$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa File: 6670bff5-6620-3e34-b318-bedb1d01093f.roa (raw, json) Hash identifier: bKOEk92b+bTKFBV1mnEHnfGwiXa5ODFjZTtbgUi83PA= Subject key identifier: CF:8E:4F:43:4B:C8:AC:E3:AA:7F:06:C6:25:C0:0E:23:26:9B:11:ED Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4987155AD901C5801F8BAE80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.52.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:15:5a:d9:01:c5:80:1f:8b:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d3824c29-9870-4c14-9dab-cad9c93e2c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:f6:bb:26:08:3e:28:71:2e:d2:65:04:72: d5:e2:34:2a:31:a7:f6:b6:07:1b:06:40:08:09:50: c0:fa:15:f2:e9:19:cd:42:fa:ea:4a:9c:21:bf:04: 95:73:fe:43:f3:3c:1b:b2:82:17:ef:21:48:19:76: ea:c2:e6:8a:06:05:35:b8:28:48:1f:82:ec:4b:32: dd:0b:27:25:94:f9:3b:b5:ba:fd:5b:47:f7:e8:06: ee:e3:60:7f:a5:88:4c:05:56:ef:f6:ea:ca:cd:7a: 92:bc:53:5e:13:37:e3:10:e1:b7:81:8c:01:95:8c: 91:c5:0b:c3:bd:be:bf:7d:be:98:ef:cf:75:c0:d2: 9f:67:53:76:83:f6:0c:36:0e:9a:a7:ce:fb:75:bd: bc:16:6b:f1:ac:35:41:12:91:7f:de:1c:4f:3f:0a: 4b:6b:a7:3a:e4:04:6e:3e:77:4d:bf:bb:87:e3:f4: d0:23:c1:88:13:1a:95:cc:98:86:9d:7c:94:dd:23: a7:2d:ea:3a:ab:38:7e:7a:b4:2d:42:56:4c:0c:15: 75:78:79:7a:48:6a:67:f9:c1:26:03:f7:c0:8e:ec: aa:a1:95:5c:7a:69:59:1b:01:9e:09:dc:50:c8:b5: 7b:87:fe:3a:43:62:b5:3e:71:cc:4f:ae:69:c0:6c: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:4F:43:4B:C8:AC:E3:AA:7F:06:C6:25:C0:0E:23:26:9B:11:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b6:74:1e:c4:bd:af:d8:2a:d6:84:34:df:fe:a3:4d:f3:56: 71:7d:d8:ed:62:38:59:68:34:c0:7e:ba:6e:08:c9:38:a3:01: 6e:ca:92:56:bf:15:e9:ce:61:6e:bf:87:01:fe:fe:51:df:66: dd:f2:c2:d2:59:2e:13:b1:1d:4a:19:35:b4:34:b2:01:d5:6b: ca:56:4c:0a:f4:78:82:57:68:c2:26:63:4e:bd:63:33:82:ba: 92:d3:7c:1a:56:8e:35:5e:ae:b7:e3:4f:b5:d6:96:51:a8:99: d0:fb:4c:e0:d3:42:a4:c9:04:c0:24:99:82:79:7a:1e:3f:8b: 83:e6:88:10:87:c7:bf:4a:f9:32:3d:17:32:ec:d8:5c:65:ff: 21:d0:9b:9d:1e:d9:e9:6d:35:6f:51:de:12:3d:13:31:7d:a6: 0d:6c:85:c7:1b:3d:f2:ed:7c:2f:b0:28:eb:d1:4f:56:02:81: 87:37:b8:b9:d7:25:b5:11:03:e1:b7:07:06:51:52:37:a9:50: 04:e5:9d:85:d8:b9:e7:a4:0b:89:0c:91:67:8a:8e:0d:09:9b: df:a6:45:40:80:ef:a6:60:2a:d6:ea:2e:96:0c:e6:e8:7f:27: 35:d3:73:0d:1f:dd:06:7e:d9:ad:d8:25:03:09:b3:f7:6c:83: c3:4d:9f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhxVa2QHFgB+LroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDM4MjRjMjktOTg3MC00YzE0LTlkYWItY2FkOWM5M2UyYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7n2uyYIPihxLtJlBHLV4jQqMaf2tgcbBkAI CVDA+hXy6RnNQvrqSpwhvwSVc/5D8zwbsoIX7yFIGXbqwuaKBgU1uChIH4LsSzLd CycllPk7tbr9W0f36Abu42B/pYhMBVbv9urKzXqSvFNeEzfjEOG3gYwBlYyRxQvD vb6/fb6Y7891wNKfZ1N2g/YMNg6ap877db28FmvxrDVBEpF/3hxPPwpLa6c65ARu PndNv7uH4/TQI8GIExqVzJiGnXyU3SOnLeo6qzh+erQtQlZMDBV1eHl6SGpn+cEm A/fAjuyqoZVcemlZGwGeCdxQyLV7h/46Q2K1PnHMT65pwGx6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+OT0NLyKzjqn8GxiXADiMmmxHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjY3MGJmZjUtNjYyMC0z ZTM0LWIzMTgtYmVkYjFkMDEwOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC2dB7Eva/YKtaENN/+o03zVnF92O1iOFloNMB+um4IyTijAW7Kkla/ FenOYW6/hwH+/lHfZt3ywtJZLhOxHUoZNbQ0sgHVa8pWTAr0eIJXaMImY069YzOC upLTfBpWjjVerrfjT7XWllGomdD7TODTQqTJBMAkmYJ5eh4/i4PmiBCHx79K+TI9 FzLs2Fxl/yHQm50e2eltNW9R3hI9EzF9pg1shccbPfLtfC+wKOvRT1YCgYc3uLnX JbURA+G3BwZRUjepUATlnYXYueekC4kMkWeKjg0Jm9+mRUCA76ZgKtbqLpYM5uh/ JzXTcw0f3QZ+2a3YJQMJs/dsg8NNn3Q= -----END CERTIFICATE-----Generated at Thu Oct 8 19:35:33 2026 by rpki-client