$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbec4946-4c94-3beb-a180-9cc9e4007f63.roa File: bbec4946-4c94-3beb-a180-9cc9e4007f63.roa (raw, json) Hash identifier: ouK06VoG5XOaUBMoUyVvhiNqh2qfohRgCTUAJi8D8GI= Subject key identifier: B2:68:2A:E6:F3:EB:10:97:E8:8B:C2:3E:49:0E:06:D9:90:89:36:22 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F49878712BE486DD175BD3B30 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbec4946-4c94-3beb-a180-9cc9e4007f63.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.33.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:87:12:be:48:6d:d1:75:bd:3b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ecb23d46-3888-40c7-8397-1c2d36e4d940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:92:fe:dc:08:c1:22:ea:1b:be:17:28:7b: f9:be:d7:d7:e5:3a:a4:ef:34:28:9e:9a:b8:8f:aa: 36:1b:d2:ef:1e:98:ff:e1:10:08:4c:df:00:86:d1: 05:c7:4e:6e:17:0f:dc:43:2c:98:ef:10:ec:73:ab: 3e:bb:b3:07:64:3e:ac:71:c3:74:44:82:21:fa:7a: 85:2e:3b:47:f6:b9:3e:98:3d:da:6b:95:e1:68:02: 7f:f7:b2:52:7c:9a:da:a1:8a:82:47:86:03:91:55: 6b:6d:df:26:71:67:21:a0:e4:48:c4:e0:98:9e:67: a7:b6:84:5c:08:e0:97:b5:90:a0:0c:91:de:03:af: a2:99:b5:07:86:1f:52:00:81:97:da:c1:e3:e7:8c: 36:12:66:e8:9f:6a:36:e1:28:13:30:7d:c5:b3:12: 96:55:67:bf:81:3f:c1:df:a2:e8:41:66:f1:48:1c: 10:40:c0:af:9b:da:03:83:57:01:23:bd:f8:80:5a: 19:a2:d9:06:98:26:99:a2:e9:d9:36:3f:31:49:3f: f7:b8:fd:c6:67:14:9a:d4:a6:ac:88:22:07:54:dd: 48:b7:28:a7:25:87:15:9d:83:bf:ea:6f:21:aa:37: 8d:58:6c:e4:54:40:7a:92:37:18:2e:4e:e5:47:b7: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:68:2A:E6:F3:EB:10:97:E8:8B:C2:3E:49:0E:06:D9:90:89:36:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbec4946-4c94-3beb-a180-9cc9e4007f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f8:57:2c:2b:0e:b3:d2:cf:39:5a:2a:fd:3a:d9:04:a5:94: 7f:d8:99:19:4f:4d:1d:c0:94:f9:64:35:6d:73:b1:eb:02:38: 79:0a:fa:e2:76:22:aa:32:04:83:f0:9d:09:c0:17:34:b0:b4: 71:1b:7f:75:f5:ff:3b:76:22:0a:7f:b5:b0:38:6d:b1:29:49: b3:bf:da:36:89:bb:c3:ff:70:92:4f:33:44:bc:cc:e9:90:45: 2b:79:34:d3:9b:a4:e3:9a:29:ce:5c:1b:05:da:4b:f0:4c:45: 20:4b:ef:97:29:7d:f7:d3:64:08:cb:31:26:9f:23:dd:67:f8: 71:3a:a1:1e:5e:8f:ad:56:9a:48:27:69:f3:d3:bc:ab:77:1b: 0a:ec:9f:23:4e:eb:46:2c:4a:ce:cb:eb:d2:2f:d8:87:93:b7: 19:29:a3:67:b3:8e:69:48:bf:e9:ba:8b:96:68:42:f7:63:14: 43:11:81:9f:6a:f8:ba:70:71:3d:0e:1b:7e:0d:d6:c4:7e:90: 8d:67:cd:19:3c:ae:05:1b:2f:40:23:66:21:aa:01:40:83:cc: ed:d9:8c:6d:6a:5d:cd:bc:2f:1c:4e:0c:f8:cd:5a:b2:88:17: eb:aa:87:e1:9c:e7:6e:38:c9:9d:4a:22:f0:88:e7:57:3e:14: a6:d7:1a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4cSvkht0XW9OzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWNiMjNkNDYtMzg4OC00MGM3LTgzOTctMWMyZDM2ZTRkOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUuS/twIwSLqG74XKHv5vtfX5Tqk7zQonpq4 j6o2G9LvHpj/4RAITN8AhtEFx05uFw/cQyyY7xDsc6s+u7MHZD6sccN0RIIh+nqF LjtH9rk+mD3aa5XhaAJ/97JSfJraoYqCR4YDkVVrbd8mcWchoORIxOCYnmentoRc COCXtZCgDJHeA6+imbUHhh9SAIGX2sHj54w2Embon2o24SgTMH3FsxKWVWe/gT/B 36LoQWbxSBwQQMCvm9oDg1cBI734gFoZotkGmCaZounZNj8xST/3uP3GZxSa1Kas iCIHVN1ItyinJYcVnYO/6m8hqjeNWGzkVEB6kjcYLk7lR7dolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJoKubz6xCX6IvCPkkOBtmQiTYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmJlYzQ5NDYtNGM5NC0z YmViLWExODAtOWNjOWU0MDA3ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP4VywrDrPSzzlaKv062QSllH/YmRlPTR3AlPlkNW1zsesCOHkK+uJ2 IqoyBIPwnQnAFzSwtHEbf3X1/zt2Igp/tbA4bbEpSbO/2jaJu8P/cJJPM0S8zOmQ RSt5NNObpOOaKc5cGwXaS/BMRSBL75cpfffTZAjLMSafI91n+HE6oR5ej61Wmkgn afPTvKt3GwrsnyNO60YsSs7L69Iv2IeTtxkpo2ezjmlIv+m6i5ZoQvdjFEMRgZ9q +LpwcT0OG34N1sR+kI1nzRk8rgUbL0AjZiGqAUCDzO3ZjG1qXc28LxxODPjNWrKI F+uqh+Gc5244yZ1KIvCI51c+FKbXGvk= -----END CERTIFICATE-----Generated at Sun Sep 27 01:07:57 2026 by rpki-client