$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa File: 128a74c3-e6aa-3d06-ac4a-655a48640308.roa (raw, json) Hash identifier: pI5l3Q0HUYxgIGxiRn062bzP66xgpWWXrskRFGTOH60= Subject key identifier: F1:DE:48:6C:FF:93:0D:CA:E6:85:F4:E3:46:D7:B7:7C:8A:79:8F:08 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2A068D9AA7ED3F95DF40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.33.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2a:06:8d:9a:a7:ed:3f:95:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=4ecd61dc-3fa8-4037-9585-385a4976ebee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d5:38:0a:aa:f3:6c:25:cf:40:fb:0a:b7:c5: 6f:1b:2e:62:c3:10:85:a1:fd:67:38:09:87:95:61: 87:19:2b:97:9d:d2:1f:ce:52:4b:0a:f0:27:2a:99: 4e:ca:4e:7a:58:7d:ed:fd:1f:9b:91:e3:2a:0d:80: e4:15:ec:25:41:a0:fa:b2:5d:e8:44:da:94:f6:ef: 27:a7:93:78:94:4c:bc:ec:46:17:12:bb:95:8b:ca: bc:49:6f:1e:71:44:db:14:a3:3a:83:01:c8:34:07: 08:b9:7e:b8:3f:21:fd:a2:66:4c:5a:1c:75:4a:a9: 02:52:3c:46:61:9d:1a:a9:39:14:b4:a1:ac:4b:fd: 45:0b:db:1a:6b:4f:a1:0e:38:a0:7f:3f:e1:8c:2c: ea:de:68:dc:3c:33:16:16:9d:2d:27:70:27:41:08: 2d:81:0b:5b:1e:cf:83:d4:d3:4f:5b:3e:e7:3c:ff: cd:45:76:01:1e:94:fa:01:bc:2d:a5:f0:7a:68:ae: e7:ce:ba:19:3c:6e:38:97:51:61:f8:26:62:23:af: d3:c3:8e:75:8a:3b:de:bc:a5:70:03:01:46:d4:b2: 37:cb:df:1d:e4:d3:bc:59:83:b1:3f:8a:51:9e:54: 4b:40:8d:a7:3e:8f:d0:23:29:70:5e:98:ae:96:2d: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:48:6C:FF:93:0D:CA:E6:85:F4:E3:46:D7:B7:7C:8A:79:8F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:70:b8:3a:ae:bc:78:4b:65:81:c3:ea:5d:3a:90:d7:ff:7c: 1c:2e:8e:60:05:01:6d:3b:62:ce:41:c4:da:18:6e:2c:ad:3f: b2:0d:94:6c:e9:91:67:6e:8e:d7:0f:2d:d1:a4:13:96:de:43: a2:e9:be:df:ae:ae:9e:b8:c0:a4:d6:86:89:18:d9:ef:5e:c6: 4c:e2:b1:d0:b0:a6:f6:93:b3:ef:fa:7a:ba:05:40:fb:3d:6d: 64:e5:60:26:6e:cb:58:43:cc:99:a6:17:fe:71:bd:47:a0:10: 4c:af:ba:cc:ac:a8:91:c3:93:00:a2:6d:e4:37:cc:9d:6c:75: b9:99:b5:99:c5:80:c7:a2:89:2b:11:b1:90:92:a3:27:00:99: e2:77:7b:8e:8f:c1:87:be:1c:d8:4e:a8:13:12:be:65:35:56: 71:c5:e5:3a:f6:42:70:de:ba:af:b9:73:2d:42:ec:0c:91:1a: 6b:f0:c8:68:36:9b:26:88:f5:ef:65:33:9b:5e:00:e0:7f:b4: d3:ed:8c:e2:09:16:02:7c:c4:ac:96:55:4e:23:e2:0d:0d:68: 94:9c:c1:fb:e8:99:32:4e:a3:7f:0b:d5:e9:38:a2:97:c4:92: 29:85:b4:e7:60:1e:01:f2:2e:49:44:a8:9e:72:28:7e:77:15: 51:e5:29:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyoGjZqn7T+V30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NGVjZDYxZGMtM2ZhOC00MDM3LTk1ODUtMzg1YTQ5NzZlYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdU4CqrzbCXPQPsKt8VvGy5iwxCFof1nOAmH lWGHGSuXndIfzlJLCvAnKplOyk56WH3t/R+bkeMqDYDkFewlQaD6sl3oRNqU9u8n p5N4lEy87EYXEruVi8q8SW8ecUTbFKM6gwHINAcIuX64PyH9omZMWhx1SqkCUjxG YZ0aqTkUtKGsS/1FC9saa0+hDjigfz/hjCzq3mjcPDMWFp0tJ3AnQQgtgQtbHs+D 1NNPWz7nPP/NRXYBHpT6AbwtpfB6aK7nzroZPG44l1Fh+CZiI6/Tw451ijvevKVw AwFG1LI3y98d5NO8WYOxP4pRnlRLQI2nPo/QIylwXpiuli3C8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHeSGz/kw3K5oX040bXt3yKeY8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTI4YTc0YzMtZTZhYS0z ZDA2LWFjNGEtNjU1YTQ4NjQwMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpwuDquvHhLZYHD6l06kNf/fBwujmAFAW07Ys5BxNoYbiytP7INlGzp kWdujtcPLdGkE5beQ6Lpvt+urp64wKTWhokY2e9exkzisdCwpvaTs+/6eroFQPs9 bWTlYCZuy1hDzJmmF/5xvUegEEyvusysqJHDkwCibeQ3zJ1sdbmZtZnFgMeiiSsR sZCSoycAmeJ3e46PwYe+HNhOqBMSvmU1VnHF5Tr2QnDeuq+5cy1C7AyRGmvwyGg2 myaI9e9lM5teAOB/tNPtjOIJFgJ8xKyWVU4j4g0NaJScwfvomTJOo38L1ek4opfE kimFtOdgHgHyLklEqJ5yKH53FVHlKVQ= -----END CERTIFICATE-----Generated at Fri May 22 17:38:22 2026 by rpki-client