$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa File: 2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa (raw, json) Hash identifier: 0q3ePDFOpvFnYUbj6AMx/lczl2LOb82s2EY8Gu1z/eM= Subject key identifier: 58:B1:32:DF:E4:64:E5:28:08:3A:69:52:96:50:90:F0:64:89:B4:DD Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B14D5C2DDE3E9FD2A6C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.50.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:14:d5:c2:dd:e3:e9:fd:2a:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=06a4984c-d51a-429e-a4ce-a2964d0e559e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:18:43:7d:bb:1f:5f:e0:f4:af:66:28:3b: d6:0f:e3:53:38:ca:cb:da:b6:2f:96:dc:e0:a7:8e: 89:c1:4e:0c:c6:16:6b:4a:7d:65:ad:13:4b:54:31: 07:fd:b6:f0:68:f1:84:c9:a3:85:70:da:a9:e8:0e: 7d:1c:b7:1d:a9:03:18:7e:a4:4d:5a:28:f1:6b:14: f0:23:47:45:a7:b1:06:fb:b4:5f:99:ef:3a:03:04: cc:36:a0:13:83:e6:a5:ca:d6:1a:f1:c1:07:d9:aa: 00:16:31:c6:c6:ba:08:68:00:35:53:99:24:53:e6: e5:c2:77:28:8f:94:64:b4:5a:a2:68:e4:58:b7:1c: 96:f3:5f:0c:7a:76:74:cb:d8:38:28:b0:4f:48:10: b5:e1:b0:8c:16:0d:c7:2b:71:44:b6:8a:2a:db:a7: e9:e2:5b:3e:65:34:53:0a:2a:9b:5b:15:c7:01:76: d6:ae:bc:08:6d:fa:83:db:13:ce:5b:e0:fd:f6:ee: c1:35:d4:4e:b6:0c:70:b1:c9:49:a8:36:5c:ff:b4: 62:64:26:6a:b1:9a:08:9b:87:c6:5d:d0:2d:b6:73: 40:29:18:5e:7b:0d:16:76:01:80:4e:cb:d7:ae:f7: 47:e9:5d:8b:2c:e1:36:1e:10:10:82:8a:a4:98:15: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:32:DF:E4:64:E5:28:08:3A:69:52:96:50:90:F0:64:89:B4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9d:7b:2d:bf:7d:1d:4d:af:9a:37:f7:b6:a0:58:96:bc:fa: cc:75:f5:b7:aa:96:e3:d0:1c:fa:69:a6:dc:35:00:a3:65:68: f2:4d:c5:2a:bd:a2:53:58:48:05:c1:74:33:13:97:c2:1d:82: cb:20:e0:92:0c:c3:ec:42:c6:74:20:86:fe:c9:30:19:b8:55: d4:04:8c:61:74:b4:d7:f4:87:76:f5:e8:0c:55:f3:80:94:af: 7f:71:0a:bd:dd:a4:a4:53:89:fa:03:41:56:95:2c:b2:45:bf: 87:05:4c:a0:d9:9e:90:df:5f:d3:91:5c:b8:7c:7a:eb:20:ba: e8:97:15:6d:38:de:e6:16:80:5e:95:bd:8f:fc:34:df:4c:1d: 28:d1:6a:0f:7c:43:86:76:5c:95:57:98:a7:ea:8c:73:5e:65: 8c:5c:e1:7d:98:c5:f1:4d:43:4a:37:6e:93:02:c4:b6:56:e3: 6e:62:e2:bb:b9:0d:ee:91:20:45:cd:9e:5c:52:b5:16:02:90: 74:2e:1a:d2:bc:48:0f:32:9d:a0:db:9b:89:aa:52:48:9e:ad: 8a:8d:e6:ae:48:b9:b1:27:a3:66:57:a6:9d:58:23:ba:22:b5: b9:4c:0c:01:f9:d2:a2:bd:76:83:cf:3b:f2:a2:d4:5e:22:ac: b2:74:b5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxTVwt3j6f0qbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MDZhNDk4NGMtZDUxYS00MjllLWE0Y2UtYTI5NjRkMGU1NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi8YQ327H1/g9K9mKDvWD+NTOMrL2rYvltzg p46JwU4MxhZrSn1lrRNLVDEH/bbwaPGEyaOFcNqp6A59HLcdqQMYfqRNWijxaxTw I0dFp7EG+7Rfme86AwTMNqATg+alytYa8cEH2aoAFjHGxroIaAA1U5kkU+blwnco j5RktFqiaORYtxyW818MenZ0y9g4KLBPSBC14bCMFg3HK3FEtooq26fp4ls+ZTRT CiqbWxXHAXbWrrwIbfqD2xPOW+D99u7BNdROtgxwsclJqDZc/7RiZCZqsZoIm4fG XdAttnNAKRheew0WdgGATsvXrvdH6V2LLOE2HhAQgoqkmBW+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFixMt/kZOUoCDppUpZQkPBkibTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmQxMjNhOTgtNDg0Ny0z Y2Y1LThmMzMtNzUwOGNkMWQzMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+dey2/fR1Nr5o397agWJa8+sx19beqluPQHPppptw1AKNlaPJNxSq9 olNYSAXBdDMTl8Idgssg4JIMw+xCxnQghv7JMBm4VdQEjGF0tNf0h3b16AxV84CU r39xCr3dpKRTifoDQVaVLLJFv4cFTKDZnpDfX9ORXLh8eusguuiXFW043uYWgF6V vY/8NN9MHSjRag98Q4Z2XJVXmKfqjHNeZYxc4X2YxfFNQ0o3bpMCxLZW425i4ru5 De6RIEXNnlxStRYCkHQuGtK8SA8ynaDbm4mqUkierYqN5q5IubEno2ZXpp1YI7oi tblMDAH50qK9doPPO/Ki1F4irLJ0teo= -----END CERTIFICATE-----Generated at Fri May 22 17:39:01 2026 by rpki-client