$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa File: d8195a94-d522-37ad-be84-a7f37ca7a347.roa (raw, json) Hash identifier: k0/Mn221WXp7mmHBAoAw+8Sr6ZoA9D8tm7NxSd7M51k= Subject key identifier: C5:A5:07:EE:08:64:86:13:7E:AB:9F:29:6C:36:FF:59:C2:09:4B:EA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498A8CF194D0A7BB6E85AB88 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.48.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:8c:f1:94:d0:a7:bb:6e:85:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5608e956-94b1-4b9a-aa02-f0ad8a92daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:10:60:8b:9a:b9:1c:18:6e:49:75:04:36: c5:9c:b6:79:a6:dc:ac:26:11:ac:67:e4:e5:91:31: a5:7b:e7:fd:d7:f6:e7:8d:62:82:a3:f6:35:f4:13: e0:8d:23:74:ec:bb:e8:5d:03:9d:4f:c2:5a:a4:bc: 90:2d:9d:c4:00:6d:ae:a2:11:79:eb:f4:e3:97:e5: f2:e0:30:29:dc:bf:54:cd:bb:c0:42:09:6a:ec:df: 67:7f:d2:1f:90:ce:b7:24:35:7e:e6:24:40:a6:da: 8f:b7:d0:9c:6b:ff:81:a8:4d:c6:4d:69:33:d2:63: 5d:7b:59:21:35:21:45:6a:78:90:09:4e:1f:be:6c: bc:1a:9a:63:88:a4:d0:b5:76:9c:46:7e:4a:4d:e4: 0f:db:27:88:5f:82:48:1d:2e:fd:bb:7a:13:95:ed: 0b:eb:5b:75:dc:a0:a8:2f:88:23:b4:29:9a:12:de: 6b:f4:82:f0:71:4e:63:1e:b9:e3:40:fb:6f:38:b0: 25:4c:cf:eb:57:bb:f6:d6:e6:58:35:d3:ae:0a:03: dc:6d:72:45:89:c9:bb:fd:51:3b:ee:01:72:a2:29: f2:3f:51:ab:cd:b2:9a:29:0b:40:06:58:7c:9c:af: b8:24:c9:c6:1d:b6:b5:25:02:4d:f9:a2:1f:a1:bb: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A5:07:EE:08:64:86:13:7E:AB:9F:29:6C:36:FF:59:C2:09:4B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.48.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:92:9c:a1:83:a2:34:63:a1:cb:85:79:38:84:ec:f2:69:a4: aa:b4:ab:96:12:6e:b6:8d:b6:5e:a6:0e:ff:7a:f0:00:74:d8: 25:0a:4a:ea:ca:73:9e:54:5d:77:70:91:ff:a9:dc:a1:6b:2f: ea:76:dc:32:9b:49:c5:7a:f0:3b:1c:d4:5f:ea:9e:e7:d9:b2: f3:7b:81:98:5d:4c:59:a0:5a:28:e8:15:a4:ad:4d:f8:fa:06: 10:8c:e1:88:e9:6a:df:8e:f0:d8:e9:ec:b8:23:4f:11:01:7e: b3:9a:2a:3a:a7:ff:56:ff:d1:02:d0:9f:e0:98:fd:f4:c5:b6: 5c:e3:6b:aa:dc:bf:22:b1:0c:0f:16:72:9d:f3:f0:64:54:bb: 26:e0:84:d9:2a:a0:90:b9:09:c4:9d:02:91:20:ec:b3:b8:31: e2:78:6a:a3:31:2d:44:82:1d:9a:47:04:02:25:a4:ad:48:ba: 26:10:9d:41:0e:d7:85:e0:e4:1f:d5:36:16:5c:9f:fc:27:9f: 74:6b:cd:5b:ae:97:ed:e6:44:66:00:3b:a1:31:cc:09:07:f3: 42:b5:4f:e0:38:06:9d:ce:40:00:22:94:20:ce:6d:27:d9:37: e9:72:d9:f6:29:8b:f6:b5:d3:95:ee:a3:d5:41:40:d2:0b:1b: 9f:10:a3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiozxlNCnu26Fq4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTYwOGU5NTYtOTRiMS00YjlhLWFhMDItZjBhZDhhOTJkYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dYQYIuauRwYbkl1BDbFnLZ5ptysJhGsZ+Tl kTGle+f91/bnjWKCo/Y19BPgjSN07LvoXQOdT8JapLyQLZ3EAG2uohF56/Tjl+Xy 4DAp3L9UzbvAQglq7N9nf9IfkM63JDV+5iRAptqPt9Cca/+BqE3GTWkz0mNde1kh NSFFaniQCU4fvmy8GppjiKTQtXacRn5KTeQP2yeIX4JIHS79u3oTle0L61t13KCo L4gjtCmaEt5r9ILwcU5jHrnjQPtvOLAlTM/rV7v21uZYNdOuCgPcbXJFicm7/VE7 7gFyoinyP1GrzbKaKQtABlh8nK+4JMnGHba1JQJN+aIfobsRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWlB+4IZIYTfqufKWw2/1nCCUvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDgxOTVhOTQtZDUyMi0z N2FkLWJlODQtYTdmMzdjYTdhMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeSnKGDojRjocuFeTiE7PJppKq0q5YSbraNtl6mDv968AB02CUKSurK c55UXXdwkf+p3KFrL+p23DKbScV68Dsc1F/qnufZsvN7gZhdTFmgWijoFaStTfj6 BhCM4Yjpat+O8Njp7LgjTxEBfrOaKjqn/1b/0QLQn+CY/fTFtlzja6rcvyKxDA8W cp3z8GRUuybghNkqoJC5CcSdApEg7LO4MeJ4aqMxLUSCHZpHBAIlpK1IuiYQnUEO 14Xg5B/VNhZcn/wnn3RrzVuul+3mRGYAO6ExzAkH80K1T+A4Bp3OQAAilCDObSfZ N+ly2fYpi/a105Xuo9VBQNILG58Qo+4= -----END CERTIFICATE-----Generated at Sun Sep 27 19:27:27 2026 by rpki-client