$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa File: 2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json) Hash identifier: 4yFOiQJNd/Q0ic3qcVRJlHzIFX4BWeKDppkpQRomYLc= Subject key identifier: C4:F7:D3:DB:43:6E:21:C3:D0:93:8D:92:10:74:49:5A:A9:61:7F:77 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B15C10429110B60285540 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.57.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:15:c1:04:29:11:0b:60:28:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=4db0cd97-235a-4322-a49d-4a4d314b2ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:83:c0:c5:2a:66:9d:58:3e:7f:c8:d0:d2: da:fa:15:d5:95:8b:df:d9:1a:b0:18:04:a8:d9:39: ca:e3:44:cd:31:67:bc:7c:13:ec:c0:93:20:5b:fc: b2:fe:d7:28:6e:c4:de:96:3c:e5:33:d6:b8:24:48: d2:7d:a4:f3:9e:b3:c3:16:94:32:ad:3a:47:75:44: de:c5:0e:05:21:9a:01:d3:9a:7a:28:1e:22:df:f2: 94:5c:8e:c3:2b:52:b9:4c:7a:6e:f6:83:f7:0d:09: e7:c9:68:91:c2:1f:9a:10:76:e8:ff:50:3a:c8:fb: c2:1a:37:df:33:6f:59:d7:e4:4a:dc:f9:63:b1:35: 99:0c:df:e1:b0:42:bd:7d:7c:5d:90:3c:4c:0b:6a: 32:49:a6:22:6c:40:f8:03:44:d5:90:bb:e8:2e:ca: c1:80:6b:68:06:e8:2d:7d:a7:23:28:b5:53:53:a7: 4a:56:3e:f3:15:ae:ae:dd:24:cf:c4:d9:f9:31:e5: f2:5e:9a:ac:b7:7f:69:2e:b1:d8:4c:1d:de:e2:bf: e7:cb:ea:3f:55:19:f5:e5:93:25:25:11:75:1b:d0: 6e:68:08:ff:fa:ee:a6:22:96:c4:c2:4d:08:a0:24: 0f:5e:fe:ae:87:e8:e7:df:15:9b:fc:05:3d:4f:76: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F7:D3:DB:43:6E:21:C3:D0:93:8D:92:10:74:49:5A:A9:61:7F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:fb:19:be:7f:e1:7f:80:03:86:74:5b:a6:2c:7c:ed:f5:b8: 7a:40:8d:ea:3b:a6:92:5a:15:4a:0f:b0:a8:e8:5d:7c:6b:69: 0f:cc:1a:36:5b:df:c3:74:c8:f2:ab:a1:4f:12:2e:91:eb:8c: b2:62:6c:d7:91:3a:60:22:71:1c:89:69:2f:b3:92:dc:e7:13: a4:1d:13:ee:36:2d:12:b8:da:00:77:8c:44:0a:16:b5:c2:2f: 73:c2:f7:69:c5:5e:c2:58:64:af:be:6e:03:b0:f9:af:36:e4: f3:3d:93:66:f3:1b:49:21:63:6d:5c:3a:c8:72:71:d9:87:b7: 50:42:92:38:9b:50:25:b8:a5:34:35:42:f6:e4:a5:17:19:9f: 28:9d:a6:59:83:66:73:c9:33:1e:32:a1:eb:24:9d:da:3e:e2: db:a1:e7:24:33:4a:11:45:dc:7b:7f:ea:f1:77:6b:b6:4b:cf: ca:2b:a2:80:50:31:c9:a9:4b:55:42:54:b9:7c:cc:47:b8:da: ca:e2:dd:c1:f9:b3:fb:a8:2c:8f:d3:64:2f:91:77:2e:d2:0f: 41:cc:69:c0:da:87:5c:a0:01:55:84:43:38:2f:e4:39:23:b2: 45:ae:c2:60:d0:c4:43:f3:00:d5:99:64:28:75:03:79:af:1f: e0:38:91:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxXBBCkRC2AoVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NGRiMGNkOTctMjM1YS00MzIyLWE0OWQtNGE0ZDMxNGIyY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqiDwMUqZp1YPn/I0NLa+hXVlYvf2RqwGASo 2TnK40TNMWe8fBPswJMgW/yy/tcobsTeljzlM9a4JEjSfaTznrPDFpQyrTpHdUTe xQ4FIZoB05p6KB4i3/KUXI7DK1K5THpu9oP3DQnnyWiRwh+aEHbo/1A6yPvCGjff M29Z1+RK3PljsTWZDN/hsEK9fXxdkDxMC2oySaYibED4A0TVkLvoLsrBgGtoBugt facjKLVTU6dKVj7zFa6u3STPxNn5MeXyXpqst39pLrHYTB3e4r/ny+o/VRn15ZMl JRF1G9BuaAj/+u6mIpbEwk0IoCQPXv6uh+jn3xWb/AU9T3Yh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT309tDbiHD0JONkhB0SVqpYX93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjg0MGI4ZTktNjlhYi0z YThmLWFiODUtZjgzZDg1MmIwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ37Gb5/4X+AA4Z0W6YsfO31uHpAjeo7ppJaFUoPsKjoXXxraQ/MGjZb 38N0yPKroU8SLpHrjLJibNeROmAicRyJaS+zktznE6QdE+42LRK42gB3jEQKFrXC L3PC92nFXsJYZK++bgOw+a825PM9k2bzG0khY21cOshycdmHt1BCkjibUCW4pTQ1 QvbkpRcZnyidplmDZnPJMx4yoeskndo+4tuh5yQzShFF3Ht/6vF3a7ZLz8orooBQ McmpS1VCVLl8zEe42sri3cH5s/uoLI/TZC+Rdy7SD0HMacDah1ygAVWEQzgv5Dkj skWuwmDQxEPzANWZZCh1A3mvH+A4kfE= -----END CERTIFICATE-----Generated at Fri May 22 17:41:14 2026 by rpki-client