ Ec4ukFsUVMnvZvLLFoQj1GIq+s4bO/24nRqzCjKwf4cXGBlHzgIyA43ou+7pFc8u lhir74ASac4ZgO2E/M4kGYz0g/J22bo= -----END CERTIFICATE-----Generated at Fri Oct 2 10:25:14 2026 by rpki-client