$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa File: e7428bc5-158c-3dda-8acc-403a9b9b59be.roa (raw, json) Hash identifier: ktO37hcS7EwJlv9xExwPnp6IqyidwpRcYKUq6ELA2xc= Subject key identifier: FD:7F:2D:62:F6:DD:70:2F:B1:B8:E0:82:22:F7:AE:D7:C3:9A:73:BF Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4972CE267BE6DE8AB7DBEA78 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.53.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ce:26:7b:e6:de:8a:b7:db:ea:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=082acee1-d101-4f88-95d5-2893a983e061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:9e:6a:b0:8d:4a:fe:b7:62:19:8d:6b:e3: 13:52:99:31:c0:88:68:79:71:d8:dc:e2:86:4b:79: 76:7e:16:c9:f7:d4:02:3f:e2:35:96:c8:8b:29:73: 6b:02:28:e9:0b:82:40:49:14:3a:4a:ed:b6:16:df: 59:b4:ee:66:aa:61:70:67:2c:45:74:88:28:16:0a: cd:4a:07:25:64:a1:08:4c:7c:36:d9:87:ed:40:5e: 32:89:0e:34:bb:ca:89:93:45:68:28:ea:05:a9:f3: 07:aa:15:93:13:28:d6:5d:34:d7:99:7c:06:28:17: 85:ac:ea:b0:9e:fd:fc:b1:de:7a:25:7a:b6:e6:72: e1:c4:1f:38:82:d6:71:2d:da:d0:0c:99:92:03:ac: a5:51:fe:d8:1f:0b:33:a0:48:2d:67:3b:71:ae:bb: 41:d2:40:5d:1a:cd:79:6c:2e:bb:69:63:61:90:20: a2:32:13:b4:4d:bf:3e:ad:0b:64:50:9e:bb:7a:a8: f4:d8:95:5d:2c:26:d8:24:eb:d0:5d:48:d3:7a:f1: ee:54:0d:73:03:da:c6:a7:4f:1a:50:b0:d0:59:28: 2c:74:e8:b8:01:07:2b:f4:ba:ab:48:bf:57:cb:2f: b2:a2:81:af:5c:58:6a:fa:64:23:26:dd:b8:5e:11: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:2D:62:F6:DD:70:2F:B1:B8:E0:82:22:F7:AE:D7:C3:9A:73:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:69:d4:cc:46:57:6c:a8:92:73:9e:14:c8:82:34:b2:94:fc: 7d:0c:3f:1b:19:f4:bd:bb:a1:b1:67:43:3e:fa:5c:86:5f:20: b3:34:c4:0d:12:51:1f:f0:ad:3f:07:a2:55:db:4f:15:5d:9d: 74:7e:b9:72:0a:a3:99:eb:24:60:8e:6c:68:a4:61:10:08:7c: 9e:5e:c6:bf:4d:13:57:79:0e:c3:80:77:2c:18:cd:44:30:a0: 6a:8c:b6:f4:d0:c2:e0:66:45:45:36:c0:9b:c1:c4:5d:17:c5: 92:53:2f:67:bb:16:10:ce:bc:62:4e:f4:41:f2:eb:c7:72:7a: 37:7b:ff:d9:27:c7:3d:d6:ff:8d:4b:05:47:ae:69:a8:7a:76: 6a:b6:5c:fe:0c:f6:fd:a2:c3:bb:4c:94:9d:87:0e:cc:8c:b2: ec:bc:af:9a:f4:6c:a4:28:cf:36:47:05:35:46:69:c6:8b:47: 46:05:1f:b8:0e:e3:dd:39:f8:e3:df:d8:22:ff:bf:39:40:30: 77:aa:4e:2e:6a:44:33:60:ee:5e:e3:d7:8f:3c:0b:43:73:bc: 1d:b9:50:6a:f5:b1:8f:ac:b4:39:b6:7c:a9:01:45:14:3e:70: 20:af:1d:1f:d2:70:de:69:63:40:54:46:f0:10:cb:2f:a0:0a: 3b:46:b0:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcs4me+beirfb6ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDgyYWNlZTEtZDEwMS00Zjg4LTk1ZDUtMjg5M2E5ODNlMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweiearCNSv63YhmNa+MTUpkxwIhoeXHY3OKG S3l2fhbJ99QCP+I1lsiLKXNrAijpC4JASRQ6Su22Ft9ZtO5mqmFwZyxFdIgoFgrN SgclZKEITHw22YftQF4yiQ40u8qJk0VoKOoFqfMHqhWTEyjWXTTXmXwGKBeFrOqw nv38sd56JXq25nLhxB84gtZxLdrQDJmSA6ylUf7YHwszoEgtZztxrrtB0kBdGs15 bC67aWNhkCCiMhO0Tb8+rQtkUJ67eqj02JVdLCbYJOvQXUjTevHuVA1zA9rGp08a ULDQWSgsdOi4AQcr9LqrSL9Xyy+yooGvXFhq+mQjJt24XhEUrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1/LWL23XAvsbjggiL3rtfDmnO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTc0MjhiYzUtMTU4Yy0z ZGRhLThhY2MtNDAzYTliOWI1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFp1MxGV2yoknOeFMiCNLKU/H0MPxsZ9L27obFnQz76XIZfILM0xA0S UR/wrT8HolXbTxVdnXR+uXIKo5nrJGCObGikYRAIfJ5exr9NE1d5DsOAdywYzUQw oGqMtvTQwuBmRUU2wJvBxF0XxZJTL2e7FhDOvGJO9EHy68dyejd7/9knxz3W/41L BUeuaah6dmq2XP4M9v2iw7tMlJ2HDsyMsuy8r5r0bKQozzZHBTVGacaLR0YFH7gO 4905+OPf2CL/vzlAMHeqTi5qRDNg7l7j1488C0NzvB25UGr1sY+stDm2fKkBRRQ+ cCCvHR/ScN5pY0BURvAQyy+gCjtGsFE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:05:32 2026 by rpki-client