$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa File: 40ff31f9-bb55-3743-9e6e-0ed497625978.roa (raw, json) Hash identifier: JAm5NmhmOp4rpm/0FbSdTK46R2tbxuju+uftGZMIUUc= Subject key identifier: C1:40:1C:14:CD:03:77:D8:B2:11:CE:D2:D8:F6:C0:D9:C4:9F:7F:F1 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4974C143B774317B775EAD40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.36.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c1:43:b7:74:31:7b:77:5e:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f6964acd-2669-4ecc-8a2b-0326dc574980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:c4:49:fd:15:47:de:2a:a0:a6:00:5b:8e: 66:e8:8c:cd:2b:45:35:58:14:f0:84:1a:58:7e:f2: 36:a1:4b:d0:ec:7b:a9:e8:6a:2f:95:6b:0e:04:89: 25:13:f8:66:3f:00:fe:f1:40:b8:63:22:f6:e2:3e: 4b:5c:46:13:26:92:33:1d:a4:25:7f:39:18:89:bf: 51:ee:61:c9:37:2a:73:86:ce:e9:c0:50:08:b9:f3: 4a:06:96:bc:98:ad:d3:fa:73:80:e4:66:b8:81:da: 9c:51:c1:95:e0:58:77:ec:f2:70:70:85:80:8c:43: ab:f9:d9:c0:c2:83:86:f5:14:d0:64:f9:e5:1d:ae: 2f:94:46:48:c3:55:f2:b3:d1:62:08:72:76:23:2e: 8a:a1:a6:b8:fb:12:ff:f4:2c:49:4c:27:af:7f:6b: 8b:92:97:34:aa:99:d8:e0:ce:3b:b4:39:91:7c:63: 0b:d0:f1:e5:df:cd:94:db:9f:06:67:1a:c5:b0:87: 58:fb:86:3b:e5:3e:19:c9:42:1a:f2:c5:dc:28:ac: fe:45:c3:fd:d0:b1:b6:bb:ed:93:50:3e:d5:5c:de: b5:14:df:36:c2:b0:01:1a:7b:37:32:23:de:12:5e: dc:cc:97:da:9c:68:39:88:90:05:20:82:25:b2:f4: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:1C:14:CD:03:77:D8:B2:11:CE:D2:D8:F6:C0:D9:C4:9F:7F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:be:2e:4a:bd:77:36:a0:f6:39:2f:8a:69:de:62:0b:2b:bc: d7:d7:25:22:8a:99:45:ae:8b:f4:ce:c0:ba:06:84:cf:3d:d1: d1:e1:0e:f5:44:e5:8e:8b:6e:87:9c:be:9b:1b:03:93:69:92: d6:04:38:75:65:1b:69:bb:3a:0c:17:ea:3b:84:c8:67:95:20: 21:82:a4:19:29:f0:95:66:b1:ea:8c:d7:30:2e:51:59:cc:d9: 84:7c:11:f5:63:4b:51:e1:9e:44:22:8f:fc:b0:34:b0:cc:67: c6:db:37:c6:7e:c3:4a:ca:8a:b4:1b:7d:53:4f:b2:3a:2a:4a: c7:b0:e3:66:10:a0:e3:dc:56:36:2e:39:b7:5c:4c:4c:20:4a: 6a:d6:c7:e7:be:f6:ca:a5:4b:c8:e8:1e:8f:0b:1b:58:a9:4b: cf:1d:81:76:f0:65:6e:3d:f4:fd:b9:18:f6:a6:68:c5:3b:cb: 82:d5:3b:2d:8d:b3:b8:d3:42:30:1b:c9:64:cb:29:f8:b9:d3: 96:cd:6b:7f:f9:06:92:3e:d6:1e:89:c8:70:06:9c:ae:c3:f3: cc:f5:f1:df:a7:61:bf:ad:52:da:85:78:b4:64:23:79:81:8f: 3f:db:08:2b:45:54:cc:00:0d:f3:0c:e6:08:05:78:9c:94:f4: 84:08:64:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMFDt3Qxe3derUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY5NjRhY2QtMjY2OS00ZWNjLThhMmItMDMyNmRjNTc0OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8LESf0VR94qoKYAW45m6IzNK0U1WBTwhBpY fvI2oUvQ7Hup6GovlWsOBIklE/hmPwD+8UC4YyL24j5LXEYTJpIzHaQlfzkYib9R 7mHJNypzhs7pwFAIufNKBpa8mK3T+nOA5Ga4gdqcUcGV4Fh37PJwcIWAjEOr+dnA woOG9RTQZPnlHa4vlEZIw1Xys9FiCHJ2Iy6Koaa4+xL/9CxJTCevf2uLkpc0qpnY 4M47tDmRfGML0PHl382U258GZxrFsIdY+4Y75T4ZyUIa8sXcKKz+RcP90LG2u+2T UD7VXN61FN82wrABGns3MiPeEl7czJfanGg5iJAFIIIlsvSdAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFAHBTNA3fYshHO0tj2wNnEn3/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDBmZjMxZjktYmI1NS0z NzQzLTllNmUtMGVkNDk3NjI1OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa+Lkq9dzag9jkvimneYgsrvNfXJSKKmUWui/TOwLoGhM890dHhDvVE 5Y6LboecvpsbA5NpktYEOHVlG2m7OgwX6juEyGeVICGCpBkp8JVmseqM1zAuUVnM 2YR8EfVjS1HhnkQij/ywNLDMZ8bbN8Z+w0rKirQbfVNPsjoqSsew42YQoOPcVjYu ObdcTEwgSmrWx+e+9sqlS8joHo8LG1ipS88dgXbwZW499P25GPamaMU7y4LVOy2N s7jTQjAbyWTLKfi505bNa3/5BpI+1h6JyHAGnK7D88z18d+nYb+tUtqFeLRkI3mB jz/bCCtFVMwADfMM5ggFeJyU9IQIZJY= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:37 2026 by rpki-client