$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa File: dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa (raw, json) Hash identifier: 456oUjI7H/L/+JIzPxNr58r5wJlEzxP77JXX7OB7mYU= Subject key identifier: C1:03:3F:56:32:C1:89:0B:34:41:C7:D2:4C:00:E4:F7:3D:D8:CE:EC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498988516F359EF9C7EB6BC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.59.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:88:51:6f:35:9e:f9:c7:eb:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=991cfec3-db61-4ed4-9617-1b86ca4bcc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:ad:7d:2c:fb:00:c9:f8:16:06:88:9d:92: d7:01:c2:61:e5:e6:c8:60:96:cd:26:33:76:c8:1e: 67:1d:47:56:15:15:6a:e3:0e:5a:fd:af:cc:10:f5: 91:aa:fa:f2:e7:1a:e0:73:8f:df:a6:0a:90:c2:ca: aa:d5:71:b1:06:22:95:ce:43:af:6b:c1:26:eb:ef: 32:28:e1:c5:4e:c5:c0:c7:a6:fe:6c:78:c8:0c:c4: ac:d4:9f:4f:25:4f:76:a7:a5:d6:71:45:eb:57:fa: 47:db:da:b1:28:54:cb:e5:1f:e4:b7:a0:3c:4b:4a: 2c:22:2b:21:b6:06:73:53:c4:f5:43:c1:1c:17:c1: e7:8e:ce:57:6c:e8:09:f4:55:5c:bf:44:c0:0b:0b: c3:8b:15:64:37:33:fe:77:f0:39:d2:28:6a:99:8a: b0:10:8c:56:02:29:b0:c4:2c:95:02:d6:87:64:99: db:ab:51:84:53:c7:2c:81:59:18:a3:9d:d0:da:9a: 6f:a2:2f:27:ee:97:83:5d:88:b7:28:3d:4f:44:cb: 6e:47:9c:7a:f1:30:65:ea:ab:d0:37:dd:24:63:51: 05:ad:08:da:64:b8:28:2b:17:c7:19:b2:d5:ab:2a: a5:db:1c:fd:79:5a:fe:f8:3f:0c:85:fd:52:d7:37: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:03:3F:56:32:C1:89:0B:34:41:C7:D2:4C:00:E4:F7:3D:D8:CE:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.59.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8b:90:34:bd:50:75:50:f0:ae:e7:b7:ae:5f:d7:3e:d5:95: 3e:c9:db:a5:44:ed:28:a5:15:ac:f4:d7:ab:5b:8b:00:99:90: aa:95:9b:f6:5a:c1:1d:90:6a:6a:b2:a3:d4:85:20:9f:bc:e6: 52:0b:53:bf:5b:ec:41:70:e8:3c:5b:0a:ab:2e:99:50:ab:e0: 4e:5d:a9:91:82:c4:21:7f:9e:c5:4f:21:2a:9e:4d:52:2d:0b: cf:4e:ce:fe:1a:34:a8:7f:92:a0:15:75:cf:d5:d8:59:0b:bb: 27:cc:8d:d0:93:2d:56:f1:ba:9e:5e:45:ab:0b:8b:cc:8a:c2: 4a:c0:ba:32:42:1d:e4:c9:fa:5b:0c:a1:35:7b:82:42:a4:a1: ec:4e:cc:2f:7f:9b:95:1b:dc:5f:93:b5:ab:41:5c:a3:b9:60: f8:ef:9e:44:45:44:ee:aa:17:46:71:ed:6d:0e:bc:a0:77:e4: d8:32:ef:7c:bc:25:d5:fa:ba:c5:9f:59:df:46:6c:49:31:1c: 32:80:13:a2:d6:07:a3:e6:7f:47:da:fa:7d:ec:59:df:a7:71: 02:cd:36:3a:5e:da:8c:72:cf:ed:d2:2f:c1:60:bc:8f:00:7c: 25:f5:41:44:2f:c8:96:89:a7:f4:83:07:84:bc:95:c3:dc:25: 54:63:91:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiYhRbzWe+cfra8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTkxY2ZlYzMtZGI2MS00ZWQ0LTk2MTctMWI4NmNhNGJjYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WutfSz7AMn4FgaInZLXAcJh5ebIYJbNJjN2 yB5nHUdWFRVq4w5a/a/MEPWRqvry5xrgc4/fpgqQwsqq1XGxBiKVzkOva8Em6+8y KOHFTsXAx6b+bHjIDMSs1J9PJU92p6XWcUXrV/pH29qxKFTL5R/kt6A8S0osIish tgZzU8T1Q8EcF8Hnjs5XbOgJ9FVcv0TACwvDixVkNzP+d/A50ihqmYqwEIxWAimw xCyVAtaHZJnbq1GEU8csgVkYo53Q2ppvoi8n7peDXYi3KD1PRMtuR5x68TBl6qvQ N90kY1EFrQjaZLgoKxfHGbLVqyql2xz9eVr++D8Mhf1S1zc6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEDP1YywYkLNEHH0kwA5Pc92M7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGVjNjNhOGQtNGI0My0z YjFhLTgzYzktODRkMWIwMjMxNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqLkDS9UHVQ8K7nt65f1z7VlT7J26VE7SilFaz016tbiwCZkKqVm/Za wR2Qamqyo9SFIJ+85lILU79b7EFw6DxbCqsumVCr4E5dqZGCxCF/nsVPISqeTVIt C89Ozv4aNKh/kqAVdc/V2FkLuyfMjdCTLVbxup5eRasLi8yKwkrAujJCHeTJ+lsM oTV7gkKkoexOzC9/m5Ub3F+TtatBXKO5YPjvnkRFRO6qF0Zx7W0OvKB35Ngy73y8 JdX6usWfWd9GbEkxHDKAE6LWB6Pmf0fa+n3sWd+ncQLNNjpe2oxyz+3SL8FgvI8A fCX1QUQvyJaJp/SDB4S8lcPcJVRjkdQ= -----END CERTIFICATE-----Generated at Sun Sep 27 19:31:11 2026 by rpki-client