$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa File: cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa (raw, json) Hash identifier: GezaGyX18Mvc73OR9YvL+7Zy47afwfuk9rt8agSYAvA= Subject key identifier: 3E:FE:B9:06:60:D7:CB:55:11:5B:EA:1C:CC:06:93:0A:B8:CB:69:4F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49892C219F64C9090F9F2A00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.49.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:2c:21:9f:64:c9:09:0f:9f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3acaeb84-a152-4e9b-977f-a3cf3758fc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:fb:c1:25:1c:6f:32:e8:4c:1e:00:a7:fb: 31:f2:1a:e9:21:aa:4c:76:6b:b8:24:e9:92:7e:cc: 0a:af:11:aa:75:df:ad:83:0f:8c:05:24:6f:c2:82: 50:05:55:23:72:35:26:bd:5a:3e:7d:2d:86:04:bf: fc:56:98:5f:73:63:5e:d1:1f:f8:85:22:0a:37:a5: 52:9b:6b:70:03:88:03:47:4e:87:d0:67:e8:10:1e: 5d:90:ad:b8:d0:b1:c9:e5:80:06:ff:1c:0c:3b:a2: 3b:4c:c8:9a:66:b2:37:8b:43:de:3c:89:82:2e:fd: d9:fd:d5:06:ac:d5:61:70:5d:07:3e:0b:e4:ba:6f: e8:ba:4c:73:13:f3:97:27:8d:9a:35:35:c0:0e:3c: bd:70:82:83:9f:ff:4d:36:f5:97:18:db:68:61:6f: 51:cc:fd:1d:a3:75:4e:32:26:a0:69:a3:96:8a:09: 94:a8:86:77:79:8e:ff:b9:f2:2a:b7:70:d6:e5:47: c0:82:b7:0f:92:78:43:ac:3a:e0:b2:99:97:f4:17: 03:98:9e:5e:b1:41:a3:bb:45:7a:73:40:3f:15:a4: 24:e4:8e:5d:f6:dc:fc:55:ba:90:05:ca:61:d0:97: 05:6c:0d:77:f9:73:24:6d:e5:76:ce:c2:b1:6c:95: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FE:B9:06:60:D7:CB:55:11:5B:EA:1C:CC:06:93:0A:B8:CB:69:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a2:d1:da:24:6a:ef:86:86:f9:6d:b0:31:72:cb:4c:5b:e0: 35:1c:10:60:1e:ba:d9:ee:38:0f:45:c7:d6:af:9b:29:8d:ac: 63:93:0f:b2:29:18:40:bf:61:76:a0:2a:f2:15:a8:c9:82:98: 18:e6:ba:41:ee:4f:7a:32:f3:44:1b:0b:cb:97:01:4c:ff:ec: 13:4e:07:0e:83:9f:e2:c4:64:8f:29:f8:78:99:37:9b:51:7c: 0a:a9:e0:e3:7f:19:4b:15:5b:24:ed:d9:99:d7:24:36:e7:e1: 06:0a:25:15:99:52:4d:22:eb:34:55:8f:b0:75:66:71:b3:c4: 81:bb:29:e4:58:5b:20:2b:9c:5d:ed:f3:d7:32:0d:c3:f4:77: 60:41:6a:64:3e:c1:33:79:63:ab:75:d3:d2:74:8d:a5:26:b8: 8a:83:0a:db:17:6c:a0:13:5d:cc:cb:55:65:54:c4:d8:7b:58: c6:ab:cf:f8:bf:34:a2:56:02:04:26:43:f5:16:d1:55:fd:28: 8e:00:10:2f:13:fa:41:f5:4f:8d:2f:42:14:d0:16:30:ee:7d: 9e:2a:cb:a4:0b:6b:09:49:33:ca:0c:c4:15:70:59:49:2c:4e: 13:0c:bd:7e:9b:01:06:00:c4:60:40:55:20:e1:42:f3:84:6f: 1d:83:5e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiSwhn2TJCQ+fKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2FjYWViODQtYTE1Mi00ZTliLTk3N2YtYTNjZjM3NThmYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUP7wSUcbzLoTB4Ap/sx8hrpIapMdmu4JOmS fswKrxGqdd+tgw+MBSRvwoJQBVUjcjUmvVo+fS2GBL/8Vphfc2Ne0R/4hSIKN6VS m2twA4gDR06H0GfoEB5dkK240LHJ5YAG/xwMO6I7TMiaZrI3i0PePImCLv3Z/dUG rNVhcF0HPgvkum/oukxzE/OXJ42aNTXADjy9cIKDn/9NNvWXGNtoYW9RzP0do3VO MiagaaOWigmUqIZ3eY7/ufIqt3DW5UfAgrcPknhDrDrgspmX9BcDmJ5esUGju0V6 c0A/FaQk5I5d9tz8VbqQBcph0JcFbA13+XMkbeV2zsKxbJXcUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7+uQZg18tVEVvqHMwGkwq4y2lPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2Y1ZmI2MGQtMmY2Yy0z ZWRkLWI1YmYtMzc5MmIwZTRlNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHii0dokau+GhvltsDFyy0xb4DUcEGAeutnuOA9Fx9avmymNrGOTD7Ip GEC/YXagKvIVqMmCmBjmukHuT3oy80QbC8uXAUz/7BNOBw6Dn+LEZI8p+HiZN5tR fAqp4ON/GUsVWyTt2ZnXJDbn4QYKJRWZUk0i6zRVj7B1ZnGzxIG7KeRYWyArnF3t 89cyDcP0d2BBamQ+wTN5Y6t109J0jaUmuIqDCtsXbKATXczLVWVUxNh7WMarz/i/ NKJWAgQmQ/UW0VX9KI4AEC8T+kH1T40vQhTQFjDufZ4qy6QLawlJM8oMxBVwWUks ThMMvX6bAQYAxGBAVSDhQvOEbx2DXjc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:17:39 2026 by rpki-client