$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa File: 20d71fc6-63e2-35b5-8642-c8020055e79b.roa (raw, json) Hash identifier: DyZpvzqxUEGTWR0jFhLdk2+k0fSB6sWNnr5EfU+JDwM= Subject key identifier: 0E:B2:F8:58:9D:65:71:E1:DD:89:F6:88:26:AC:F2:8F:B0:94:35:23 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4987B80B65487414FEF06040 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.36.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b8:0b:65:48:74:14:fe:f0:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33404b82-bafc-4a16-93c2-cb336c2ab0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:e6:cd:e7:4a:ff:f2:93:5e:1e:b9:1d:7b: 0e:fd:a7:3e:8d:c8:42:9c:6e:19:45:14:49:f6:bb: c3:19:b9:ff:71:5f:66:e2:ba:9e:2b:90:4b:b5:d9: 98:d3:68:0f:8f:ab:fd:77:57:69:db:bc:48:14:31: 10:5a:ca:a1:a2:c0:1c:d1:2f:0a:90:fd:13:09:93: 2e:d4:3e:90:c9:31:fc:9f:be:85:14:e0:46:f8:01: 8b:6f:dd:88:27:66:6b:51:e1:52:e4:e9:50:56:54: eb:b7:7a:f9:7a:59:91:29:19:3b:7c:69:6f:b8:af: e2:d9:aa:29:23:29:47:f7:4a:73:1a:df:6b:ee:fa: 38:ac:74:91:51:43:cd:bd:56:41:d5:0c:c2:0c:1a: 62:ab:3e:a5:bf:9c:7e:eb:aa:56:04:d9:f8:1f:96: 80:52:81:15:45:d4:15:98:7b:1f:3f:30:5d:88:fb: 89:a9:8e:dc:8c:37:1a:48:cb:1c:c6:6a:a2:d7:39: 39:2e:77:69:34:c4:56:bd:b7:8d:c2:fa:eb:fd:7c: 30:56:28:ca:c5:2d:16:54:cb:6b:c4:7e:d6:4e:c5: 8b:69:a1:00:e9:af:39:4c:17:15:d5:27:85:1d:7a: 69:d9:ad:f4:70:3c:27:ea:08:8a:5b:7b:27:38:93: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B2:F8:58:9D:65:71:E1:DD:89:F6:88:26:AC:F2:8F:B0:94:35:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:75:a9:77:fa:0b:2f:d5:d8:0f:c9:fc:c9:ee:7a:ea:c8:7b: ba:af:f1:1d:c7:d5:48:ec:32:13:2b:8a:b8:f4:b2:60:2c:d1: b7:b8:6f:fc:54:9f:df:d3:e8:de:93:37:93:3d:01:25:e6:53: 8d:b3:5a:04:e3:3e:30:50:79:35:80:74:cf:61:c9:e7:75:a9: 0d:3d:74:64:51:a0:5d:71:e4:56:ba:79:bf:4c:18:7e:b5:2d: db:3f:b9:0c:49:8a:5c:4e:a9:fe:de:11:fd:45:65:03:2f:23: 73:7d:d1:c9:42:2a:54:58:9c:8f:44:6f:4a:88:ce:a1:59:ff: 8d:30:7e:7d:c6:72:53:78:db:ec:65:b3:19:b5:9b:6d:b5:50: 73:e0:48:2e:c8:b8:47:7b:2f:5b:ed:ab:c0:87:d6:06:42:e9: 14:e1:bd:3a:f3:64:34:48:10:84:f2:95:02:33:e4:bb:91:f7: 63:07:8c:97:b7:cb:79:73:ae:6f:55:f1:18:62:f9:11:45:23: 0a:d4:07:c0:0e:c5:fd:e1:00:73:45:15:62:dc:d6:e9:8f:1c: d0:1f:84:07:82:62:11:20:79:de:79:6e:9a:e5:07:74:70:40: 70:d9:01:f2:9d:58:49:35:3d:2f:44:26:2d:e9:46:65:8c:55: d7:d8:37:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh7gLZUh0FP7wYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzM0MDRiODItYmFmYy00YTE2LTkzYzItY2IzMzZjMmFiMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DLmzedK//KTXh65HXsO/ac+jchCnG4ZRRRJ 9rvDGbn/cV9m4rqeK5BLtdmY02gPj6v9d1dp27xIFDEQWsqhosAc0S8KkP0TCZMu 1D6QyTH8n76FFOBG+AGLb92IJ2ZrUeFS5OlQVlTrt3r5elmRKRk7fGlvuK/i2aop IylH90pzGt9r7vo4rHSRUUPNvVZB1QzCDBpiqz6lv5x+66pWBNn4H5aAUoEVRdQV mHsfPzBdiPuJqY7cjDcaSMscxmqi1zk5LndpNMRWvbeNwvrr/XwwVijKxS0WVMtr xH7WTsWLaaEA6a85TBcV1SeFHXpp2a30cDwn6giKW3snOJOuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6y+FidZXHh3Yn2iCas8o+wlDUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjBkNzFmYzYtNjNlMi0z NWI1LTg2NDItYzgwMjAwNTVlNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh1qXf6Cy/V2A/J/MnueurIe7qv8R3H1UjsMhMrirj0smAs0be4b/xU n9/T6N6TN5M9ASXmU42zWgTjPjBQeTWAdM9hyed1qQ09dGRRoF1x5Fa6eb9MGH61 Lds/uQxJilxOqf7eEf1FZQMvI3N90clCKlRYnI9Eb0qIzqFZ/40wfn3GclN42+xl sxm1m221UHPgSC7IuEd7L1vtq8CH1gZC6RThvTrzZDRIEITylQIz5LuR92MHjJe3 y3lzrm9V8Rhi+RFFIwrUB8AOxf3hAHNFFWLc1umPHNAfhAeCYhEged55bprlB3Rw QHDZAfKdWEk1PS9EJi3pRmWMVdfYN0s= -----END CERTIFICATE-----Generated at Sun Sep 27 10:47:51 2026 by rpki-client