$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a98f9f17-2125-3705-b106-325bd721398d.roa File: a98f9f17-2125-3705-b106-325bd721398d.roa (raw, json) Hash identifier: mXxJuP6ul1mzNvgJstiulJVw+Ti/uCXymiYwk24Zd4o= Subject key identifier: CE:75:4C:CD:9E:C7:50:8D:D3:5A:FB:83:DD:02:D5:F9:96:51:6A:85 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4989452118CC7D4D89887740 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a98f9f17-2125-3705-b106-325bd721398d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.38.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:45:21:18:cc:7d:4d:89:88:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a05da767-3403-4dab-800b-94a6f4e20a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:f3:cf:74:6e:87:d8:e5:56:92:e2:63:73: 65:bf:42:e0:48:f4:a4:30:8b:8a:6e:b1:0b:98:c2: 15:71:cc:65:d2:56:26:27:fb:b4:4f:68:21:ee:1e: fd:c0:ac:2f:71:75:c6:b3:32:6e:1a:4b:74:86:f8: 11:ee:2c:9b:4c:f1:83:70:04:52:8e:17:55:22:e6: d4:c8:3c:79:6c:07:b4:cc:82:3d:e0:e2:be:3f:05: 15:23:0c:9b:01:32:a5:b8:8e:32:28:4e:b6:ad:d7: c4:70:60:c9:59:3d:72:66:f9:b0:70:71:36:b4:a9: ee:d7:94:ea:57:ef:85:74:6d:05:41:fb:4e:fc:6d: a4:ce:be:c0:f3:3f:f1:eb:7a:f3:09:9f:8a:ca:4c: 50:66:27:64:af:e3:02:2f:d7:90:dd:f6:98:75:46: 3a:55:1a:15:5a:8f:d2:b6:2a:9d:ad:16:65:ea:f5: 08:41:c1:96:29:70:38:f8:e0:1b:87:f1:86:e2:8d: 33:d0:cc:88:5c:6a:1c:a5:87:27:f9:69:42:2a:09: 60:a6:fc:7e:09:d3:8c:a3:c9:ad:a7:6d:2f:7b:33: e8:fa:25:67:09:fc:85:2d:3a:02:ff:89:b5:61:df: 0f:82:4a:9a:dc:f9:11:3f:5d:82:d9:a9:46:99:09: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:75:4C:CD:9E:C7:50:8D:D3:5A:FB:83:DD:02:D5:F9:96:51:6A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a98f9f17-2125-3705-b106-325bd721398d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4b:27:3e:ea:14:6a:78:49:b4:da:28:8d:37:8e:cf:c6:66: 58:da:d7:43:73:f2:2e:bd:14:1f:8b:9b:0e:43:15:83:9e:aa: 28:3f:78:9e:81:b1:5f:33:aa:aa:3e:00:75:26:38:62:3a:04: 66:44:4a:a6:07:ca:a0:f9:fa:07:fb:2f:a5:c0:89:60:4f:11: 27:e8:db:93:ca:76:cb:fc:41:84:dd:f8:10:7f:cc:cf:22:77: bc:cf:cf:0d:df:eb:44:f9:ef:3e:5b:f1:57:52:f9:39:bb:2b: 65:d6:13:c2:8a:1b:3c:62:dc:19:bb:c7:8b:60:e5:fb:b6:74: d8:da:6b:5f:a0:f4:9f:6f:13:43:1f:64:0d:b8:7a:f7:91:d1: c6:6b:05:ac:04:eb:43:11:ed:0a:28:e3:68:0b:aa:b5:22:0d: a1:eb:2f:e7:cc:5b:42:e1:a8:11:40:58:95:df:5e:af:f4:9d: 07:c0:ed:6c:05:d6:77:60:d7:63:65:a6:3a:2e:9d:30:43:99: 93:04:5c:59:f5:0b:53:f5:1a:66:6e:55:06:25:d3:dd:43:04: 95:c3:c2:ba:a5:a0:b2:e1:2a:19:23:ed:ad:ed:8d:d6:e3:da: 54:cb:9f:d6:42:db:d3:25:d3:e7:8c:7a:70:44:2b:ab:a5:63: e8:be:be:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiUUhGMx9TYmId0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTA1ZGE3NjctMzQwMy00ZGFiLTgwMGItOTRhNmY0ZTIwYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5vzz3Ruh9jlVpLiY3Nlv0LgSPSkMIuKbrEL mMIVccxl0lYmJ/u0T2gh7h79wKwvcXXGszJuGkt0hvgR7iybTPGDcARSjhdVIubU yDx5bAe0zII94OK+PwUVIwybATKluI4yKE62rdfEcGDJWT1yZvmwcHE2tKnu15Tq V++FdG0FQftO/G2kzr7A8z/x63rzCZ+KykxQZidkr+MCL9eQ3faYdUY6VRoVWo/S tiqdrRZl6vUIQcGWKXA4+OAbh/GG4o0z0MyIXGocpYcn+WlCKglgpvx+CdOMo8mt p20vezPo+iVnCfyFLToC/4m1Yd8Pgkqa3PkRP12C2alGmQkcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM51TM2ex1CN01r7g90C1fmWUWqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTk4ZjlmMTctMjEyNS0z NzA1LWIxMDYtMzI1YmQ3MjEzOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdLJz7qFGp4SbTaKI03js/GZlja10Nz8i69FB+Lmw5DFYOeqig/eJ6B sV8zqqo+AHUmOGI6BGZESqYHyqD5+gf7L6XAiWBPESfo25PKdsv8QYTd+BB/zM8i d7zPzw3f60T57z5b8VdS+Tm7K2XWE8KKGzxi3Bm7x4tg5fu2dNjaa1+g9J9vE0Mf ZA24eveR0cZrBawE60MR7Qoo42gLqrUiDaHrL+fMW0LhqBFAWJXfXq/0nQfA7WwF 1ndg12NlpjounTBDmZMEXFn1C1P1GmZuVQYl091DBJXDwrqloLLhKhkj7a3tjdbj 2lTLn9ZC29Ml0+eMenBEK6ulY+i+vlQ= -----END CERTIFICATE-----Generated at Sun Oct 4 08:09:52 2026 by rpki-client