$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa File: cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa (raw, json) Hash identifier: TXBh794AFD32JybJ3qrXz+3KyCHy1/tntP9ogtePmZM= Subject key identifier: 53:C6:01:F6:55:33:6D:75:25:68:71:5E:F5:D2:50:75:43:76:57:3B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49734465FDB80BF72915BC80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.36.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:44:65:fd:b8:0b:f7:29:15:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c66ecd12-c38c-4193-933d-a42c05d11d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:c3:6b:e8:e5:31:cd:9e:18:6c:33:d2:b9: a2:51:dc:ae:52:93:eb:67:b4:d4:86:37:24:97:27: 7f:7c:43:ab:2e:6a:8a:99:10:98:7e:8c:85:61:99: 53:95:30:5b:99:93:86:ea:44:0f:70:35:73:a3:d6: 08:12:08:ee:1b:ff:7e:86:d2:87:78:91:d1:02:c8: 46:50:06:15:d5:b7:70:0e:d7:d7:a0:94:82:80:fe: f4:86:b7:1a:96:34:2f:29:cd:cc:c4:f3:30:48:57: 22:0e:75:9f:cd:be:1b:37:98:4f:67:19:fe:4a:f6: 31:80:26:f5:af:80:f3:db:2e:d7:02:dc:53:96:9d: 99:e8:ed:b7:4c:a1:72:83:0d:e3:f8:3e:51:03:be: ad:a6:dc:0a:56:3c:c8:b1:72:25:c1:3a:e7:07:bf: e7:ed:6c:62:2d:bc:9f:e3:96:ce:7c:dd:11:29:c8: d9:08:a2:84:0d:48:b4:4b:53:95:21:87:bc:c3:45: 43:24:2b:f6:6a:0e:ef:c8:0e:34:0c:f5:80:95:b1: 3b:70:11:ee:50:d3:c9:e5:df:e0:8c:47:88:57:c1: 72:5c:45:25:13:f0:be:e2:69:74:fd:57:79:84:59: 2f:af:21:46:82:d2:45:60:2d:50:ed:8b:44:f6:5c: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C6:01:F6:55:33:6D:75:25:68:71:5E:F5:D2:50:75:43:76:57:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ba:82:c7:3c:64:48:78:fb:c8:f6:8d:94:bc:00:ac:df:37: 58:c1:e6:45:15:27:dc:79:23:92:a8:ae:0c:6f:12:bb:10:5d: 69:03:6d:22:d6:9a:a5:f8:d8:29:17:14:d2:b2:e4:61:89:c1: 47:8f:f2:54:f0:96:82:8c:0f:df:df:30:fc:52:2b:41:d1:a7: 17:ac:64:9c:02:cf:2f:a5:b0:81:8c:9d:52:cb:ad:20:1c:91: ee:8f:b3:6a:42:89:69:01:33:d9:79:75:5c:0e:fc:19:de:37: 12:3e:c6:ca:2b:db:9a:19:55:60:61:04:78:06:0b:6d:1e:d5: 9f:00:11:2e:ad:d2:a2:62:22:04:37:2e:74:e8:d8:e0:6f:b4: ff:43:20:5a:48:83:b9:0d:39:26:20:4f:05:5f:a0:94:96:4a: 4e:d5:48:9b:ea:1f:2e:94:fb:e3:79:32:28:6d:20:9f:78:e3: 64:29:d4:8a:4e:23:4e:83:a1:e1:c9:a3:1d:eb:ca:bd:7c:83: 2c:05:1c:8e:3c:40:94:4b:63:5d:8a:1d:fb:3d:23:64:1f:57: 09:20:38:99:26:3f:f6:3b:98:c7:5f:3f:12:d1:da:d0:a9:cd: 93:49:4c:df:6b:d1:62:3c:3d:c1:4e:b6:ff:6e:bd:7b:56:46: 89:91:03:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0Rl/bgL9ykVvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY2ZWNkMTItYzM4Yy00MTkzLTkzM2QtYTQyYzA1ZDExZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztHDa+jlMc2eGGwz0rmiUdyuUpPrZ7TUhjck lyd/fEOrLmqKmRCYfoyFYZlTlTBbmZOG6kQPcDVzo9YIEgjuG/9+htKHeJHRAshG UAYV1bdwDtfXoJSCgP70hrcaljQvKc3MxPMwSFciDnWfzb4bN5hPZxn+SvYxgCb1 r4Dz2y7XAtxTlp2Z6O23TKFygw3j+D5RA76tptwKVjzIsXIlwTrnB7/n7WxiLbyf 45bOfN0RKcjZCKKEDUi0S1OVIYe8w0VDJCv2ag7vyA40DPWAlbE7cBHuUNPJ5d/g jEeIV8FyXEUlE/C+4ml0/Vd5hFkvryFGgtJFYC1Q7YtE9lyvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPGAfZVM211JWhxXvXSUHVDdlc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2JiNTg3MTYtNjJkZC0z ZmQwLTg2YjUtNzA4MGE5MWY5ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa6gsc8ZEh4+8j2jZS8AKzfN1jB5kUVJ9x5I5KorgxvErsQXWkDbSLW mqX42CkXFNKy5GGJwUeP8lTwloKMD9/fMPxSK0HRpxesZJwCzy+lsIGMnVLLrSAc ke6Ps2pCiWkBM9l5dVwO/BneNxI+xsor25oZVWBhBHgGC20e1Z8AES6t0qJiIgQ3 LnTo2OBvtP9DIFpIg7kNOSYgTwVfoJSWSk7VSJvqHy6U++N5MihtIJ9442Qp1IpO I06DoeHJox3ryr18gywFHI48QJRLY12KHfs9I2QfVwkgOJkmP/Y7mMdfPxLR2tCp zZNJTN9r0WI8PcFOtv9uvXtWRomRA9g= -----END CERTIFICATE-----Generated at Sat Sep 26 18:02:01 2026 by rpki-client