$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ba059d3-8cbf-3efe-8b2f-89c194863927.roa File: 1ba059d3-8cbf-3efe-8b2f-89c194863927.roa (raw, json) Hash identifier: MDiF+mcbD8/qCgI04649vtj3EjC+IK/hp87RUhmznlM= Subject key identifier: D5:6C:3C:DD:DC:40:41:E2:E5:0F:C2:FB:C4:22:6C:1C:CE:97:10:70 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B19B74DF5205DFEC30E80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ba059d3-8cbf-3efe-8b2f-89c194863927.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.50.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:19:b7:4d:f5:20:5d:fe:c3:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=30fd20d1-2d7a-4d8e-a7f4-d6af27d7830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:e4:b4:7d:44:86:81:4b:4f:95:75:60:fe: 80:2c:7f:f3:4a:05:74:03:1f:79:31:4a:55:a5:61: 05:6a:5b:28:9a:2b:ee:7c:71:2e:67:72:6e:8a:38: 49:59:ef:c5:99:57:6a:ac:9f:2f:9c:94:fe:40:80: 52:57:8f:b3:1a:e3:ec:47:30:65:17:c0:76:a7:d6: ca:4f:23:75:e4:5b:6d:f3:b9:92:29:29:fc:4f:38: 09:fa:2e:0b:cc:c3:c7:23:6e:73:37:d2:ae:a2:cf: fa:d3:5d:75:55:58:50:b5:80:55:79:04:e5:b8:30: 06:e5:7d:b5:a8:f9:71:07:be:51:03:68:c5:1c:1a: f7:cb:c9:52:1f:3d:dc:e2:36:23:2a:91:61:01:51: c4:a1:fe:38:63:1e:fd:7b:6e:95:b9:71:e2:b8:c8: a4:d5:08:d8:b1:c8:53:93:4b:86:72:da:b7:b2:de: db:32:f2:47:a3:dc:5f:c3:e4:1c:6e:3a:c9:19:d2: 1d:6c:f0:d8:f2:dc:2f:fa:e8:6f:47:70:61:38:6e: 0b:65:34:7e:38:0e:61:ec:c2:85:1c:86:95:97:10: 95:86:71:e5:8f:dc:d5:87:bc:68:03:c6:c4:9e:0d: 83:11:12:c3:cf:71:50:3f:38:b2:0c:5d:73:38:d2: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:3C:DD:DC:40:41:E2:E5:0F:C2:FB:C4:22:6C:1C:CE:97:10:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ba059d3-8cbf-3efe-8b2f-89c194863927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a3:c9:43:bc:a7:ee:b8:95:3a:a6:bd:a6:da:d5:12:9d:a0: 48:c5:52:79:5c:82:c5:bc:49:c1:14:7c:2b:ca:f8:17:85:07: 59:a3:d9:52:ba:b9:8d:8c:11:0c:5f:b4:d8:5d:4a:15:70:b7: 53:ec:ab:bd:50:47:74:91:a2:38:e5:f2:66:22:15:f3:ee:de: c5:52:5f:da:d7:29:63:44:f6:80:ff:47:55:ef:90:c1:17:d7: 0d:21:af:3c:4d:55:e6:c7:6a:24:a7:d3:2b:86:82:e3:ea:22: 84:86:51:23:4b:d6:a1:f8:fe:e3:e4:9d:19:66:52:7a:f0:ab: a8:a3:7d:62:4b:e0:f3:44:fa:14:42:d1:fb:d5:2c:be:6f:0e: e5:c3:21:26:a9:14:66:27:2e:fe:cc:f6:27:fa:ef:13:e4:7b: 40:0f:ac:53:3c:e4:e4:4f:d0:ea:aa:24:68:ff:04:d1:c5:a6: fd:40:91:e1:67:90:2f:ae:95:d9:02:f3:79:51:e7:f4:fd:02: d1:8e:9e:02:e5:c3:17:3d:d9:80:3a:ea:e1:6c:11:2b:0f:4f: 59:ae:89:fe:b6:f2:7e:e2:c4:bb:34:87:76:5a:c2:a5:5b:fe: 28:f9:f7:06:74:df:19:3f:1a:33:7b:4e:c5:58:8d:f6:0a:0b: 83:1c:ad:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxm3TfUgXf7DDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MzBmZDIwZDEtMmQ3YS00ZDhlLWE3ZjQtZDZhZjI3ZDc4MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7jktH1EhoFLT5V1YP6ALH/zSgV0Ax95MUpV pWEFalsomivufHEuZ3JuijhJWe/FmVdqrJ8vnJT+QIBSV4+zGuPsRzBlF8B2p9bK TyN15Ftt87mSKSn8TzgJ+i4LzMPHI25zN9Kuos/60111VVhQtYBVeQTluDAG5X21 qPlxB75RA2jFHBr3y8lSHz3c4jYjKpFhAVHEof44Yx79e26VuXHiuMik1QjYschT k0uGctq3st7bMvJHo9xfw+QcbjrJGdIdbPDY8twv+uhvR3BhOG4LZTR+OA5h7MKF HIaVlxCVhnHlj9zVh7xoA8bEng2DERLDz3FQPziyDF1zONIPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVsPN3cQEHi5Q/C+8QibBzOlxBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWJhMDU5ZDMtOGNiZi0z ZWZlLThiMmYtODljMTk0ODYzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADajyUO8p+64lTqmvaba1RKdoEjFUnlcgsW8ScEUfCvK+BeFB1mj2VK6 uY2MEQxftNhdShVwt1Psq71QR3SRojjl8mYiFfPu3sVSX9rXKWNE9oD/R1XvkMEX 1w0hrzxNVebHaiSn0yuGguPqIoSGUSNL1qH4/uPknRlmUnrwq6ijfWJL4PNE+hRC 0fvVLL5vDuXDISapFGYnLv7M9if67xPke0APrFM85ORP0OqqJGj/BNHFpv1AkeFn kC+uldkC83lR5/T9AtGOngLlwxc92YA66uFsESsPT1muif628n7ixLs0h3ZawqVb /ij59wZ03xk/GjN7TsVYjfYKC4McrSs= -----END CERTIFICATE-----Generated at Fri May 22 18:29:19 2026 by rpki-client