$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa File: d5af2629-6142-348d-a1e2-7787336c8706.roa (raw, json) Hash identifier: 0EIV+L/2DfKeWtktxeqDtqmdfW/uczMpEM793/sUpkQ= Subject key identifier: 45:AB:72:55:B7:04:37:D4:2E:BA:40:6D:80:D8:1A:8C:92:86:F5:2D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4974980D59E9260C3FFB8B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.35.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:98:0d:59:e9:26:0c:3f:fb:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9f4487c7-741a-48d9-b9ea-eeb4f9baf313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:cc:c3:fe:ba:d9:49:7d:9c:07:27:55:33: ae:a9:72:bf:c5:5f:91:0b:7b:3d:01:15:69:89:8f: 1d:7d:a0:7e:f3:8d:01:45:ca:9e:96:8a:7f:43:ac: fe:7e:4c:d1:39:3c:8f:35:1c:fb:84:00:ef:23:b0: ad:8b:3b:54:11:ec:34:cf:68:40:5e:02:7e:ce:c0: a0:8f:e5:4b:8d:84:a6:99:09:dc:22:2c:a8:d8:8d: 3a:63:d6:a2:83:d1:61:8a:98:92:d2:bb:33:d4:ff: 1e:c4:62:2d:7e:7f:1d:14:03:7e:9c:4f:8f:40:0e: 30:73:55:03:52:4e:55:58:79:83:ff:0a:82:cd:3d: 47:da:e2:14:2a:86:55:22:3a:7d:5c:8a:7c:5b:b3: cf:80:22:f1:31:01:08:52:42:b7:81:a3:c6:82:40: 15:c5:1f:ab:d5:c4:f5:59:b3:bd:81:e2:af:b2:a6: 82:ea:74:a2:fc:1e:62:8f:43:df:15:03:04:36:13: ad:cf:53:91:64:45:c3:33:6d:e6:f1:a1:b4:67:c0: 77:c5:1e:39:40:89:06:be:ce:54:91:34:59:ba:00: 2c:32:eb:81:20:a2:0d:33:2c:d9:cf:04:48:7e:af: 76:cd:7d:d9:1d:e1:57:4e:b6:98:ca:35:71:8e:3b: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AB:72:55:B7:04:37:D4:2E:BA:40:6D:80:D8:1A:8C:92:86:F5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:25:4d:d3:da:af:14:24:02:fc:7a:d9:b7:80:e6:83:3b:f8: a8:8f:21:06:ce:f3:ab:0c:95:99:a5:94:e0:78:1e:59:9f:42: 9e:b8:11:9b:03:84:8b:b5:61:d8:8a:38:1b:b8:d3:c6:9f:dd: 19:0b:e2:a1:55:91:f4:e0:07:59:62:d2:97:93:2c:5b:82:ab: 58:1d:03:63:56:c0:58:3f:94:8a:0f:57:1e:c9:6d:3e:63:08: 05:87:25:42:9f:9e:dc:b7:07:f6:10:35:a5:3a:fa:0b:ce:bf: 06:57:1e:16:4f:ec:0b:1a:3c:13:79:ac:5c:f7:f4:e5:00:38: 8b:5d:6d:34:59:13:8e:80:f1:02:30:72:2e:63:7b:0b:a3:44: 02:7b:53:1e:59:d0:13:6c:67:ae:b5:75:59:ad:7a:2f:70:6c: 96:70:05:48:40:ff:ad:f8:ce:ee:57:d8:58:9a:c8:cf:9f:98: b2:c2:eb:fc:94:d5:be:bd:9d:4a:1b:70:de:87:72:15:e6:3f: 22:f3:e9:72:5c:30:fe:bd:dd:24:a7:82:8b:61:74:7c:fb:b0: 43:53:46:94:28:f4:42:b1:2f:38:e5:2f:9d:9b:6e:67:25:1e: 94:5f:e2:db:ec:eb:20:22:88:36:ca:cc:14:37:4e:35:48:8d: 5d:83:9f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJgNWekmDD/7i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWY0NDg3YzctNzQxYS00OGQ5LWI5ZWEtZWViNGY5YmFmMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/Mw/662Ul9nAcnVTOuqXK/xV+RC3s9ARVp iY8dfaB+840BRcqelop/Q6z+fkzROTyPNRz7hADvI7CtiztUEew0z2hAXgJ+zsCg j+VLjYSmmQncIiyo2I06Y9aig9FhipiS0rsz1P8exGItfn8dFAN+nE+PQA4wc1UD Uk5VWHmD/wqCzT1H2uIUKoZVIjp9XIp8W7PPgCLxMQEIUkK3gaPGgkAVxR+r1cT1 WbO9geKvsqaC6nSi/B5ij0PfFQMENhOtz1ORZEXDM23m8aG0Z8B3xR45QIkGvs5U kTRZugAsMuuBIKINMyzZzwRIfq92zX3ZHeFXTraYyjVxjjvP9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWrclW3BDfULrpAbYDYGoyShvUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDVhZjI2MjktNjE0Mi0z NDhkLWExZTItNzc4NzMzNmM4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0lTdParxQkAvx62beA5oM7+KiPIQbO86sMlZmllOB4HlmfQp64EZsD hIu1YdiKOBu408af3RkL4qFVkfTgB1li0peTLFuCq1gdA2NWwFg/lIoPVx7JbT5j CAWHJUKfnty3B/YQNaU6+gvOvwZXHhZP7AsaPBN5rFz39OUAOItdbTRZE46A8QIw ci5jewujRAJ7Ux5Z0BNsZ661dVmtei9wbJZwBUhA/634zu5X2FiayM+fmLLC6/yU 1b69nUobcN6HchXmPyLz6XJcMP693SSngothdHz7sENTRpQo9EKxLzjlL52bbmcl HpRf4tvs6yAiiDbKzBQ3TjVIjV2Dnx4= -----END CERTIFICATE-----Generated at Fri Sep 25 18:56:45 2026 by rpki-client