$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33de3db1-d0fe-39ef-89aa-f4ab70180372.roa File: 33de3db1-d0fe-39ef-89aa-f4ab70180372.roa (raw, json) Hash identifier: BgCtRO8cFklbhKSGblfTQBbWOZ9gGhurOOFkV8KEkHM= Subject key identifier: 3B:0B:88:EF:61:40:A0:BA:14:A8:DA:13:4F:BA:F8:98:AB:23:BC:1B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F497469476D0DDBDE4B7384C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33de3db1-d0fe-39ef-89aa-f4ab70180372.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.62.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:69:47:6d:0d:db:de:4b:73:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c463d8b-e967-4cd9-b149-6f2515a83d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:be:1e:a8:10:01:ce:17:32:62:96:6a:8b: ca:9a:2c:0b:ae:07:85:20:68:3c:ff:10:8e:cf:f1: 76:a2:d3:e2:76:25:26:49:4c:47:df:5a:ae:38:a0: c1:a0:6c:9f:07:71:66:06:96:a6:6b:f7:0c:c9:00: 44:47:d9:a9:50:c6:cc:0f:ad:8d:5e:86:64:87:38: ca:39:44:f3:1c:9f:ac:a9:e6:b3:3e:95:0f:eb:62: 02:56:6c:77:f3:58:19:df:7e:79:a6:b4:24:9f:69: f0:7d:b0:12:27:fc:f5:b1:26:92:0b:87:e1:92:a1: c5:78:03:c5:93:e0:fe:8b:d5:0b:e2:91:a6:88:90: 3c:cf:01:13:6d:59:23:86:61:c3:3d:c8:c9:3c:74: e3:4d:ca:57:ba:09:7d:ac:23:1a:eb:69:98:bf:7e: bf:9d:59:cb:42:a1:f7:a7:37:d2:7b:d3:88:cf:4f: e8:bf:61:22:4a:83:f0:12:bc:b0:62:c3:21:f4:6f: 39:79:17:d1:4d:3a:75:96:3f:c8:94:77:99:78:ce: 3e:d8:5b:d3:bd:20:e0:24:79:84:ff:1b:4b:ca:0c: 38:fe:a7:97:0c:26:49:19:a2:48:8a:3d:29:62:17: 52:7d:fb:11:48:7c:45:0a:53:04:b2:e8:4b:30:93: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0B:88:EF:61:40:A0:BA:14:A8:DA:13:4F:BA:F8:98:AB:23:BC:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33de3db1-d0fe-39ef-89aa-f4ab70180372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ac:3f:90:d8:4a:98:4b:19:71:c5:d0:c4:23:38:4d:33:2a: 8c:22:2b:d8:bb:cd:d6:0d:96:5d:f2:5b:46:5c:67:f6:ad:72: de:69:2a:64:29:09:70:d7:6d:17:6c:71:1e:fc:6e:85:71:95: e6:60:d5:84:1b:a8:67:c0:6b:ca:a8:ba:c9:0c:f3:bc:f3:f9: c3:c5:5d:cc:d8:80:bb:fe:3c:22:b6:48:6d:9f:3e:57:fe:06: f7:41:77:6f:cc:ac:96:fa:34:45:0a:d9:a5:59:76:7c:73:4b: f6:82:8b:4e:f8:b7:96:9d:a2:41:8d:5b:f9:34:11:2d:04:2d: 0f:9e:c3:ca:f2:76:0c:9d:1a:48:13:8a:15:fb:f1:0a:79:fe: ce:b9:5b:d0:2f:d0:45:9a:c4:dc:b0:d7:a1:6b:25:e8:eb:85: 23:1d:be:73:ce:44:f9:6e:4f:53:52:82:91:9c:71:20:90:4a: 99:e9:3d:50:58:b3:be:b3:d5:6a:13:70:ec:9b:dd:1a:b2:21: 16:ef:3f:a2:48:f2:a1:a9:20:c9:c5:fb:d4:62:64:21:fc:80: ec:69:15:2e:a4:69:bf:53:c9:be:78:36:30:37:eb:88:aa:86: 7e:bc:3d:50:47:f0:74:08:92:a1:aa:5e:97:7e:d3:9c:54:51: 32:76:d0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGlHbQ3b3ktzhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM0NjNkOGItZTk2Ny00Y2Q5LWIxNDktNmYyNTE1YTgzZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBK+HqgQAc4XMmKWaovKmiwLrgeFIGg8/xCO z/F2otPidiUmSUxH31quOKDBoGyfB3FmBpama/cMyQBER9mpUMbMD62NXoZkhzjK OUTzHJ+sqeazPpUP62ICVmx381gZ3355prQkn2nwfbASJ/z1sSaSC4fhkqHFeAPF k+D+i9UL4pGmiJA8zwETbVkjhmHDPcjJPHTjTcpXugl9rCMa62mYv36/nVnLQqH3 pzfSe9OIz0/ov2EiSoPwErywYsMh9G85eRfRTTp1lj/IlHeZeM4+2FvTvSDgJHmE /xtLygw4/qeXDCZJGaJIij0pYhdSffsRSHxFClMEsuhLMJNxdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsLiO9hQKC6FKjaE0+6+JirI7wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzNkZTNkYjEtZDBmZS0z OWVmLTg5YWEtZjRhYjcwMTgwMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHasP5DYSphLGXHF0MQjOE0zKowiK9i7zdYNll3yW0ZcZ/atct5pKmQp CXDXbRdscR78boVxleZg1YQbqGfAa8qouskM87zz+cPFXczYgLv+PCK2SG2fPlf+ BvdBd2/MrJb6NEUK2aVZdnxzS/aCi074t5adokGNW/k0ES0ELQ+ew8rydgydGkgT ihX78Qp5/s65W9Av0EWaxNyw16FrJejrhSMdvnPORPluT1NSgpGccSCQSpnpPVBY s76z1WoTcOyb3RqyIRbvP6JI8qGpIMnF+9RiZCH8gOxpFS6kab9Tyb54NjA364iq hn68PVBH8HQIkqGqXpd+05xUUTJ20OQ= -----END CERTIFICATE-----Generated at Sat Oct 3 15:13:24 2026 by rpki-client