$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa File: b968a0f5-a9a4-37a1-ae22-297830d659f3.roa (raw, json) Hash identifier: VRzJ/Z7EJz+ZcDwhVkT8EH7+7dGG2j4OA4JkhJCWr+Y= Subject key identifier: 9E:91:59:E8:EC:6F:66:B6:12:63:9B:E7:44:04:BB:EF:A2:B0:F7:F3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498AF44796BC9BE275B246C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:f4:47:96:bc:9b:e2:75:b2:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02982d41-9704-462b-8094-8dbd4cf01ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:7d:95:48:ce:5e:8b:74:7b:54:b0:66:8e: 24:ed:43:f4:ec:aa:21:49:eb:1d:24:b4:da:e3:de: d9:a0:fa:f9:17:c0:09:6d:89:4b:20:95:2a:ed:63: 8b:bd:4f:a7:82:ee:29:d3:97:c2:76:ac:fa:91:2c: 8a:59:23:c6:f8:8b:ea:c9:bf:0a:35:25:57:38:24: 9d:fd:33:a5:5e:90:b4:6d:c4:13:dc:59:96:bc:58: e6:88:dc:bf:61:f6:8e:ea:01:82:4e:a0:47:df:5d: b5:c8:b2:17:b9:9d:86:2e:0c:94:81:c4:f3:fb:42: 8f:7c:04:f0:22:78:e5:bd:09:1c:b9:72:b0:bd:ea: 2d:bf:5d:fe:67:62:f8:95:9d:5d:00:87:7a:e4:17: 11:70:3f:e3:7e:71:67:5c:db:29:0e:ea:5d:27:80: 69:60:fa:06:51:9d:21:0d:45:7c:46:f2:99:84:ed: 97:33:34:ed:03:c2:3d:9c:26:6c:40:62:3c:01:3a: 61:6e:fd:ad:70:36:64:d0:8f:43:33:e3:c0:cc:c5: 17:a5:49:52:ff:3e:f3:31:eb:92:c3:b8:8c:ee:73: ac:88:6b:f3:6e:ee:74:4a:3d:56:cc:26:7f:ec:5c: cc:30:49:12:b2:99:38:d2:20:c6:f5:74:71:83:03: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:91:59:E8:EC:6F:66:B6:12:63:9B:E7:44:04:BB:EF:A2:B0:F7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e1:f1:33:76:04:3f:cc:f2:86:65:68:f3:be:e3:8f:ab:0b: 8a:8f:b2:01:1c:40:d4:22:e9:a1:88:27:10:a4:b6:28:0c:33: 08:ba:3f:5c:1e:a3:68:36:d2:9b:e7:e5:da:02:a4:fa:43:46: 15:d0:c3:a9:26:17:18:cd:e7:01:e1:f8:69:b0:89:55:cb:c6: 9c:92:68:f7:43:dc:32:bd:33:b3:cb:cb:97:52:89:d8:37:80: 32:8b:ee:72:55:fb:b3:70:cc:78:65:1d:f6:35:07:b8:e4:f9: d0:e3:d9:84:e0:a6:a6:99:73:18:bb:78:92:ff:f5:08:46:e8: 65:a7:94:8f:4a:a0:f9:58:7e:f4:f1:1e:8e:ae:5a:65:41:ba: 55:7d:84:a9:db:f1:be:02:c0:de:30:bd:35:0b:08:ee:4d:ab: cc:66:fd:73:dc:42:5a:95:3b:30:b1:d8:ea:91:c4:e7:46:7c: ac:68:8b:7e:bd:63:28:5d:dd:b6:c6:4c:1b:78:ae:b7:b0:a3: 3b:bb:f1:94:b0:0e:33:60:f4:74:9f:75:0a:cc:11:7d:93:93: c6:fc:13:ef:b9:65:14:3a:5e:be:a1:bc:56:c5:d3:cd:b8:9c: 43:61:c5:73:ce:54:e6:89:07:b6:ff:b8:48:32:a6:7a:c9:36: d6:73:19:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JivRHlryb4nWyRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDI5ODJkNDEtOTcwNC00NjJiLTgwOTQtOGRiZDRjZjAxZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimV9lUjOXot0e1SwZo4k7UP07KohSesdJLTa 497ZoPr5F8AJbYlLIJUq7WOLvU+ngu4p05fCdqz6kSyKWSPG+Ivqyb8KNSVXOCSd /TOlXpC0bcQT3FmWvFjmiNy/YfaO6gGCTqBH3121yLIXuZ2GLgyUgcTz+0KPfATw InjlvQkcuXKwveotv13+Z2L4lZ1dAId65BcRcD/jfnFnXNspDupdJ4BpYPoGUZ0h DUV8RvKZhO2XMzTtA8I9nCZsQGI8ATphbv2tcDZk0I9DM+PAzMUXpUlS/z7zMeuS w7iM7nOsiGvzbu50Sj1WzCZ/7FzMMEkSspk40iDG9XRxgwOAzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6RWejsb2a2EmOb50QEu++isPfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjk2OGEwZjUtYTlhNC0z N2ExLWFlMjItMjk3ODMwZDY1OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3h8TN2BD/M8oZlaPO+44+rC4qPsgEcQNQi6aGIJxCktigMMwi6P1we o2g20pvn5doCpPpDRhXQw6kmFxjN5wHh+GmwiVXLxpySaPdD3DK9M7PLy5dSidg3 gDKL7nJV+7NwzHhlHfY1B7jk+dDj2YTgpqaZcxi7eJL/9QhG6GWnlI9KoPlYfvTx Ho6uWmVBulV9hKnb8b4CwN4wvTULCO5Nq8xm/XPcQlqVOzCx2OqRxOdGfKxoi369 Yyhd3bbGTBt4rrewozu78ZSwDjNg9HSfdQrMEX2Tk8b8E++5ZRQ6Xr6hvFbF0824 nENhxXPOVOaJB7b/uEgypnrJNtZzGUE= -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:55 2026 by rpki-client