$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa File: a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa (raw, json) Hash identifier: 5WEAaHqRD+FXMIqVvLgb/mF0mkhy4FSmNsLj+fWkeSw= Subject key identifier: 9C:17:8F:B0:C8:16:E1:AD:3B:95:46:90:2A:5D:3A:5D:C5:91:BE:8B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49890879BA8BB7459749EB80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.42.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:08:79:ba:8b:b7:45:97:49:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=108740fb-faac-4cae-8065-dabe9443ee18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:2d:c1:a2:eb:15:95:be:5e:41:16:27:e5: f9:e6:87:42:b0:a6:b1:e8:9b:33:33:5d:f8:68:5a: 77:c3:0a:2f:85:61:5d:8a:2b:51:bd:eb:e8:28:e7: a5:64:38:24:28:dd:48:48:3b:3e:4a:ea:a5:f1:7e: 77:87:cc:23:d4:9a:dc:6d:2d:b5:a4:cf:dd:b0:b8: d0:79:5c:0c:d1:a7:3e:af:7a:af:d2:54:9a:ff:2a: f8:79:03:f4:a4:5c:cb:0d:55:dc:8c:a9:5d:c3:03: 04:3a:bd:07:ac:50:92:b7:8c:82:35:cb:c0:ca:fc: 58:a8:be:4b:c3:db:ea:6f:fa:56:1e:6e:e8:36:64: ab:d2:bb:14:14:26:df:fb:17:dc:bd:7e:ed:07:d4: 24:74:f9:37:02:11:42:74:30:38:07:5e:dc:0d:95: 3f:7d:93:18:2b:6a:00:9f:51:ec:af:11:da:a6:71: ff:f1:49:58:74:6c:70:f6:91:51:e6:e0:35:fe:17: 5e:02:ed:fe:07:60:39:a6:4a:4e:21:d9:d3:e1:4d: 90:fb:10:3a:be:42:12:d0:9b:9a:93:97:29:fb:9b: fd:30:31:b5:1a:32:eb:8a:a0:78:6e:85:f7:48:55: 13:5f:49:b6:e2:0e:25:72:36:1d:e4:e5:13:bc:da: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:8F:B0:C8:16:E1:AD:3B:95:46:90:2A:5D:3A:5D:C5:91:BE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.42.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:91:e2:c3:fb:af:0e:41:22:3f:ab:b9:b1:07:21:d1:9f:e5: d3:96:f4:0d:7d:06:06:35:8a:2c:b5:cf:b5:b1:c1:21:34:e9: a6:fb:3c:f7:fd:94:0c:0e:3d:83:f7:be:89:67:09:30:ad:80: a4:61:81:3c:46:9a:2a:7e:6f:93:93:1f:90:fa:12:a6:e1:79: 8e:25:54:30:dc:eb:6a:cb:5d:59:ac:22:5f:80:25:83:64:63: da:56:bf:46:36:c0:88:58:71:6a:9c:bd:83:39:e2:c5:c4:9d: 27:35:0a:72:2b:14:7d:61:4f:62:81:de:2d:b7:23:10:2c:4e: d1:d1:46:79:37:e6:a8:a2:83:38:73:3e:5b:e0:d6:7c:12:6d: a8:a2:f5:91:99:40:99:37:fd:7c:e0:91:3a:b2:1c:d5:90:45: c0:fa:5b:23:06:8f:c6:e6:f3:0c:16:db:98:30:9d:c6:6b:4a: ff:f6:5f:19:52:e1:46:4c:d4:17:e9:b1:df:d8:6e:c1:d3:25: 43:df:76:da:d7:4d:fd:3c:eb:8a:88:53:ac:ff:1c:a8:80:da: d1:59:12:6b:5b:e0:55:74:87:08:d2:b1:44:4f:94:5e:75:53: a4:ef:2f:4a:85:eb:52:cd:8d:4c:e9:56:13:47:46:b5:0e:41: 7c:0f:e2:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQh5uou3RZdJ64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTA4NzQwZmItZmFhYy00Y2FlLTgwNjUtZGFiZTk0NDNlZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sItwaLrFZW+XkEWJ+X55odCsKax6JszM134 aFp3wwovhWFdiitRvevoKOelZDgkKN1ISDs+Suql8X53h8wj1JrcbS21pM/dsLjQ eVwM0ac+r3qv0lSa/yr4eQP0pFzLDVXcjKldwwMEOr0HrFCSt4yCNcvAyvxYqL5L w9vqb/pWHm7oNmSr0rsUFCbf+xfcvX7tB9QkdPk3AhFCdDA4B17cDZU/fZMYK2oA n1HsrxHapnH/8UlYdGxw9pFR5uA1/hdeAu3+B2A5pkpOIdnT4U2Q+xA6vkIS0Jua k5cp+5v9MDG1GjLriqB4boX3SFUTX0m24g4lcjYd5OUTvNo1MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwXj7DIFuGtO5VGkCpdOl3Fkb6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTRjOWZjMWUtMGQ3ZC0z YjNjLTg0NDMtNjRlMWU4ODMyZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiCoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOR4sP7rw5BIj+rubEHIdGf5dOW9A19BgY1iiy1z7WxwSE06ab7PPf9 lAwOPYP3volnCTCtgKRhgTxGmip+b5OTH5D6EqbheY4lVDDc62rLXVmsIl+AJYNk Y9pWv0Y2wIhYcWqcvYM54sXEnSc1CnIrFH1hT2KB3i23IxAsTtHRRnk35qiigzhz Plvg1nwSbaii9ZGZQJk3/XzgkTqyHNWQRcD6WyMGj8bm8wwW25gwncZrSv/2XxlS 4UZM1Bfpsd/YbsHTJUPfdtrXTf0864qIU6z/HKiA2tFZEmtb4FV0hwjSsURPlF51 U6TvL0qF61LNjUzpVhNHRrUOQXwP4o4= -----END CERTIFICATE-----Generated at Fri Sep 25 14:59:10 2026 by rpki-client