$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/00c95a66-44f7-36a1-b42a-d170b0c76b69.roa File: 00c95a66-44f7-36a1-b42a-d170b0c76b69.roa (raw, json) Hash identifier: kl6nm3Pbgx5vOf2yQimk7M++3inNlyv0fMFGkR6uJ/c= Subject key identifier: 3F:61:D2:2B:FA:C4:2E:F0:7F:F3:27:AD:F2:D1:2E:EB:1E:A1:81:0C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F5EFDD58AB5A6927CC8F07500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/00c95a66-44f7-36a1-b42a-d170b0c76b69.roa Signing time: Fri 02 Oct 2026 18:12:53 +0000 ROA not before: Fri 02 Oct 2026 18:12:53 +0000 ROA not after: Thu 31 Dec 2026 19:12:53 +0000 asID: 16591 IP address blocks: 136.52.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:fd:d5:8a:b5:a6:92:7c:c8:f0:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 2 18:12:53 2026 GMT Not After : Dec 31 19:12:53 2026 GMT Subject: CN=edc81d04-c860-477d-a127-12cfe3dabc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:50:82:da:23:90:82:36:60:42:d6:a1:e6: 65:13:44:5c:72:96:35:ae:c0:d4:a8:ca:5f:22:9e: a0:c1:48:ba:29:e7:c0:f3:b8:c5:4d:c1:62:b8:86: 19:e0:2f:01:38:6c:6f:65:61:08:27:b7:cc:40:4c: b3:3b:1d:db:52:39:60:8d:d5:1d:1e:9c:98:50:d8: 69:ad:6c:41:39:94:ac:9c:df:8b:b1:2a:f9:58:d9: f6:8e:12:2e:54:a2:c5:4a:0b:c3:c9:58:1d:f7:c2: 6b:c2:ff:77:84:63:b5:d2:27:8d:05:3e:11:91:b1: 5d:b4:36:06:71:6d:3f:c9:31:22:ef:0a:12:2f:85: ac:d7:e7:16:10:82:a7:19:b0:d9:a5:3e:92:01:de: f0:35:a4:03:e0:e7:86:19:e9:41:8d:d6:55:7d:1b: 35:bf:b1:ee:26:69:f6:fc:e9:9e:22:02:3b:c3:82: 67:a4:e8:44:f0:1f:a8:40:65:33:6e:ab:66:1d:ca: a3:a5:59:cd:30:58:06:e7:67:13:61:2b:b5:18:e9: 06:b6:57:c5:ba:88:96:ce:9b:ff:97:85:96:09:70: 4a:b9:65:98:0e:12:9d:4d:e1:8a:df:35:da:f1:18: 80:29:c5:76:45:1c:ae:41:e3:a3:a7:54:d6:54:80: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:61:D2:2B:FA:C4:2E:F0:7F:F3:27:AD:F2:D1:2E:EB:1E:A1:81:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/00c95a66-44f7-36a1-b42a-d170b0c76b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ad:8d:b5:30:0f:16:48:db:c9:9e:c8:43:49:ce:f5:7f:04: 8a:58:c9:e9:6b:47:aa:f7:e9:16:e4:96:47:c1:fc:de:03:f8: d0:8e:18:68:06:72:9e:2f:e5:a8:5f:8f:ed:0d:2a:57:a8:d8: dc:dc:98:84:a9:7c:7b:cd:8b:5b:f0:7c:8e:26:20:8d:79:75: 3d:c4:31:72:44:66:57:57:c6:6b:95:8e:f7:ef:84:9a:fe:ce: da:d0:e3:42:a0:3a:8c:65:01:18:1c:ba:26:25:1f:c2:8d:36: 80:fa:8c:68:f1:ce:a9:be:f3:56:33:d3:1a:5f:d4:e6:7a:1e: 27:9f:9c:b2:f5:5a:2c:09:5d:6c:67:0b:9e:cf:99:2a:d2:5e: 2c:1e:0a:73:41:ab:1e:47:b7:26:e8:ac:0f:31:f0:79:d6:b5: e4:d5:b8:fc:2e:ca:24:57:a8:72:9e:2e:2f:ac:88:ce:b1:8a: 53:2d:92:dd:56:40:e4:2a:ec:4e:e2:e9:3f:96:8f:fc:48:b8: 42:c3:8f:12:3f:1f:2f:0e:8b:f6:2a:1c:c5:df:90:8b:fb:0b: dd:eb:74:df:19:2a:52:ad:ee:27:b8:a3:2a:ae:a3:f5:b5:90: 50:21:bf:20:65:91:c0:88:48:cd:a8:92:2a:df:0d:43:4b:0d: ab:42:cc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9e/dWKtaaSfMjwdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MTAwMjE4MTI1M1oXDTI2MTIzMTE5MTI1M1owLzEtMCsGA1UEAxMk ZWRjODFkMDQtYzg2MC00NzdkLWExMjctMTJjZmUzZGFiYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiZQgtojkII2YELWoeZlE0RccpY1rsDUqMpf Ip6gwUi6KefA87jFTcFiuIYZ4C8BOGxvZWEIJ7fMQEyzOx3bUjlgjdUdHpyYUNhp rWxBOZSsnN+LsSr5WNn2jhIuVKLFSgvDyVgd98Jrwv93hGO10ieNBT4RkbFdtDYG cW0/yTEi7woSL4Ws1+cWEIKnGbDZpT6SAd7wNaQD4OeGGelBjdZVfRs1v7HuJmn2 /OmeIgI7w4JnpOhE8B+oQGUzbqtmHcqjpVnNMFgG52cTYSu1GOkGtlfFuoiWzpv/ l4WWCXBKuWWYDhKdTeGK3zXa8RiAKcV2RRyuQeOjp1TWVIAtfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9h0iv6xC7wf/MnrfLRLuseoYEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDBjOTVhNjYtNDRmNy0z NmExLWI0MmEtZDE3MGIwYzc2YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGytjbUwDxZI28meyENJzvV/BIpYyelrR6r36RbklkfB/N4D+NCOGGgG cp4v5ahfj+0NKleo2NzcmISpfHvNi1vwfI4mII15dT3EMXJEZldXxmuVjvfvhJr+ ztrQ40KgOoxlARgcuiYlH8KNNoD6jGjxzqm+81Yz0xpf1OZ6HiefnLL1WiwJXWxn C57PmSrSXiweCnNBqx5HtyborA8x8HnWteTVuPwuyiRXqHKeLi+siM6xilMtkt1W QOQq7E7i6T+Wj/xIuELDjxI/Hy8Oi/YqHMXfkIv7C93rdN8ZKlKt7ie4oyquo/W1 kFAhvyBlkcCISM2okirfDUNLDatCzOQ= -----END CERTIFICATE-----Generated at Sun Oct 11 17:17:05 2026 by rpki-client