$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa File: 980080a2-72d2-314d-82d9-d9da50db7505.roa (raw, json) Hash identifier: ZcJriaY5iENbqlqTkSHvyq7Sn0yWUpOPuwcWKJ0kIS8= Subject key identifier: B7:BF:16:5F:38:D7:BA:2B:A6:16:A7:5D:B2:BD:D7:D8:C2:88:99:D0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F698D75AF166991AB433C6800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16591 IP address blocks: 136.58.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:75:af:16:69:91:ab:43:3c:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=d74c5d2e-b342-4cef-8946-5cd9467b7726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:f4:21:0b:eb:15:4c:be:57:56:39:a6:e7: 9a:85:23:68:d0:a3:c1:dd:c2:11:c5:18:97:eb:2b: 8e:cd:64:a4:53:e7:a1:cc:fd:33:32:3d:c8:ac:7d: 9e:c3:c0:f1:90:45:95:5e:11:0d:53:56:e9:1c:bb: e5:fe:bb:45:32:6a:43:62:22:68:3f:f1:67:c7:f9: cc:7f:1a:5d:db:b1:82:7f:4b:60:b6:7f:1f:fc:0b: 3b:64:30:45:1f:52:e5:7e:cf:48:9b:52:34:d7:7c: 12:c3:ef:98:87:f7:1f:f5:da:eb:50:2f:dd:3b:99: 1f:28:f4:54:c5:66:be:71:ec:02:a3:ff:17:e3:c3: a9:a3:65:fe:34:f7:ae:c1:65:52:9e:6d:b7:54:55: e9:79:5c:26:f7:68:c6:25:f1:06:d6:18:28:44:ad: 2f:51:43:e8:20:b7:e1:bf:6a:97:69:00:93:ad:13: 7c:34:0c:83:93:99:d9:ac:ae:be:f0:a5:81:79:ec: 72:01:d0:b6:b8:9a:b3:37:5b:ea:43:a0:40:e7:2f: a3:21:9f:68:8f:30:1a:6a:63:06:43:cb:ef:89:5f: 1e:c9:2e:63:f7:8b:e7:a7:27:63:37:dc:29:52:eb: 43:ff:f4:43:03:d2:66:7b:2e:18:5c:2d:b1:cc:c5: f1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BF:16:5F:38:D7:BA:2B:A6:16:A7:5D:B2:BD:D7:D8:C2:88:99:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2e:8a:97:c5:a3:02:c5:9b:43:6e:63:52:48:33:99:09:56: 60:bc:05:f4:1e:1e:18:4d:e7:b5:c4:9b:e6:97:89:e3:3f:36: c8:5d:60:7a:0d:d0:27:f1:74:fe:04:27:9a:64:90:3a:ef:23: c7:6a:76:c6:f6:a4:79:c0:6b:cf:43:0f:5a:19:11:84:fd:19: b7:cc:00:00:b3:40:17:f5:ab:ea:f3:52:88:15:82:e5:9e:a3: 75:29:77:6a:b2:7e:89:0e:f9:5b:7b:82:ec:fd:9f:c0:dd:06: e2:92:b1:3f:16:21:7a:d1:da:e6:be:2b:c9:f2:51:9b:77:d6: e5:1b:37:de:2b:a0:c0:d3:63:19:3e:3f:24:83:c7:a9:93:33: 15:c1:b5:94:88:8c:de:0e:ed:eb:68:91:30:67:dc:0e:26:5b: a1:d1:ff:58:d8:48:88:df:11:c6:c1:67:7b:6a:94:1a:8f:d8: 10:99:52:92:24:de:59:d8:f7:ab:89:e2:e3:5d:d4:48:ab:91: 8e:a6:ac:51:c4:45:3a:14:58:82:fd:66:d4:ec:5d:40:e2:a6: dd:e3:cc:bb:c3:c3:8e:5f:51:c0:05:18:15:4f:04:6f:f4:12: 68:21:cb:4f:93:4a:e7:ea:ef:27:22:43:55:86:72:41:8b:82: 7e:2f:57:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXWvFmmRq0M8aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZDc0YzVkMmUtYjM0Mi00Y2VmLTg5NDYtNWNkOTQ2N2I3NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDD0IQvrFUy+V1Y5pueahSNo0KPB3cIRxRiX 6yuOzWSkU+ehzP0zMj3IrH2ew8DxkEWVXhENU1bpHLvl/rtFMmpDYiJoP/Fnx/nM fxpd27GCf0tgtn8f/As7ZDBFH1Llfs9Im1I013wSw++Yh/cf9drrUC/dO5kfKPRU xWa+cewCo/8X48Opo2X+NPeuwWVSnm23VFXpeVwm92jGJfEG1hgoRK0vUUPoILfh v2qXaQCTrRN8NAyDk5nZrK6+8KWBeexyAdC2uJqzN1vqQ6BA5y+jIZ9ojzAaamMG Q8vviV8eyS5j94vnpydjN9wpUutD//RDA9Jmey4YXC2xzMXxjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe/Fl8417orphanXbK919jCiJnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTgwMDgwYTItNzJkMi0z MTRkLTgyZDktZDlkYTUwZGI3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcuipfFowLFm0NuY1JIM5kJVmC8BfQeHhhN57XEm+aXieM/NshdYHoN 0CfxdP4EJ5pkkDrvI8dqdsb2pHnAa89DD1oZEYT9GbfMAACzQBf1q+rzUogVguWe o3Upd2qyfokO+Vt7guz9n8DdBuKSsT8WIXrR2ua+K8nyUZt31uUbN94roMDTYxk+ PySDx6mTMxXBtZSIjN4O7etokTBn3A4mW6HR/1jYSIjfEcbBZ3tqlBqP2BCZUpIk 3lnY96uJ4uNd1EirkY6mrFHERToUWIL9ZtTsXUDipt3jzLvDw45fUcAFGBVPBG/0 Emghy0+TSufq7yciQ1WGckGLgn4vV0o= -----END CERTIFICATE-----Generated at Sun Oct 11 23:19:58 2026 by rpki-client