$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa File: bbf034e3-220c-355c-83ad-7b03291b912c.roa (raw, json) Hash identifier: xRMtsOfuMCYIMS4F8HyBzwRGB6j4gMZWYgoBBCKrbCQ= Subject key identifier: 98:C8:F5:21:0B:53:CC:07:7B:98:12:23:2D:39:2F:22:A9:C0:96:78 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA790A37FE26C2863BB4EA180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.36.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:a3:7f:e2:6c:28:63:bb:4e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=96626cdb-f988-4589-963d-ae34b6d64c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:24:38:fa:2a:ff:8d:e7:fd:cd:f5:88:79: 1d:56:66:c1:60:07:1e:f6:f2:77:71:2e:c1:a7:e9: 90:80:96:dd:d6:d3:c8:60:e8:99:7a:41:fe:e8:34: 7f:02:15:c2:d7:3e:85:0d:b2:62:14:a9:b9:5c:86: 3b:35:52:3d:34:cd:33:bf:e7:bf:98:d9:7b:43:1b: 23:49:60:2b:2c:ac:c0:11:bf:84:a7:72:63:c6:fc: 9f:9b:44:18:21:88:c8:3b:7b:c2:f7:d7:21:92:28: 40:ff:73:27:8e:35:d3:d4:38:27:d4:e2:e5:c8:9c: 87:07:06:56:77:52:2a:37:0e:e2:5e:cb:ce:36:e5: b7:1c:01:15:b2:ff:0f:b6:4d:36:2b:65:f3:52:f9: 01:cd:02:7e:c5:13:0d:77:94:dc:aa:0d:1f:69:22: 58:14:ff:81:e6:ee:24:d0:e9:b3:4d:a0:cb:62:c1: 4c:e9:2c:e7:fc:39:32:59:51:b3:c0:8e:3f:17:72: c4:31:02:73:8b:d1:19:fa:f7:c9:5c:b3:7c:6a:1d: 57:1c:b0:5c:d9:90:c2:87:07:99:0e:e2:26:a8:5a: fc:46:a0:95:04:2e:a8:07:47:c8:22:42:85:52:19: 14:a9:e8:8d:3d:a1:10:95:bb:c1:1b:a8:e2:6b:f9: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:F5:21:0B:53:CC:07:7B:98:12:23:2D:39:2F:22:A9:C0:96:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e7:66:00:87:4f:e3:11:38:e6:58:74:d7:ce:8f:bb:90:e3: 17:58:c5:9b:59:89:4d:87:01:57:f5:19:dc:64:e0:29:89:6a: da:56:d1:f6:55:f0:0f:64:e9:ef:44:f6:42:07:ff:0c:81:96: 52:d9:a3:19:65:58:04:86:1f:df:ed:37:9a:a7:16:ee:78:53: bf:12:69:33:e3:51:05:c7:74:72:7d:ff:54:b5:8a:34:09:fa: f5:f7:e8:af:64:4c:63:aa:69:c2:c7:7f:15:9b:e4:82:02:fa: 18:54:ef:ed:81:53:ae:69:d3:86:e1:e0:ec:e7:16:f4:9d:26: 65:81:a3:98:e7:16:07:7c:2b:aa:48:fb:31:9b:40:a7:be:6a: d4:8a:c3:67:45:19:76:99:2d:53:8c:e9:2b:6b:0e:d8:a0:71: 4a:85:e7:ba:e8:cb:81:6c:b5:f9:44:fd:fb:0f:df:ee:5c:57: 6c:8b:c5:49:1f:8e:bb:45:5e:ae:f6:b3:b8:24:80:d8:9d:17: 22:91:8f:cb:74:2a:a4:08:b0:a0:e8:de:43:88:68:5e:46:dc: 59:9a:09:b7:e0:b7:2c:67:f7:1c:29:aa:e5:a1:1a:d1:81:b0: 90:50:d0:3b:5b:25:c9:5f:ca:45:82:c5:1e:35:35:dc:b6:a7: ee:66:74:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkKN/4mwoY7tOoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTY2MjZjZGItZjk4OC00NTg5LTk2M2QtYWUzNGI2ZDY0YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCEkOPoq/43n/c31iHkdVmbBYAce9vJ3cS7B p+mQgJbd1tPIYOiZekH+6DR/AhXC1z6FDbJiFKm5XIY7NVI9NM0zv+e/mNl7Qxsj SWArLKzAEb+Ep3Jjxvyfm0QYIYjIO3vC99chkihA/3MnjjXT1Dgn1OLlyJyHBwZW d1IqNw7iXsvONuW3HAEVsv8Ptk02K2XzUvkBzQJ+xRMNd5Tcqg0faSJYFP+B5u4k 0OmzTaDLYsFM6Szn/DkyWVGzwI4/F3LEMQJzi9EZ+vfJXLN8ah1XHLBc2ZDChweZ DuImqFr8RqCVBC6oB0fIIkKFUhkUqeiNPaEQlbvBG6jia/kN/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjI9SELU8wHe5gSIy05LyKpwJZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmJmMDM0ZTMtMjIwYy0z NTVjLTgzYWQtN2IwMzI5MWI5MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHnZgCHT+MROOZYdNfOj7uQ4xdYxZtZiU2HAVf1Gdxk4CmJatpW0fZV 8A9k6e9E9kIH/wyBllLZoxllWASGH9/tN5qnFu54U78SaTPjUQXHdHJ9/1S1ijQJ +vX36K9kTGOqacLHfxWb5IIC+hhU7+2BU65p04bh4OznFvSdJmWBo5jnFgd8K6pI +zGbQKe+atSKw2dFGXaZLVOM6StrDtigcUqF57roy4FstflE/fsP3+5cV2yLxUkf jrtFXq72s7gkgNidFyKRj8t0KqQIsKDo3kOIaF5G3FmaCbfgtyxn9xwpquWhGtGB sJBQ0DtbJclfykWCxR41Ndy2p+5mdJs= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:47 2026 by rpki-client