$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cadce065-0efd-3694-be73-1d0ea4a219fd.roa File: cadce065-0efd-3694-be73-1d0ea4a219fd.roa (raw, json) Hash identifier: y44za6TsAf6IsPhx8RduD1DTzX4iN+QsaEp0pueBJAo= Subject key identifier: 76:AF:43:07:68:EF:D4:0E:D9:B2:9A:B2:09:B7:8C:67:E3:FD:40:38 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F3A17C67BEA4BEB59B3089F60 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cadce065-0efd-3694-be73-1d0ea4a219fd.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 16591 IP address blocks: 136.46.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c6:7b:ea:4b:eb:59:b3:08:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=9876828d-7c08-4031-9b84-85217d71e147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:61:43:ee:a9:a8:fa:e9:d3:01:b1:fb:3d: cc:6f:e1:ff:23:c6:d9:c9:e9:6d:94:e5:cd:f5:34: dd:51:50:4e:23:81:5d:ed:a4:d4:3b:80:70:5e:9d: 36:6e:c8:f2:aa:ca:c8:9f:3c:61:4d:b9:bf:d5:c0: 97:80:5b:69:c0:85:44:7a:3a:91:94:b6:ff:d8:2e: e5:24:5f:d9:98:dc:ad:81:0d:4a:51:bb:19:5f:a2: 52:1f:8e:b7:53:a4:ca:b4:47:7d:74:3e:0f:c1:f9: 18:1a:32:ce:13:f7:2c:9f:9c:12:1e:e6:20:28:c7: 8f:4b:4b:90:ce:b9:1d:1c:d5:bf:c9:90:38:df:a1: 83:a7:ae:76:db:65:f1:f0:f8:b7:22:0c:5e:87:09: 6d:6f:c3:dd:d2:6d:5b:90:49:f3:3b:4a:cf:b1:03: 32:cf:83:4b:bf:0a:6d:cb:3e:64:5a:ed:12:29:c7: 0d:18:e9:a5:45:be:ad:9c:fd:0d:16:e8:86:9b:77: 2a:9e:37:e6:39:ff:ee:f0:1c:96:10:ca:61:88:cf: ea:53:a8:83:22:50:38:2a:60:72:9c:de:33:40:31: ba:d6:7c:cd:6d:ed:d1:29:d2:a7:8c:de:f6:00:b9: 65:95:62:54:56:59:1e:24:cf:43:d3:9d:fc:88:bc: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AF:43:07:68:EF:D4:0E:D9:B2:9A:B2:09:B7:8C:67:E3:FD:40:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cadce065-0efd-3694-be73-1d0ea4a219fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d2:2a:af:5d:41:9b:2e:00:d5:e3:fa:d0:5b:1c:97:89:bb: 79:1c:21:bc:a5:3f:ea:34:4a:e5:1c:15:cf:a7:4e:a8:59:71: fb:6d:6f:cf:79:27:ac:ff:22:89:02:9b:c3:eb:5c:80:fe:2d: 73:61:e7:fd:2f:5c:e3:ff:34:90:26:8b:49:82:ac:13:fd:02: 85:87:dd:a6:6a:e6:db:e1:d8:1e:54:97:af:88:e4:aa:93:af: 63:48:8b:49:0d:02:ee:d3:41:6b:c3:83:69:bd:27:72:0c:4f: af:d2:df:b2:f5:d8:26:80:dd:80:0e:0e:03:9c:c9:09:ea:3b: c6:a3:88:38:30:be:ae:f5:7a:26:35:12:fc:63:be:41:5e:5e: 0f:95:d5:f8:1d:60:89:52:de:e1:f0:8d:56:9e:47:ef:36:69: ba:66:1b:b0:eb:1d:03:7c:4d:4c:b2:c3:84:8b:73:c3:ef:18: 85:e0:8e:78:d3:a6:b6:06:44:1d:88:76:07:a1:52:56:a0:04: fb:6d:c0:f0:11:fd:21:01:f9:9f:60:53:06:25:79:d3:1b:b9: 1c:a5:47:bf:77:8d:92:51:4b:35:ca:bd:33:55:b3:5b:4f:ab: 40:c1:de:54:17:ae:66:1e:30:a1:71:aa:4a:84:7e:04:d0:db: 76:62:99:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8Z76kvrWbMIn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OTg3NjgyOGQtN2MwOC00MDMxLTliODQtODUyMTdkNzFlMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYVhQ+6pqPrp0wGx+z3Mb+H/I8bZyeltlOXN 9TTdUVBOI4Fd7aTUO4BwXp02bsjyqsrInzxhTbm/1cCXgFtpwIVEejqRlLb/2C7l JF/ZmNytgQ1KUbsZX6JSH463U6TKtEd9dD4PwfkYGjLOE/csn5wSHuYgKMePS0uQ zrkdHNW/yZA436GDp65222Xx8Pi3Igxehwltb8Pd0m1bkEnzO0rPsQMyz4NLvwpt yz5kWu0SKccNGOmlRb6tnP0NFuiGm3cqnjfmOf/u8ByWEMphiM/qU6iDIlA4KmBy nN4zQDG61nzNbe3RKdKnjN72ALlllWJUVlkeJM9D0538iLxEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHavQwdo79QO2bKasgm3jGfj/UA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2FkY2UwNjUtMGVmZC0z Njk0LWJlNzMtMWQwZWE0YTIxOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHSKq9dQZsuANXj+tBbHJeJu3kcIbylP+o0SuUcFc+nTqhZcfttb895 J6z/IokCm8PrXID+LXNh5/0vXOP/NJAmi0mCrBP9AoWH3aZq5tvh2B5Ul6+I5KqT r2NIi0kNAu7TQWvDg2m9J3IMT6/S37L12CaA3YAODgOcyQnqO8ajiDgwvq71eiY1 EvxjvkFeXg+V1fgdYIlS3uHwjVaeR+82abpmG7DrHQN8TUyyw4SLc8PvGIXgjnjT prYGRB2IdgehUlagBPttwPAR/SEB+Z9gUwYledMbuRylR793jZJRSzXKvTNVs1tP q0DB3lQXrmYeMKFxqkqEfgTQ23ZimTg= -----END CERTIFICATE-----Generated at Tue Sep 29 06:58:57 2026 by rpki-client