$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa File: 068d604b-d85c-3d51-9045-97b9c36167a9.roa (raw, json) Hash identifier: LOxPrM2j/IdLGjqfpT+tHWDVUw0jPn/oct98rY5LrG8= Subject key identifier: D6:0B:3B:6B:E9:D4:58:1A:D3:C6:BC:9D:55:E2:34:B7:9D:66:2E:6D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B624ABC2C4CF0CE6D4C80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.35.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:62:4a:bc:2c:4c:f0:ce:6d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=9a5d326d-e339-4c18-bb3f-a0d803578098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:4d:96:52:c3:62:5f:e3:93:c4:99:b4:f9: 88:0e:1b:e7:e9:3c:2a:9a:aa:b1:0a:2d:35:b9:b9: 1b:b0:71:12:b7:4a:f4:a4:36:9a:74:41:48:bf:03: 6d:fa:e6:14:96:04:29:d4:a8:c3:2e:5a:67:bf:bb: be:2b:bc:f5:aa:20:f5:25:c3:4c:ed:a5:1a:f8:fc: 25:82:67:fa:93:c0:28:8d:4c:41:3d:43:55:ee:1b: ea:6a:9e:27:bf:9b:ad:92:b8:0d:40:6d:6c:38:05: f9:1a:79:11:08:c2:15:e2:43:e8:8e:30:00:93:f8: 43:78:fa:08:c3:81:74:b8:02:f1:ac:a0:1f:bb:65: 66:b4:b5:1a:71:a1:22:e7:e9:5e:cd:40:95:51:1e: b6:a9:70:41:e9:09:8f:e2:82:e4:09:a4:09:3e:d0: 8f:a4:6c:e4:87:18:2d:ac:f6:e2:19:a4:ee:9c:aa: 87:49:67:5c:5a:73:a8:e1:d4:f5:d8:f6:da:9d:e1: 80:fc:15:16:2e:c0:fa:d8:b9:a4:08:df:6b:39:62: 0c:27:b7:ba:0c:9e:ca:d6:ca:0b:c8:65:ad:0a:03: 3e:5a:d3:e5:7f:df:76:fd:28:32:a9:a1:e4:bf:d6: e9:10:7d:a9:a4:06:91:47:38:eb:01:47:df:ca:f9: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0B:3B:6B:E9:D4:58:1A:D3:C6:BC:9D:55:E2:34:B7:9D:66:2E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b7:44:71:e6:a0:15:86:d7:b1:8f:40:52:81:88:85:2b:35: 98:40:3e:20:93:ac:07:3b:1e:2c:3a:68:0f:ec:bd:b2:13:12: 9d:67:7a:98:2a:eb:ac:f3:18:0a:b5:9f:4b:d6:53:a4:00:76: e8:a9:cb:cf:9c:70:07:4c:a7:f3:70:aa:0c:ed:b4:71:7e:e2: 03:7d:27:8d:9b:3c:2a:57:fb:36:a7:5f:6f:dc:fe:3e:3c:48: 1e:25:05:3e:2c:54:2d:7c:eb:a8:ea:ca:be:4b:0d:1f:dc:a4: ea:98:34:90:5f:7f:95:46:26:5d:55:a4:67:f5:63:53:4f:d4: a7:9f:76:db:97:e7:03:90:da:54:fa:1e:0b:6b:52:24:09:f3: e4:9f:92:3e:ad:dd:bb:05:83:25:2a:b1:6b:e5:73:20:3a:fc: 3a:00:d9:92:e6:d9:66:1f:42:2d:40:6f:6a:a3:73:e0:ac:0a: cf:ae:4c:49:ce:92:63:3a:12:ec:ac:e7:9c:f2:02:27:0d:57: 90:77:64:f5:e5:3a:e0:ea:88:ee:94:bc:67:59:88:13:c3:6f: 31:d0:d4:e7:0e:d9:d2:c7:dc:74:99:29:18:f8:e7:36:23:25: 17:7b:f0:3c:5b:12:b5:13:1a:64:35:45:2c:e9:d2:87:1f:f8: d2:a7:e9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2JKvCxM8M5tTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk OWE1ZDMyNmQtZTMzOS00YzE4LWJiM2YtYTBkODAzNTc4MDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzdNllLDYl/jk8SZtPmIDhvn6TwqmqqxCi01 ubkbsHESt0r0pDaadEFIvwNt+uYUlgQp1KjDLlpnv7u+K7z1qiD1JcNM7aUa+Pwl gmf6k8AojUxBPUNV7hvqap4nv5utkrgNQG1sOAX5GnkRCMIV4kPojjAAk/hDePoI w4F0uALxrKAfu2VmtLUacaEi5+lezUCVUR62qXBB6QmP4oLkCaQJPtCPpGzkhxgt rPbiGaTunKqHSWdcWnOo4dT12PbaneGA/BUWLsD62LmkCN9rOWIMJ7e6DJ7K1soL yGWtCgM+WtPlf992/SgyqaHkv9bpEH2ppAaRRzjrAUffyvlglwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYLO2vp1Fga08a8nVXiNLedZi5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDY4ZDYwNGItZDg1Yy0z ZDUxLTkwNDUtOTdiOWMzNjE2N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC3RHHmoBWG17GPQFKBiIUrNZhAPiCTrAc7Hiw6aA/svbITEp1nepgq 66zzGAq1n0vWU6QAduipy8+ccAdMp/NwqgzttHF+4gN9J42bPCpX+zanX2/c/j48 SB4lBT4sVC1866jqyr5LDR/cpOqYNJBff5VGJl1VpGf1Y1NP1KefdtuX5wOQ2lT6 HgtrUiQJ8+Sfkj6t3bsFgyUqsWvlcyA6/DoA2ZLm2WYfQi1Ab2qjc+CsCs+uTEnO kmM6Euys55zyAicNV5B3ZPXlOuDqiO6UvGdZiBPDbzHQ1OcO2dLH3HSZKRj45zYj JRd78DxbErUTGmQ1RSzp0ocf+NKn6ZE= -----END CERTIFICATE-----Generated at Fri May 22 18:30:54 2026 by rpki-client