$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa File: 8503825e-5495-3576-a211-aae2c1171607.roa (raw, json) Hash identifier: NUVa8evlYwr6rqbSarB26DnD/8iWilIpQtkVutb61m8= Subject key identifier: 18:7F:77:BE:E1:8E:07:93:B8:F5:50:70:36:AA:92:27:5B:EC:C3:E8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4974B22D43CE30457A2093C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.32.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b2:2d:43:ce:30:45:7a:20:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2461a00f-7093-45a2-8b9b-6c8bda452106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:83:40:5c:03:d3:39:ef:64:7b:3d:d6:68: 2b:85:41:74:d6:54:a8:21:0a:ea:48:ab:a3:a2:3e: 5e:1f:4e:2a:ef:5e:f3:99:de:1b:50:ac:ab:43:22: 36:2b:10:cc:b0:9b:24:88:ba:63:60:d8:21:80:67: f0:8e:8c:e4:f2:61:57:e9:21:26:1f:0c:92:8e:ea: b5:bf:e7:6d:39:2e:71:67:66:fd:f8:23:02:3a:be: 7b:62:ce:41:2e:1f:1a:69:04:55:5e:c2:8c:c9:c9: ee:54:69:67:6f:91:d9:6a:12:e3:2c:5d:34:a9:03: 8b:ef:73:88:af:bc:16:47:87:59:d4:7b:37:68:91: 9e:13:8a:08:e8:e2:e7:0f:74:3c:4d:5c:12:2e:7c: 8a:8f:4e:f8:06:48:d2:1c:65:c2:84:6a:f6:e2:7e: 5a:3e:57:00:1a:81:75:53:61:d3:39:81:d4:fb:68: b6:4f:1f:c8:76:a2:d0:3c:5a:19:98:04:0f:da:15: 22:df:b6:2d:e6:3a:d8:38:8a:0c:bc:27:64:82:f1: 5c:59:42:4b:d6:99:28:98:67:aa:97:cd:55:6f:0d: 2d:73:68:2d:98:68:91:8c:bc:2a:aa:84:16:84:4d: 4c:c1:7e:64:cc:40:79:9d:49:f2:4e:50:5b:34:0a: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:77:BE:E1:8E:07:93:B8:F5:50:70:36:AA:92:27:5B:EC:C3:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:ae:9a:c2:9a:92:23:5d:47:f1:6c:df:4f:56:a1:c1:39: 9d:46:b2:ed:a8:4f:ad:e3:d0:5d:cc:fc:da:59:5d:7d:e4:93: ea:55:84:34:7e:4a:aa:57:3b:22:fb:24:f3:4b:96:64:e4:fa: 07:5a:a2:a6:d3:30:f0:91:68:0d:30:cb:d0:17:6b:ad:38:b6: de:94:66:4f:51:2f:0c:ba:df:ac:95:6d:2b:da:fa:70:e0:2e: 4b:df:fb:5d:8b:12:df:a0:d6:e0:e0:4e:a9:29:0c:8d:b7:87: 7f:00:67:03:e9:e8:6c:bd:34:bd:8f:05:93:e0:c6:a3:41:ce: 6d:73:f0:84:8a:23:d7:e6:e7:4e:81:93:e8:7b:02:7e:2c:dd: a5:c5:7a:58:7d:8e:16:c9:47:a7:0c:6e:d9:d2:b0:1e:98:82: 9e:e2:c0:c7:7b:b5:0d:0d:65:8e:44:d1:53:5d:be:b3:2b:ce: e9:da:97:b6:ea:a8:63:01:7b:16:8f:61:ff:9d:1e:bb:4f:e5: 69:d4:e0:b1:85:99:d9:56:ea:70:6e:ae:61:a3:86:ed:8a:a2: 87:06:2f:ec:21:c9:5a:31:fb:a4:45:1d:a0:ab:6f:be:a5:0d: a7:37:9e:c8:e4:15:fd:7d:12:a3:82:78:ca:e4:b5:0f:81:73: 9c:10:a1:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLItQ84wRXogk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjQ2MWEwMGYtNzA5My00NWEyLThiOWItNmM4YmRhNDUyMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMGDQFwD0znvZHs91mgrhUF01lSoIQrqSKuj oj5eH04q717zmd4bUKyrQyI2KxDMsJskiLpjYNghgGfwjozk8mFX6SEmHwySjuq1 v+dtOS5xZ2b9+CMCOr57Ys5BLh8aaQRVXsKMycnuVGlnb5HZahLjLF00qQOL73OI r7wWR4dZ1Hs3aJGeE4oI6OLnD3Q8TVwSLnyKj074BkjSHGXChGr24n5aPlcAGoF1 U2HTOYHU+2i2Tx/IdqLQPFoZmAQP2hUi37Yt5jrYOIoMvCdkgvFcWUJL1pkomGeq l81Vbw0tc2gtmGiRjLwqqoQWhE1MwX5kzEB5nUnyTlBbNAoSkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh/d77hjgeTuPVQcDaqkidb7MPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODUwMzgyNWUtNTQ5NS0z NTc2LWEyMTEtYWFlMmMxMTcxNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUnrprCmpIjXUfxbN9PVqHBOZ1Gsu2oT63j0F3M/NpZXX3kk+pVhDR+ SqpXOyL7JPNLlmTk+gdaoqbTMPCRaA0wy9AXa604tt6UZk9RLwy636yVbSva+nDg Lkvf+12LEt+g1uDgTqkpDI23h38AZwPp6Gy9NL2PBZPgxqNBzm1z8ISKI9fm506B k+h7An4s3aXFelh9jhbJR6cMbtnSsB6Ygp7iwMd7tQ0NZY5E0VNdvrMrzunal7bq qGMBexaPYf+dHrtP5WnU4LGFmdlW6nBurmGjhu2KoocGL+whyVox+6RFHaCrb76l Dac3nsjkFf19EqOCeMrktQ+Bc5wQoVM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:15:36 2026 by rpki-client