$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ee9c0bcd-d69d-3e0f-b9d0-5bb549afb17e.roa File: ee9c0bcd-d69d-3e0f-b9d0-5bb549afb17e.roa (raw, json) Hash identifier: G3Bw3fhX+HbfQ2iELzLQzv6TAJI+awtW5UGZmRjKpJE= Subject key identifier: 48:CD:B6:53:D4:58:05:47:07:C8:40:2B:AA:00:34:8D:DC:76:44:A5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49749C5F4374244DC922E300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ee9c0bcd-d69d-3e0f-b9d0-5bb549afb17e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.49.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9c:5f:43:74:24:4d:c9:22:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=25ed0f72-86cb-40af-9141-53a3d99347a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:ed:91:f3:f3:c9:fc:78:df:8b:2a:fd:b3: e1:77:49:1a:61:68:f9:da:d6:d5:a5:8d:61:ed:b7: 58:13:b0:51:e7:80:83:61:e8:f3:8e:1a:17:f1:43: 6a:ba:fc:b4:56:c1:21:0d:a2:39:a8:4b:ba:dc:e7: d9:5e:d2:82:3c:26:f2:cc:64:d5:c7:0d:e9:51:45: 3a:07:e0:c1:8c:93:b4:49:27:13:96:a2:2e:88:40: 28:ba:b3:7b:c6:8c:c8:8d:ba:7e:3b:14:32:f5:01: 62:07:19:67:76:e5:08:b0:81:2a:6c:fd:06:23:62: c5:8d:5f:e3:c4:ec:3f:f7:3b:4f:68:c2:ab:9e:af: 88:78:81:59:8f:24:a9:ad:4a:5b:57:92:27:7e:21: a3:a1:4f:b8:4d:b7:f1:ec:04:1f:fb:70:41:0e:a6: 86:b7:3a:4a:8d:bc:2f:83:8b:52:a2:8e:8f:98:eb: 11:1f:4e:cd:df:76:70:43:41:c1:ce:e1:19:c3:cc: 2d:95:0c:c8:62:37:ef:0d:e5:39:db:9e:ba:2c:da: 79:09:ad:63:a7:90:aa:d6:3e:9b:31:a5:eb:51:4f: 7f:22:d4:c8:20:6c:ed:6d:ed:14:cb:ff:d4:97:43: 58:64:2f:0f:3c:f1:11:41:8b:8a:85:a8:63:a6:01: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CD:B6:53:D4:58:05:47:07:C8:40:2B:AA:00:34:8D:DC:76:44:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ee9c0bcd-d69d-3e0f-b9d0-5bb549afb17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f7:b1:0d:56:65:e1:53:0f:32:18:33:7a:22:e3:27:c6:40: 97:4c:4f:40:4b:89:85:4e:e4:c5:f1:31:66:3c:83:7f:7f:ed: 57:18:4a:e6:77:1e:55:65:52:c6:67:89:9a:34:c4:c2:73:1c: 66:b5:d9:a8:bc:ba:28:4a:72:a8:f2:c6:2c:32:33:45:93:0f: 71:78:3c:90:7e:f3:61:82:91:f3:1e:24:5e:81:7c:2c:84:58: b2:c2:24:78:a6:70:0c:ea:15:18:db:10:6d:be:40:c0:48:80: 6c:a8:ee:37:d6:ac:0d:48:3c:ac:21:c8:ae:52:72:ae:f5:2b: 9a:7c:16:56:e4:e5:51:e6:78:87:cf:89:1f:5e:10:29:a2:13: 00:77:7b:2d:5a:98:27:05:ce:b8:db:a4:f1:0e:49:7f:3a:bc: cf:e8:95:97:45:56:7c:65:9e:a4:15:ef:15:14:62:92:be:98: 2d:5f:c1:32:e6:56:4d:99:ba:43:42:cb:57:d9:a4:01:ac:d9: 1a:fc:26:aa:d7:5e:be:a8:a5:81:d1:20:cd:11:c9:c0:65:ad: 10:4d:4e:45:5e:7c:fc:a0:49:8b:99:68:2b:5b:02:1a:30:65: 84:d1:26:d2:99:27:79:e2:d1:b5:f8:f5:83:ac:45:74:ac:87: d8:b7:23:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJxfQ3QkTcki4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVlZDBmNzItODZjYi00MGFmLTkxNDEtNTNhM2Q5OTM0N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDvtkfPzyfx434sq/bPhd0kaYWj52tbVpY1h 7bdYE7BR54CDYejzjhoX8UNquvy0VsEhDaI5qEu63OfZXtKCPCbyzGTVxw3pUUU6 B+DBjJO0SScTlqIuiEAourN7xozIjbp+OxQy9QFiBxlnduUIsIEqbP0GI2LFjV/j xOw/9ztPaMKrnq+IeIFZjySprUpbV5InfiGjoU+4Tbfx7AQf+3BBDqaGtzpKjbwv g4tSoo6PmOsRH07N33ZwQ0HBzuEZw8wtlQzIYjfvDeU52566LNp5Ca1jp5Cq1j6b MaXrUU9/ItTIIGztbe0Uy//Ul0NYZC8PPPERQYuKhahjpgHsIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjNtlPUWAVHB8hAK6oANI3cdkSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWU5YzBiY2QtZDY5ZC0z ZTBmLWI5ZDAtNWJiNTQ5YWZiMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD3sQ1WZeFTDzIYM3oi4yfGQJdMT0BLiYVO5MXxMWY8g39/7VcYSuZ3 HlVlUsZniZo0xMJzHGa12ai8uihKcqjyxiwyM0WTD3F4PJB+82GCkfMeJF6BfCyE WLLCJHimcAzqFRjbEG2+QMBIgGyo7jfWrA1IPKwhyK5Scq71K5p8Flbk5VHmeIfP iR9eECmiEwB3ey1amCcFzrjbpPEOSX86vM/olZdFVnxlnqQV7xUUYpK+mC1fwTLm Vk2ZukNCy1fZpAGs2Rr8JqrXXr6opYHRIM0RycBlrRBNTkVefPygSYuZaCtbAhow ZYTRJtKZJ3ni0bX49YOsRXSsh9i3I08= -----END CERTIFICATE-----Generated at Sun Sep 27 19:04:16 2026 by rpki-client