$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa File: 4923fab5-423d-3396-8261-8c9f4af962e5.roa (raw, json) Hash identifier: uVUqbTFh8Uo8YheHB4ykG8TZVdnrxWpRsMTW0bUXV4s= Subject key identifier: 51:F8:C1:B5:F4:47:6E:D7:E8:63:83:A4:78:CD:06:20:A8:E9:E7:07 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49741FC60428A77935964BC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.35.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1f:c6:04:28:a7:79:35:96:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce0dcc11-42cd-4632-af75-50b60a50486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:4a:ee:8f:d2:12:b2:f0:59:73:f3:af:d5: 42:55:3f:06:81:cd:9d:3b:9c:12:81:0c:5d:93:04: 2a:de:56:c1:9d:d9:1a:fa:75:14:1c:b0:45:49:c1: 45:07:95:d6:78:9f:be:a1:cc:c4:2b:09:80:7c:a8: b3:43:13:ab:68:a5:47:53:ae:da:fb:30:bd:f4:e1: d4:78:50:48:35:02:ab:c9:09:f0:c6:90:73:65:06: 87:50:7a:28:60:3d:7e:1c:e1:41:54:3e:ec:c5:7f: 7f:ce:37:13:65:11:78:3e:ea:49:fa:e8:67:82:73: b6:39:66:90:8c:df:f4:d0:c7:00:73:b4:a9:d2:95: 37:d0:5c:d5:64:33:5e:a5:e0:20:71:fd:44:a2:72: 4a:c0:52:ef:c7:a2:14:09:8a:f0:83:45:0b:4d:62: 0b:61:e6:eb:1a:69:e3:94:53:21:c2:72:b3:40:09: c3:42:62:06:87:8f:1f:b7:d9:08:bf:27:ca:d2:2d: a8:74:89:b5:72:eb:a3:c5:98:2a:58:f3:b3:07:77: 32:a5:ea:ed:f9:7c:cf:31:36:81:0b:cf:ba:22:8a: a4:b1:04:b4:a0:ac:03:43:c2:eb:1b:93:ba:aa:42: 75:b9:15:93:93:39:00:2b:4a:29:ee:9f:fd:6b:dc: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F8:C1:B5:F4:47:6E:D7:E8:63:83:A4:78:CD:06:20:A8:E9:E7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:6d:4e:e8:71:be:9b:6a:f9:80:6a:d5:f9:e6:11:7c:96:a2: 97:81:0f:3e:a8:68:d4:10:28:71:c4:6b:c0:37:84:0a:3a:50: d9:84:98:ab:1a:ed:95:fc:1a:9d:31:b8:60:9f:e3:67:ad:4f: ec:a1:cf:ac:c5:31:ec:28:48:70:bc:06:d4:28:09:ff:4b:c4: 9e:49:b1:8e:99:20:70:b6:5e:3f:3b:65:e8:ae:f7:1f:61:cf: 6f:3c:52:b3:8f:a8:66:06:42:30:b6:f8:ff:f0:32:f7:bb:92: 70:4b:18:a5:d2:38:46:b3:dc:38:00:8b:ee:a6:88:be:08:a6: ee:68:ae:4a:15:80:de:77:a4:02:79:e5:ec:28:e3:af:b5:ef: ce:9a:4c:27:d0:02:cc:c2:cc:48:88:90:44:bd:8f:f2:65:ab: 44:68:fd:3d:cb:08:03:87:80:a7:bd:b7:bd:11:b7:7f:37:4f: a5:a9:4f:0c:ec:80:4f:a7:ac:e4:71:e8:8d:53:13:c1:73:b7: 1b:dd:47:e1:6b:6d:d8:a1:d3:f8:75:64:ab:0f:0f:b5:69:62: 8f:ab:c6:99:11:c5:23:26:b1:b0:64:f7:d2:27:e7:3d:39:ab: b6:08:29:d2:a7:80:1a:53:41:54:24:df:48:10:55:28:f9:78: f4:4b:d8:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdB/GBCineTWWS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2UwZGNjMTEtNDJjZC00NjMyLWFmNzUtNTBiNjBhNTA0ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKhK7o/SErLwWXPzr9VCVT8Ggc2dO5wSgQxd kwQq3lbBndka+nUUHLBFScFFB5XWeJ++oczEKwmAfKizQxOraKVHU67a+zC99OHU eFBINQKryQnwxpBzZQaHUHooYD1+HOFBVD7sxX9/zjcTZRF4PupJ+uhngnO2OWaQ jN/00McAc7Sp0pU30FzVZDNepeAgcf1EonJKwFLvx6IUCYrwg0ULTWILYebrGmnj lFMhwnKzQAnDQmIGh48ft9kIvyfK0i2odIm1cuujxZgqWPOzB3cypert+XzPMTaB C8+6IoqksQS0oKwDQ8LrG5O6qkJ1uRWTkzkAK0op7p/9a9xROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFH4wbX0R27X6GODpHjNBiCo6ecHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDkyM2ZhYjUtNDIzZC0z Mzk2LTgyNjEtOGM5ZjRhZjk2MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBtTuhxvptq+YBq1fnmEXyWopeBDz6oaNQQKHHEa8A3hAo6UNmEmKsa 7ZX8Gp0xuGCf42etT+yhz6zFMewoSHC8BtQoCf9LxJ5JsY6ZIHC2Xj87Zeiu9x9h z288UrOPqGYGQjC2+P/wMve7knBLGKXSOEaz3DgAi+6miL4Ipu5orkoVgN53pAJ5 5ewo46+1786aTCfQAszCzEiIkES9j/Jlq0Ro/T3LCAOHgKe9t70Rt383T6WpTwzs gE+nrORx6I1TE8FztxvdR+Frbdih0/h1ZKsPD7VpYo+rxpkRxSMmsbBk99In5z05 q7YIKdKngBpTQVQk30gQVSj5ePRL2PM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:35:57 2026 by rpki-client