$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa File: a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa (raw, json) Hash identifier: lS3rMjgsBCwdxZD552+14VcXC6PrQXRX+hZmfZvAMmE= Subject key identifier: 78:F6:79:35:F5:31:1C:48:7B:B5:63:E6:CE:68:C5:E4:D9:01:FA:18 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F78E829C095775C61EBDDE700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 16591 IP address blocks: 136.39.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:29:c0:95:77:5c:61:eb:dd:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=7b71495f-d941-46a9-9fe4-b1c592871dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:a9:07:93:2f:be:90:4c:3d:3d:7d:1f:37: 47:bc:3e:44:9a:07:82:85:de:0b:bf:de:77:13:6d: af:f5:14:1b:9c:99:8e:00:18:ea:5f:7d:f8:21:83: 4c:17:3b:46:dd:f5:35:d2:00:6b:88:55:07:b4:e0: 13:df:57:4e:eb:2f:c6:29:49:ba:61:60:17:bf:bb: ca:18:80:e0:c6:2a:93:19:f6:31:d6:12:90:49:93: b2:73:ef:fb:89:be:60:fe:be:a7:08:c3:7a:94:3f: 81:35:d9:32:c1:83:7d:5e:b8:8a:ca:f0:1e:f8:8a: 7b:0a:2e:d6:68:aa:25:fc:b1:50:03:c4:eb:a9:3f: 2c:29:88:3e:5f:8b:68:51:fa:bb:9f:ce:11:fa:b0: 1b:6c:4a:62:f3:ac:f4:37:30:81:cc:5e:fd:30:c4: 97:ab:d6:1b:5f:52:81:5d:64:3c:c2:c3:3c:12:57: e4:26:e6:b4:53:8b:40:eb:3c:70:ef:0e:42:3e:9d: 8a:c6:5a:05:59:81:44:6a:6f:13:0e:c5:86:56:08: 1d:cb:f7:bc:90:5f:dc:ba:57:e8:d2:51:5a:cf:0d: de:7e:33:1c:35:ed:36:04:81:51:9c:f6:92:46:d0: 24:18:d3:9b:a5:19:98:03:06:3d:e4:11:dc:bd:c5: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F6:79:35:F5:31:1C:48:7B:B5:63:E6:CE:68:C5:E4:D9:01:FA:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.39.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b7:65:70:9d:f6:a8:50:c4:0d:0a:77:4b:2d:2e:90:f3:64: 05:b3:dc:c8:42:f6:37:ca:f3:25:28:92:17:71:62:b6:e2:59: 1d:d3:b1:21:42:9c:f4:b6:d7:35:cd:38:aa:70:d3:0b:34:07: d0:ed:24:22:b6:65:06:23:51:3f:86:90:23:50:c4:64:eb:89: 2c:23:b9:5b:cc:ce:fe:fe:35:c2:02:ed:3f:b3:0d:0a:a1:83: 2f:4e:1f:24:0e:66:55:0c:bb:e1:aa:97:79:75:9c:4b:c8:92: fa:c4:3d:ce:8a:2f:e7:89:1e:ad:b7:03:29:cc:1a:dc:d0:83: 53:1a:5f:ff:c7:50:db:d1:47:e9:c6:4c:de:3f:ca:9a:33:b0: b8:13:7a:72:69:c0:a9:15:12:47:b3:8b:c9:63:f0:e0:ac:d1: 6f:bf:33:63:5d:a4:6e:37:90:26:c2:65:6b:de:f2:f2:24:1c: 13:d0:da:2b:ac:4f:22:e9:b0:da:85:97:68:c4:5e:19:cf:1f: 8d:20:91:54:6b:59:7e:73:57:cf:c9:19:b7:8b:15:3d:90:f3: 91:76:d5:46:b6:90:0d:9c:d5:85:d9:5b:10:6a:fb:1e:3c:7a: 92:fb:90:20:5e:4f:e2:f7:4d:1c:a1:ca:5c:59:41:c9:01:a6: 98:4e:eb:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946CnAlXdcYevd5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk N2I3MTQ5NWYtZDk0MS00NmE5LTlmZTQtYjFjNTkyODcxZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIupB5MvvpBMPT19HzdHvD5EmgeChd4Lv953 E22v9RQbnJmOABjqX334IYNMFztG3fU10gBriFUHtOAT31dO6y/GKUm6YWAXv7vK GIDgxiqTGfYx1hKQSZOyc+/7ib5g/r6nCMN6lD+BNdkywYN9XriKyvAe+Ip7Ci7W aKol/LFQA8TrqT8sKYg+X4toUfq7n84R+rAbbEpi86z0NzCBzF79MMSXq9YbX1KB XWQ8wsM8ElfkJua0U4tA6zxw7w5CPp2KxloFWYFEam8TDsWGVggdy/e8kF/culfo 0lFazw3efjMcNe02BIFRnPaSRtAkGNObpRmYAwY95BHcvcV5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj2eTX1MRxIe7Vj5s5oxeTZAfoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTljZTA5MDEtZDQzOC0z ZmQ4LThmZTEtN2UwZGU5Mjc3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG3ZXCd9qhQxA0Kd0stLpDzZAWz3MhC9jfK8yUokhdxYrbiWR3TsSFC nPS21zXNOKpw0ws0B9DtJCK2ZQYjUT+GkCNQxGTriSwjuVvMzv7+NcIC7T+zDQqh gy9OHyQOZlUMu+Gql3l1nEvIkvrEPc6KL+eJHq23AynMGtzQg1MaX//HUNvRR+nG TN4/ypozsLgTenJpwKkVEkezi8lj8OCs0W+/M2NdpG43kCbCZWve8vIkHBPQ2ius TyLpsNqFl2jEXhnPH40gkVRrWX5zV8/JGbeLFT2Q85F21Ua2kA2c1YXZWxBq+x48 epL7kCBeT+L3TRyhylxZQckBpphO6w0= -----END CERTIFICATE-----Generated at Tue Oct 13 17:43:28 2026 by rpki-client