$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa File: bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa (raw, json) Hash identifier: uXh0sL5vDE1RsGqCYX0+q2X2cY6/rSFEWjA89REsVYs= Subject key identifier: B4:F0:9C:A4:9D:B6:18:0C:C9:7C:53:2B:23:19:2B:26:27:C2:47:13 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F498A230A0850D274382DCB00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 136.34.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:23:0a:08:50:d2:74:38:2d:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8aac363-63d0-47b9-af3d-04d8cdfb17cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:c5:9a:19:eb:e9:2e:3e:0c:66:74:b1:74: 32:a2:2a:60:44:d4:fb:86:d0:f0:4c:41:79:c5:6d: d4:e0:75:8b:14:89:38:4f:c2:6e:e4:b3:65:5b:cd: 15:19:72:c8:13:25:ac:1d:38:c0:19:be:19:1b:88: 36:54:31:3d:ab:60:e3:cb:1f:af:50:83:4e:bf:e1: 14:a0:06:e4:8e:8f:8a:27:f0:67:13:b2:72:ac:0d: 9d:d9:8c:97:74:70:4b:b9:38:10:b1:6c:a1:1b:9c: 2d:2b:59:b8:d8:62:39:6f:49:29:ac:ff:51:74:e8: e1:2b:87:51:e9:10:54:99:2a:e4:ab:ae:70:78:d7: 4a:77:6c:ec:f0:a7:7d:b8:95:b4:bc:6d:4b:a1:9a: 2a:d1:8c:8b:01:fc:fb:6e:c7:09:ba:95:ed:0e:eb: ae:17:4d:c0:82:bc:0a:89:cc:d9:ab:43:01:39:c7: 6d:81:dd:0b:6d:fc:8e:5c:f3:33:d1:91:1b:49:05: 42:8e:01:73:1e:79:7f:4b:de:1d:64:be:4c:6b:c7: 20:3d:6f:55:67:37:d8:94:c0:d9:11:b2:c1:4d:7d: 2e:0a:05:7d:a3:4e:69:0e:b0:d1:09:07:00:60:7e: 90:12:ea:20:16:ed:26:44:78:69:c3:00:5e:8d:0c: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F0:9C:A4:9D:B6:18:0C:C9:7C:53:2B:23:19:2B:26:27:C2:47:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:40:32:f5:65:54:79:a9:74:d7:0e:7f:e2:b4:4d:c2:e7:a8: f7:eb:eb:c0:4a:52:cb:7d:03:0e:21:10:4f:d1:52:20:71:9a: b3:f7:3b:ac:39:e2:18:be:b5:4a:5b:9c:8f:30:19:22:83:fe: 7a:15:06:dc:ad:a4:a5:82:14:dc:99:d5:63:43:41:33:f9:43: ed:f9:8b:7a:f8:b8:f0:fc:8f:b7:98:dd:15:84:0b:c0:50:9c: 72:7b:c7:5d:dc:7b:da:96:28:cf:c4:f6:b3:19:93:e7:f3:a2: c0:53:d8:a9:39:1f:67:20:0c:d2:fc:28:45:5e:70:40:e7:c2: af:67:53:03:e0:a0:11:a8:ea:48:b4:ea:30:b0:7b:f2:41:c7: 54:3d:43:de:3b:2b:be:91:41:92:ee:35:77:5b:5e:55:6c:1c: 18:da:d2:a1:1f:d2:20:d6:74:e9:19:de:60:49:49:6c:37:30: b0:a4:ae:25:f0:23:4f:b8:83:56:50:e9:74:50:85:5a:4a:2a: b5:41:c5:87:e9:09:b5:82:1a:15:f8:50:f4:f9:06:15:45:1d: c4:37:b4:5a:f3:76:89:b5:27:7a:2a:19:a7:b8:ae:cb:ad:05: fd:98:8f:22:24:57:2b:1f:13:dc:80:28:2d:e3:4e:e1:86:7c: 0f:61:59:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiiMKCFDSdDgtywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThhYWMzNjMtNjNkMC00N2I5LWFmM2QtMDRkOGNkZmIxN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B7Fmhnr6S4+DGZ0sXQyoipgRNT7htDwTEF5 xW3U4HWLFIk4T8Ju5LNlW80VGXLIEyWsHTjAGb4ZG4g2VDE9q2Djyx+vUINOv+EU oAbkjo+KJ/BnE7JyrA2d2YyXdHBLuTgQsWyhG5wtK1m42GI5b0kprP9RdOjhK4dR 6RBUmSrkq65weNdKd2zs8Kd9uJW0vG1LoZoq0YyLAfz7bscJupXtDuuuF03AgrwK iczZq0MBOcdtgd0LbfyOXPMz0ZEbSQVCjgFzHnl/S94dZL5Ma8cgPW9VZzfYlMDZ EbLBTX0uCgV9o05pDrDRCQcAYH6QEuogFu0mRHhpwwBejQy2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTwnKSdthgMyXxTKyMZKyYnwkcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmNkNjFiMDMtYzdiNS0z YzJhLWI1YWItNWI4NWRjYTg4ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJAMvVlVHmpdNcOf+K0TcLnqPfr68BKUst9Aw4hEE/RUiBxmrP3O6w5 4hi+tUpbnI8wGSKD/noVBtytpKWCFNyZ1WNDQTP5Q+35i3r4uPD8j7eY3RWEC8BQ nHJ7x13ce9qWKM/E9rMZk+fzosBT2Kk5H2cgDNL8KEVecEDnwq9nUwPgoBGo6ki0 6jCwe/JBx1Q9Q947K76RQZLuNXdbXlVsHBja0qEf0iDWdOkZ3mBJSWw3MLCkriXw I0+4g1ZQ6XRQhVpKKrVBxYfpCbWCGhX4UPT5BhVFHcQ3tFrzdom1J3oqGae4rsut Bf2YjyIkVysfE9yAKC3jTuGGfA9hWUE= -----END CERTIFICATE-----Generated at Sat Sep 26 18:31:38 2026 by rpki-client