$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333c8d1a-008d-3af2-8222-4b73802ee70f.roa File: 333c8d1a-008d-3af2-8222-4b73802ee70f.roa (raw, json) Hash identifier: FOLJ7KTtqK1/9+C8bN1sU0PR7u4dun4ErjtrUqgNbWs= Subject key identifier: EF:17:FA:1F:84:F6:72:BB:6B:72:1D:50:E3:5B:12:4C:99:51:B9:45 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F78E82A04E05FCDBA61196EC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333c8d1a-008d-3af2-8222-4b73802ee70f.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 16591 IP address blocks: 136.47.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:2a:04:e0:5f:cd:ba:61:19:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=784e2905-7035-4a99-a636-27467f90054c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5d:84:de:75:2f:05:9e:76:3e:bd:8f:42:cc: 14:4e:d2:e7:5e:cb:6c:47:7b:35:0b:33:72:24:09: fe:86:31:92:b3:96:8e:05:59:71:88:7d:35:c8:4b: 6d:34:ce:98:ef:78:91:66:9d:d8:98:61:30:f8:e9: 95:0b:82:d4:07:c1:be:a0:f3:8d:d6:71:c4:38:e4: eb:cd:11:70:d6:29:82:68:11:9f:d3:38:f8:2d:d9: 0d:7b:63:65:e4:93:ae:dc:0a:00:e2:76:0a:77:58: 30:be:b9:84:0d:31:d7:d9:1b:e6:a4:68:c9:81:c8: 78:4e:c3:1b:53:bb:92:95:a4:9a:62:7a:96:dc:1e: 72:97:5d:aa:c7:ff:a0:a0:ad:6a:0b:09:18:5a:be: 19:37:42:18:28:9e:73:c0:2c:31:b4:c3:32:39:3c: f5:54:89:e8:2f:1c:6b:34:da:5d:b2:1f:33:ae:43: 02:13:f0:73:36:75:11:14:1b:0e:c8:98:dd:55:5b: 09:f3:a9:33:2c:c4:5c:9e:de:76:70:6c:7b:9c:ce: b7:66:a4:14:a7:d1:5d:fb:61:fd:d6:79:bc:6f:34: 27:35:40:61:f0:a5:e5:61:62:77:76:61:db:73:7a: 18:8d:6d:a4:44:8d:cd:da:91:68:c6:08:7d:bb:45: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:17:FA:1F:84:F6:72:BB:6B:72:1D:50:E3:5B:12:4C:99:51:B9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333c8d1a-008d-3af2-8222-4b73802ee70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:98:67:29:7e:b4:cc:8b:69:c6:f4:8a:88:47:5c:f6:9a:8b: b2:00:98:c5:63:b3:45:b0:c4:56:be:9d:45:eb:bd:a5:62:07: 25:50:57:cd:50:58:4d:b5:8d:fd:a7:b9:e2:e3:d5:e5:05:d8: fa:96:c1:0e:0d:03:60:fa:6d:5e:bc:e9:b2:11:da:f3:76:d2: e7:91:72:55:72:7c:a5:22:f5:d8:fb:bc:50:30:7d:6c:ef:76: 56:76:21:2f:78:e3:10:8c:f3:bc:e8:e1:6b:cc:75:7f:6b:b4: 6d:b1:9d:7f:1b:d4:51:ea:04:9a:23:be:7b:33:e4:3c:26:c5: ac:6b:93:1a:24:c8:2c:0f:15:b2:78:c4:cf:96:e4:f4:42:d1: f7:ab:4a:01:f0:10:a4:a0:ef:04:f2:7d:45:31:cb:a2:42:56: a5:ea:0f:e0:d8:52:0b:60:86:bb:29:d7:7e:84:82:11:49:10: a4:1b:cb:81:48:23:04:97:0e:fe:37:fa:eb:e8:ac:c5:ef:08: 43:bc:31:03:a1:c2:1a:51:9a:1b:9c:d5:6c:d2:fc:25:f5:9e: 9c:09:70:6b:33:85:12:0a:4f:9d:bd:3e:3b:a5:16:a9:f0:dc: a4:48:a9:93:64:bb:22:79:2d:98:98:02:0b:3d:6f:ee:73:51: ae:cf:3e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946CoE4F/NumEZbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk Nzg0ZTI5MDUtNzAzNS00YTk5LWE2MzYtMjc0NjdmOTAwNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl2E3nUvBZ52Pr2PQswUTtLnXstsR3s1CzNy JAn+hjGSs5aOBVlxiH01yEttNM6Y73iRZp3YmGEw+OmVC4LUB8G+oPON1nHEOOTr zRFw1imCaBGf0zj4LdkNe2Nl5JOu3AoA4nYKd1gwvrmEDTHX2RvmpGjJgch4TsMb U7uSlaSaYnqW3B5yl12qx/+goK1qCwkYWr4ZN0IYKJ5zwCwxtMMyOTz1VInoLxxr NNpdsh8zrkMCE/BzNnURFBsOyJjdVVsJ86kzLMRcnt52cGx7nM63ZqQUp9Fd+2H9 1nm8bzQnNUBh8KXlYWJ3dmHbc3oYjW2kRI3N2pFoxgh9u0XXQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8X+h+E9nK7a3IdUONbEkyZUblFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzMzYzhkMWEtMDA4ZC0z YWYyLTgyMjItNGI3MzgwMmVlNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuYZyl+tMyLacb0iohHXPaai7IAmMVjs0WwxFa+nUXrvaViByVQV81Q WE21jf2nueLj1eUF2PqWwQ4NA2D6bV686bIR2vN20ueRclVyfKUi9dj7vFAwfWzv dlZ2IS944xCM87zo4WvMdX9rtG2xnX8b1FHqBJojvnsz5DwmxaxrkxokyCwPFbJ4 xM+W5PRC0ferSgHwEKSg7wTyfUUxy6JCVqXqD+DYUgtghrsp136EghFJEKQby4FI IwSXDv43+uvorMXvCEO8MQOhwhpRmhuc1WzS/CX1npwJcGszhRIKT529PjulFqnw 3KRIqZNkuyJ5LZiYAgs9b+5zUa7PPoU= -----END CERTIFICATE-----Generated at Tue Oct 13 17:42:32 2026 by rpki-client