$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa File: 43bc24c4-e6e1-3452-a132-895a65997e92.roa (raw, json) Hash identifier: f4dI+UTEMnzzSNDEJmUyH2QDJhP/rW2QWeNRKU9j1Po= Subject key identifier: 8A:BC:5D:5C:9C:36:9D:F3:71:22:D9:BB:3B:6C:94:DC:BF:4B:97:F1 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F497482620420B4CCA07EF33C Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.49.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:82:62:04:20:b4:cc:a0:7e:f3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e092bf2-5f43-4808-a023-334fbfa22669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:7e:b2:e8:17:7f:5c:26:58:6a:4a:e9:e4: 99:e4:78:9a:ec:17:e7:fe:8d:53:11:cb:a3:13:84: 9d:65:92:46:60:a4:00:5f:32:1b:10:3d:55:42:93: 44:ed:10:b6:8c:72:26:8b:f6:47:2c:03:db:e8:99: b4:2a:9d:4b:61:06:c9:20:66:73:7e:f5:46:5f:41: d5:2d:27:0c:de:2a:e0:84:82:c4:20:78:6e:8c:a8: bd:67:da:8f:eb:6f:84:6f:32:ac:80:44:7d:e3:a4: e5:16:e7:96:b0:bc:03:b0:48:52:0e:67:5d:9c:b7: d7:74:5d:40:9b:4d:68:bb:0b:78:33:44:72:51:05: 99:a7:2f:be:d8:6b:76:78:c5:ba:45:0f:ec:c3:cd: a7:fe:eb:ec:17:4f:d1:a3:6b:6f:0c:4f:2c:95:c0: 87:9e:90:a9:54:13:61:79:ad:04:8f:47:69:96:9f: 86:53:3d:75:6f:bb:59:39:86:55:5d:bc:81:a5:22: 4b:2c:a2:af:cf:ec:3d:50:6e:36:d9:34:06:bf:d5: bf:a9:7a:a3:17:60:35:81:93:e6:f1:ed:ca:a9:7f: 1c:99:2f:26:a1:e4:d8:ef:36:77:58:87:01:c8:bd: 71:cc:a8:ea:f5:15:57:11:66:3d:aa:b8:50:f2:90: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:5D:5C:9C:36:9D:F3:71:22:D9:BB:3B:6C:94:DC:BF:4B:97:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ab:c7:2a:93:68:32:d1:77:7c:97:dc:40:4e:6a:43:43:e0: 4c:a5:08:f0:10:08:43:b6:86:3e:94:84:ca:b0:b9:3a:7a:a4: eb:14:d5:67:d2:bd:59:c5:f9:08:b5:7d:a9:61:2b:bd:9a:f0: 94:95:4c:95:b1:df:e4:38:96:32:d8:9f:31:6b:1c:2f:44:03: 10:2c:fe:13:ae:e4:b6:ec:87:a4:7e:e0:ce:8b:cf:dd:61:55: 23:ca:f6:5d:2f:f8:e8:c0:68:de:50:32:17:18:af:eb:81:a9: 42:ea:e6:fd:5a:aa:54:b2:04:5b:c9:6f:9a:40:e1:7e:97:c1: da:2a:a8:c7:04:80:f2:df:6d:2c:cd:47:de:f8:aa:f0:57:6f: f2:75:d9:8e:94:eb:0a:a6:4f:2c:8d:06:ef:ab:62:67:cb:17: c1:e5:e2:89:80:5b:36:d2:d1:96:dd:44:02:12:c2:02:7d:f9: bc:42:aa:28:20:b1:90:05:c1:50:02:94:2a:a3:76:0d:f1:82: 34:96:2f:b0:57:16:50:2a:85:43:0a:77:c1:f6:1b:9e:1a:ec: dd:ef:3c:c5:61:d7:c3:d1:97:01:a2:c1:f4:d5:32:78:c9:4c: b4:f3:86:4c:7f:f6:fb:80:ca:bb:23:1d:e4:01:3b:14:eb:f8: 5d:4b:b4:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIJiBCC0zKB+8zwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGUwOTJiZjItNWY0My00ODA4LWEwMjMtMzM0ZmJmYTIyNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg15+sugXf1wmWGpK6eSZ5Hia7Bfn/o1TEcuj E4SdZZJGYKQAXzIbED1VQpNE7RC2jHImi/ZHLAPb6Jm0Kp1LYQbJIGZzfvVGX0HV LScM3irghILEIHhujKi9Z9qP62+EbzKsgER946TlFueWsLwDsEhSDmddnLfXdF1A m01ouwt4M0RyUQWZpy++2Gt2eMW6RQ/sw82n/uvsF0/Ro2tvDE8slcCHnpCpVBNh ea0Ej0dplp+GUz11b7tZOYZVXbyBpSJLLKKvz+w9UG422TQGv9W/qXqjF2A1gZPm 8e3KqX8cmS8moeTY7zZ3WIcByL1xzKjq9RVXEWY9qrhQ8pCZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq8XVycNp3zcSLZuztslNy/S5fxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDNiYzI0YzQtZTZlMS0z NDUyLWExMzItODk1YTY1OTk3ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmrxyqTaDLRd3yX3EBOakND4EylCPAQCEO2hj6UhMqwuTp6pOsU1WfS vVnF+Qi1falhK72a8JSVTJWx3+Q4ljLYnzFrHC9EAxAs/hOu5Lbsh6R+4M6Lz91h VSPK9l0v+OjAaN5QMhcYr+uBqULq5v1aqlSyBFvJb5pA4X6XwdoqqMcEgPLfbSzN R974qvBXb/J12Y6U6wqmTyyNBu+rYmfLF8Hl4omAWzbS0ZbdRAISwgJ9+bxCqigg sZAFwVAClCqjdg3xgjSWL7BXFlAqhUMKd8H2G54a7N3vPMVh18PRlwGiwfTVMnjJ TLTzhkx/9vuAyrsjHeQBOxTr+F1LtIo= -----END CERTIFICATE-----Generated at Sat Sep 26 08:19:46 2026 by rpki-client