$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa File: e5103ed5-341b-3991-b338-56f2db1f3a9e.roa (raw, json) Hash identifier: Y2jiNsDqiwcr4rlaOnu8RhryoE/a/lQwtvwtuIaHls4= Subject key identifier: 71:A8:E0:31:74:FB:BC:3E:36:98:E7:0C:08:2C:5F:C5:0D:7D:49:97 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F497431C9276B0EB83A33E480 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.32.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:31:c9:27:6b:0e:b8:3a:33:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5591c5f7-f833-48c5-9a12-78ba97bd3574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:18:05:dd:2d:f3:bd:39:ed:c2:5e:d7:67: f3:df:70:d9:2d:f4:39:69:90:5c:81:79:7c:29:1c: 17:5d:66:d1:d5:7e:c4:4f:08:29:5d:e9:c4:9a:53: c2:58:a9:c0:f1:b5:32:2f:b7:f0:f8:b7:05:42:d4: 80:3b:48:b6:9e:f1:56:9f:fa:03:3b:21:22:1d:3a: 96:bf:4a:0a:44:37:b6:dd:08:ca:81:3d:33:2d:db: df:25:72:99:14:d6:a1:00:ff:fb:25:eb:16:15:0b: 0d:65:9a:64:6a:29:06:72:ab:3c:03:8f:7d:32:4a: 36:d4:9f:79:02:d1:4d:00:cd:68:91:49:df:36:f0: 78:8c:ff:89:8f:4d:4d:d8:56:3a:45:5c:f8:6d:12: 47:e0:04:de:fc:4b:20:a8:f2:df:43:3d:fe:e5:3c: 74:f8:85:22:a8:79:d3:0d:7e:f9:bf:44:13:bf:54: a8:83:1e:63:aa:c0:6c:71:39:f7:23:0c:21:99:78: 91:f0:ec:63:a9:3a:38:7b:07:94:73:35:f8:2b:da: 0e:de:74:32:c8:d2:74:24:4c:d7:f4:3f:f8:98:0b: 1c:42:cf:68:cf:c2:81:de:e6:e6:70:e9:7b:24:e0: 8b:27:4a:ac:7a:bd:25:42:cd:41:f3:87:96:16:02: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A8:E0:31:74:FB:BC:3E:36:98:E7:0C:08:2C:5F:C5:0D:7D:49:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f0:77:8e:23:77:43:d3:21:d6:00:08:ed:3a:bc:b5:ad:b5: 67:74:80:72:9d:a9:e2:96:2d:4e:e9:43:af:63:60:57:5d:61: 6c:b0:57:1d:a3:8c:32:95:e6:d4:2d:b9:a0:ac:63:ab:01:53: 38:d7:be:cd:eb:88:62:87:92:e7:72:ff:d6:96:97:05:45:6d: 53:31:9a:10:97:b1:cb:3f:7e:fb:88:98:0a:01:5e:9d:7c:68: 51:84:dd:58:44:9a:7e:93:bd:7f:2a:f2:fb:78:9b:b2:34:58: 5e:65:4b:d5:bc:49:c4:7f:7b:dc:e5:7b:8d:d0:31:4b:75:19: ed:cd:fd:2f:e6:fc:01:6a:6a:dd:80:89:19:0f:80:dc:a1:2d: a8:41:5e:80:56:11:a1:76:d6:d5:8c:27:56:d8:3a:3e:e7:74: 4c:f0:1b:7a:58:de:aa:a3:a9:14:3d:69:86:c0:3e:69:3a:62: 6d:80:8c:5e:9b:47:ac:0b:20:a4:a3:67:8a:f6:1c:ab:40:f1: 3d:2c:db:4b:1a:cd:70:06:a6:f0:ca:07:3a:a4:c6:b6:dc:32: 96:ec:72:ba:63:25:7e:e7:f7:cc:fc:e5:f1:c6:9c:2f:f9:76: e7:fe:23:45:c3:b3:7c:40:b2:83:cf:2d:eb:dc:f7:1e:78:ab: 77:b1:b3:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDHJJ2sOuDoz5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTU5MWM1ZjctZjgzMy00OGM1LTlhMTItNzhiYTk3YmQzNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38YYBd0t87057cJe12fz33DZLfQ5aZBcgXl8 KRwXXWbR1X7ETwgpXenEmlPCWKnA8bUyL7fw+LcFQtSAO0i2nvFWn/oDOyEiHTqW v0oKRDe23QjKgT0zLdvfJXKZFNahAP/7JesWFQsNZZpkaikGcqs8A499Mko21J95 AtFNAM1okUnfNvB4jP+Jj01N2FY6RVz4bRJH4ATe/EsgqPLfQz3+5Tx0+IUiqHnT DX75v0QTv1Sogx5jqsBscTn3IwwhmXiR8OxjqTo4eweUczX4K9oO3nQyyNJ0JEzX 9D/4mAscQs9oz8KB3ubmcOl7JOCLJ0qser0lQs1B84eWFgKPJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGo4DF0+7w+NpjnDAgsX8UNfUmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTUxMDNlZDUtMzQxYi0z OTkxLWIzMzgtNTZmMmRiMWYzYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnwd44jd0PTIdYACO06vLWttWd0gHKdqeKWLU7pQ69jYFddYWywVx2j jDKV5tQtuaCsY6sBUzjXvs3riGKHkudy/9aWlwVFbVMxmhCXscs/fvuImAoBXp18 aFGE3VhEmn6TvX8q8vt4m7I0WF5lS9W8ScR/e9zle43QMUt1Ge3N/S/m/AFqat2A iRkPgNyhLahBXoBWEaF21tWMJ1bYOj7ndEzwG3pY3qqjqRQ9aYbAPmk6Ym2AjF6b R6wLIKSjZ4r2HKtA8T0s20sazXAGpvDKBzqkxrbcMpbscrpjJX7n98z85fHGnC/5 duf+I0XDs3xAsoPPLevc9x54q3exs2c= -----END CERTIFICATE-----Generated at Fri Sep 25 18:45:46 2026 by rpki-client