$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85c86369-7fe1-34b6-a5da-893aa8241456.roa File: 85c86369-7fe1-34b6-a5da-893aa8241456.roa (raw, json) Hash identifier: uCYIq7aPYLPxnBO0r+i/FW+N85lq/UmGbZ1MJKdsm04= Subject key identifier: F5:B4:55:24:41:84:48:B7:20:34:35:7E:52:44:29:ED:DD:E2:08:66 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F5EFDD55849E4BDF83ADED2C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85c86369-7fe1-34b6-a5da-893aa8241456.roa Signing time: Fri 02 Oct 2026 18:12:53 +0000 ROA not before: Fri 02 Oct 2026 18:12:53 +0000 ROA not after: Thu 31 Dec 2026 19:12:53 +0000 asID: 16591 IP address blocks: 136.63.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:fd:d5:58:49:e4:bd:f8:3a:de:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 2 18:12:53 2026 GMT Not After : Dec 31 19:12:53 2026 GMT Subject: CN=bce79111-ba4f-4e8e-a51b-b5179b797fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:dc:63:a7:39:1e:0b:62:df:9b:a3:11:36: 94:3c:a9:b4:e0:b5:5e:72:1f:ab:13:1e:9f:c4:4c: b1:a8:37:5b:54:30:4f:e9:dc:78:41:49:5c:2d:dd: 31:38:9f:b9:d7:0c:4d:ff:de:fd:7c:f6:08:b5:bb: 93:f0:95:a3:21:62:d3:fc:e9:a1:24:1e:94:3b:8c: aa:50:3c:15:c8:09:29:f4:d2:f1:9a:58:a2:cb:d1: 23:5d:b2:48:de:33:b6:8d:14:cd:69:51:22:70:65: e7:ab:54:94:b7:78:a7:94:9d:5a:4f:85:80:d8:b2: cc:a5:3f:74:9a:ff:9f:87:83:4c:14:e5:3b:49:ab: bf:09:83:c9:b5:72:39:ee:d6:4f:b5:fc:70:c1:80: fd:86:c4:98:4b:c5:49:ed:5d:fd:a1:09:8b:6b:e8: c5:ba:23:12:96:91:dd:66:ba:09:bc:f0:f4:ae:82: 64:55:26:90:61:cd:77:d2:61:3e:17:a4:5c:b0:16: a7:5f:d2:84:3d:20:92:1b:31:f3:f9:a6:82:0e:07: 65:9c:69:c1:17:7a:e5:80:4e:ac:08:3c:0a:ef:58: 1a:3e:36:6a:c6:df:d0:12:a1:33:05:25:a1:4c:fa: 44:c7:9d:60:40:c0:0d:e2:75:f0:7e:1b:8c:e6:87: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:55:24:41:84:48:B7:20:34:35:7E:52:44:29:ED:DD:E2:08:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85c86369-7fe1-34b6-a5da-893aa8241456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.63.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:97:7e:2f:2b:d9:d9:29:5c:76:56:50:fa:6f:85:c1:f2:2d: 78:b7:ad:01:b6:ce:c8:bb:0c:3b:4b:63:f8:16:e6:c9:58:f9: 26:d0:b2:d5:4c:c2:33:f2:c0:0f:67:15:17:58:c8:a0:bd:2a: dd:1a:2b:ca:33:59:8a:44:08:6d:13:02:57:e7:d8:0f:38:2a: 8e:bb:18:06:a3:58:19:fc:47:5c:7f:0d:0d:6c:78:ce:6e:ea: 95:5c:e1:2e:7f:a9:43:a3:1e:5b:54:f9:90:7e:0d:4d:9c:ad: e0:25:1f:e2:9c:bf:fe:dc:a6:f2:7c:06:c1:5f:ac:bb:0c:bd: dc:0c:eb:c2:aa:df:6e:f8:b3:3a:99:83:af:56:8a:77:83:0b: dc:ed:b1:f9:70:88:ae:09:a2:bd:01:c1:b3:a7:3d:e6:ee:ee: 32:ca:17:73:63:64:05:24:40:b3:6d:e2:92:72:7b:38:fb:c2: ed:2c:ee:fe:87:da:34:21:94:0e:00:ed:94:13:10:a6:59:86: 33:03:9f:7c:2a:d1:cb:52:9d:a2:4d:d6:dd:ab:28:2a:7b:a5: 9d:96:bb:7e:e1:58:e1:42:82:b4:cc:d8:2e:b4:66:b3:6c:da: 42:71:91:89:27:aa:26:4c:97:0a:8c:7a:54:30:23:30:9c:8a: 9a:8d:25:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9e/dVYSeS9+Dre0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MTAwMjE4MTI1M1oXDTI2MTIzMTE5MTI1M1owLzEtMCsGA1UEAxMk YmNlNzkxMTEtYmE0Zi00ZThlLWE1MWItYjUxNzliNzk3ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqPcY6c5Hgti35ujETaUPKm04LVech+rEx6f xEyxqDdbVDBP6dx4QUlcLd0xOJ+51wxN/979fPYItbuT8JWjIWLT/OmhJB6UO4yq UDwVyAkp9NLxmliiy9EjXbJI3jO2jRTNaVEicGXnq1SUt3inlJ1aT4WA2LLMpT90 mv+fh4NMFOU7Sau/CYPJtXI57tZPtfxwwYD9hsSYS8VJ7V39oQmLa+jFuiMSlpHd ZroJvPD0roJkVSaQYc130mE+F6RcsBanX9KEPSCSGzHz+aaCDgdlnGnBF3rlgE6s CDwK71gaPjZqxt/QEqEzBSWhTPpEx51gQMAN4nXwfhuM5ocEpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW0VSRBhEi3IDQ1flJEKe3d4ghmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODVjODYzNjktN2ZlMS0z NGI2LWE1ZGEtODkzYWE4MjQxNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCXfi8r2dkpXHZWUPpvhcHyLXi3rQG2zsi7DDtLY/gW5slY+SbQstVM wjPywA9nFRdYyKC9Kt0aK8ozWYpECG0TAlfn2A84Ko67GAajWBn8R1x/DQ1seM5u 6pVc4S5/qUOjHltU+ZB+DU2creAlH+Kcv/7cpvJ8BsFfrLsMvdwM68Kq3274szqZ g69WineDC9ztsflwiK4Jor0BwbOnPebu7jLKF3NjZAUkQLNt4pJyezj7wu0s7v6H 2jQhlA4A7ZQTEKZZhjMDn3wq0ctSnaJN1t2rKCp7pZ2Wu37hWOFCgrTM2C60ZrNs 2kJxkYknqiZMlwqMelQwIzCcipqNJd0= -----END CERTIFICATE-----Generated at Sun Oct 11 17:17:10 2026 by rpki-client