$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa File: 33fa41b8-82e8-3942-8551-e56832c3b17b.roa (raw, json) Hash identifier: gcI5MZFKfKVW3XQeWop3uL79v+PcidcPRwAruV0NKCE= Subject key identifier: 51:91:03:AA:12:40:DB:2A:27:64:E3:15:D4:96:F2:55:C6:5A:05:6E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498B807969336024E4B2D900 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.57.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:80:79:69:33:60:24:e4:b2:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=780b466f-e030-4658-aae4-393bab510d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e3:3e:19:03:55:7e:5a:9b:46:fb:bb:8f:1f: 2f:94:47:93:4c:42:6c:f3:9e:00:64:4f:56:18:64: fa:69:8d:4a:6a:cc:65:7d:d5:cf:9f:fc:0a:ce:7a: ba:6b:0d:14:25:a0:e2:9c:22:75:72:b3:c8:38:c6: 20:2c:6a:41:38:b4:33:fe:9e:a2:a6:4b:b1:ca:ef: 93:da:fe:b5:81:b0:30:c3:27:30:5f:99:c7:37:10: b9:9e:d6:25:d9:eb:ac:49:13:fb:6a:a7:cf:e4:20: 0e:4a:37:a8:f2:b0:33:44:62:43:3b:1f:5b:83:1a: c1:15:5c:f7:e5:e5:f1:50:d0:d0:b2:4a:c1:63:10: 2a:60:a8:e5:5e:41:27:b2:d2:95:31:04:20:ff:21: 84:c7:76:be:27:46:48:62:42:9b:61:6e:aa:00:7b: ec:84:5a:75:84:fa:63:c9:01:6a:84:42:75:f2:7e: 55:27:a4:b8:92:33:0b:24:d2:33:94:9b:7f:52:3d: 3b:24:c6:15:d2:05:99:26:78:38:06:31:87:a0:b2: de:02:2c:5f:3e:47:65:40:89:66:6b:33:97:c5:43: 0b:93:57:e2:3c:10:f7:a0:96:ed:a1:24:8a:4a:df: e2:b8:77:f2:d1:24:fc:d8:28:e1:d7:ad:78:7b:df: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:91:03:AA:12:40:DB:2A:27:64:E3:15:D4:96:F2:55:C6:5A:05:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7f:15:82:48:c5:ff:03:77:05:a5:69:c2:34:f8:67:6e:96: db:6a:d0:d3:1d:9f:4c:54:74:27:f2:19:30:05:4e:d3:9b:f4: ca:84:42:21:55:c9:f1:bf:34:4a:b4:1f:03:df:d0:80:f8:a1: 11:96:3c:fa:7a:95:d3:d3:f7:a9:55:af:15:ce:a4:88:0c:a6: e0:9f:1b:d7:a9:25:c0:5d:1b:c3:09:29:a1:ca:1b:ca:bd:bb: 33:51:d2:f5:8a:18:ab:ae:c4:f8:97:36:fd:81:6b:35:20:96: a6:72:20:22:44:28:80:74:11:16:a6:63:d2:7b:f0:b0:f2:db: c6:15:85:fe:0e:a2:a0:f0:af:d7:fa:03:1b:3b:f4:73:3d:fe: a7:9f:cb:3a:a1:56:e8:be:7e:2b:88:dc:15:03:1b:49:26:b9: 3f:9c:1e:db:e7:59:0c:00:e8:3d:d9:1f:ca:b8:e5:5f:c6:0c: 20:da:b5:68:05:6b:9b:cb:37:02:ae:52:a2:dd:4a:51:98:3a: 68:34:7e:38:a5:1d:3c:ac:b2:90:7e:ba:08:ac:4c:4e:f7:10: 92:8f:f4:c2:78:d0:eb:74:64:ed:2d:1e:8c:7a:fa:e5:70:33: 06:3d:29:01:4c:c1:64:46:e7:3d:c8:e8:03:5e:f2:c5:63:64: 59:0b:30:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji4B5aTNgJOSy2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzgwYjQ2NmYtZTAzMC00NjU4LWFhZTQtMzkzYmFiNTEwZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeM+GQNVflqbRvu7jx8vlEeTTEJs854AZE9W GGT6aY1KasxlfdXPn/wKznq6aw0UJaDinCJ1crPIOMYgLGpBOLQz/p6ipkuxyu+T 2v61gbAwwycwX5nHNxC5ntYl2eusSRP7aqfP5CAOSjeo8rAzRGJDOx9bgxrBFVz3 5eXxUNDQskrBYxAqYKjlXkEnstKVMQQg/yGEx3a+J0ZIYkKbYW6qAHvshFp1hPpj yQFqhEJ18n5VJ6S4kjMLJNIzlJt/Uj07JMYV0gWZJng4BjGHoLLeAixfPkdlQIlm azOXxUMLk1fiPBD3oJbtoSSKSt/iuHfy0ST82Cjh1614e99ciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGRA6oSQNsqJ2TjFdSW8lXGWgVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzNmYTQxYjgtODJlOC0z OTQyLTg1NTEtZTU2ODMyYzNiMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF/FYJIxf8DdwWlacI0+Gdulttq0NMdn0xUdCfyGTAFTtOb9MqEQiFV yfG/NEq0HwPf0ID4oRGWPPp6ldPT96lVrxXOpIgMpuCfG9epJcBdG8MJKaHKG8q9 uzNR0vWKGKuuxPiXNv2BazUglqZyICJEKIB0ERamY9J78LDy28YVhf4OoqDwr9f6 Axs79HM9/qefyzqhVui+fiuI3BUDG0kmuT+cHtvnWQwA6D3ZH8q45V/GDCDatWgF a5vLNwKuUqLdSlGYOmg0fjilHTysspB+ugisTE73EJKP9MJ40Ot0ZO0tHox6+uVw MwY9KQFMwWRG5z3I6ANe8sVjZFkLMMQ= -----END CERTIFICATE-----Generated at Sat Sep 26 06:29:57 2026 by rpki-client