$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa File: 2a6696a7-932c-33f0-8980-bef83d9fb70c.roa (raw, json) Hash identifier: ikTs6dxaad0rXpTR2ALtzt9Bp4Tywj2FGoTvny+Skek= Subject key identifier: 8B:6E:3E:0E:64:E6:7A:69:37:A5:55:F6:2B:AA:19:8C:40:1E:DA:11 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B53FC49CBB9ED05BE3E00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.35.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:53:fc:49:cb:b9:ed:05:be:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=c7745795-2417-4e2e-9c4f-e07127b8a2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:92:d1:44:f9:ca:6e:e7:f7:21:30:8c:df: d6:dc:57:62:5c:e1:cf:df:40:cf:8c:19:27:53:59: 79:09:f2:c2:b2:9d:e2:5e:71:8f:ec:55:d1:a4:ec: cc:1f:41:ef:3e:4a:d0:32:7c:77:b5:95:37:c8:03: 59:59:4e:b0:42:9e:ba:d9:ff:72:28:38:8a:83:15: 94:27:8e:76:e1:b0:f3:0b:49:0a:7e:f2:8b:04:3c: 2b:47:50:db:ea:3c:9b:60:2e:34:d2:fa:24:0b:7b: f1:bd:09:b0:48:1b:ba:be:c6:db:f8:5c:37:73:f9: 6f:b4:24:99:23:b5:4c:53:6e:5f:b4:c9:34:43:88: f8:0a:a6:50:8b:cf:f7:76:d0:f6:1b:d4:87:4e:fb: eb:46:15:88:70:3c:49:1e:44:e5:44:cf:6a:6c:6e: c5:dc:40:3d:4f:bb:62:f6:ad:a0:21:5f:b0:ee:fe: ab:4d:61:ce:07:26:4d:a2:c7:43:a1:61:05:98:f2: fb:72:19:81:65:e8:1b:62:4b:ef:1f:77:84:f8:b5: 7c:5c:39:a8:92:3d:5c:f3:2d:4d:dd:c8:d6:b0:33: eb:20:6e:dd:b6:b5:5a:06:ec:53:0c:46:d7:0e:9d: f7:ed:4b:7f:d6:a4:fa:14:d4:f7:4a:89:45:43:da: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:3E:0E:64:E6:7A:69:37:A5:55:F6:2B:AA:19:8C:40:1E:DA:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8e:1d:b4:4a:9a:a0:a1:f0:08:ca:7c:14:0c:3b:76:79:26: 27:34:a3:84:b3:b1:ee:70:b4:53:9f:52:e8:82:a5:28:c1:ff: 7e:a2:77:fc:7e:c2:e2:21:d9:b5:b0:6c:90:89:22:40:3f:de: ca:e7:40:ba:61:0f:a8:59:0a:c8:0d:8c:66:17:41:c0:13:4e: 0b:8f:79:10:2d:14:2c:c3:a6:bd:5d:cd:38:22:ac:4b:e2:89: 70:97:39:bd:11:5b:cd:dc:2a:69:f5:c3:49:59:e6:44:a9:48: ce:b4:f4:80:29:f9:f7:de:8a:2c:60:f9:9e:0f:82:aa:b9:fb: 06:de:53:be:49:86:0e:2c:fd:c9:e6:e1:a7:a2:ce:92:c3:f7: 25:36:83:1a:a7:3e:6c:fa:df:20:bf:1a:b2:9f:8f:39:1a:44: 5a:ba:f3:17:fa:3a:ae:ac:64:45:7e:44:6c:35:30:c3:4d:cc: 67:32:41:0a:30:c1:0d:d8:77:77:c5:e2:85:51:f4:69:38:5e: 54:57:46:a1:0e:0e:57:53:86:dc:09:18:74:49:ba:4a:eb:7d: c2:bc:9c:a4:87:82:a3:b1:c9:4c:76:ca:05:17:c5:83:87:1b: 4f:b0:d4:a8:ce:b0:37:33:aa:aa:6b:c5:5a:cc:19:e8:54:1b: e9:49:06:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1P8Scu57QW+PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Yzc3NDU3OTUtMjQxNy00ZTJlLTljNGYtZTA3MTI3YjhhMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyqS0UT5ym7n9yEwjN/W3FdiXOHP30DPjBkn U1l5CfLCsp3iXnGP7FXRpOzMH0HvPkrQMnx3tZU3yANZWU6wQp662f9yKDiKgxWU J4524bDzC0kKfvKLBDwrR1Db6jybYC400vokC3vxvQmwSBu6vsbb+Fw3c/lvtCSZ I7VMU25ftMk0Q4j4CqZQi8/3dtD2G9SHTvvrRhWIcDxJHkTlRM9qbG7F3EA9T7ti 9q2gIV+w7v6rTWHOByZNosdDoWEFmPL7chmBZegbYkvvH3eE+LV8XDmokj1c8y1N 3cjWsDPrIG7dtrVaBuxTDEbXDp337Ut/1qT6FNT3SolFQ9qLNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItuPg5k5nppN6VV9iuqGYxAHtoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmE2Njk2YTctOTMyYy0z M2YwLTg5ODAtYmVmODNkOWZiNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKOHbRKmqCh8AjKfBQMO3Z5Jic0o4Szse5wtFOfUuiCpSjB/36id/x+ wuIh2bWwbJCJIkA/3srnQLphD6hZCsgNjGYXQcATTguPeRAtFCzDpr1dzTgirEvi iXCXOb0RW83cKmn1w0lZ5kSpSM609IAp+ffeiixg+Z4Pgqq5+wbeU75Jhg4s/cnm 4aeizpLD9yU2gxqnPmz63yC/GrKfjzkaRFq68xf6Oq6sZEV+RGw1MMNNzGcyQQow wQ3Yd3fF4oVR9Gk4XlRXRqEODldThtwJGHRJukrrfcK8nKSHgqOxyUx2ygUXxYOH G0+w1KjOsDczqqprxVrMGehUG+lJBoQ= -----END CERTIFICATE-----Generated at Fri May 22 17:39:02 2026 by rpki-client