$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3282e0ee-77d2-3b5a-8b25-f1b6abf8c075.roa File: 3282e0ee-77d2-3b5a-8b25-f1b6abf8c075.roa (raw, json) Hash identifier: cXzumSvY1Px4sRfyZ2Lyb5ZiYxHMFB+q+RRROsEoRWY= Subject key identifier: 17:70:E5:FA:F3:D9:1F:9E:FB:CE:44:58:DB:07:3C:F0:3B:F0:42:43 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B5795572088DE077B1D00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3282e0ee-77d2-3b5a-8b25-f1b6abf8c075.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.36.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:57:95:57:20:88:de:07:7b:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=c76518b6-3fc7-49ed-8d2e-4de2d160cf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:b7:77:91:85:85:5d:1a:9b:60:af:f9:90: 50:05:ba:27:75:84:c6:55:1e:df:5a:41:81:09:3e: e3:2f:d4:60:60:ce:ee:2d:f5:5b:74:09:f7:36:7a: 52:17:a6:8b:a7:eb:9c:c7:5e:1d:2f:6f:72:aa:df: c5:da:b6:bc:65:ee:65:a8:49:e4:bc:1a:8f:36:54: 82:1a:93:d2:66:a7:64:cf:2a:fe:15:ba:ab:ba:7f: 79:0b:cd:17:cc:d0:e3:dd:c9:02:e6:2a:c6:bd:24: f6:de:d9:63:2c:27:be:54:c4:59:97:cd:7b:53:86: 5a:af:89:bf:fc:ca:10:ea:3a:48:8f:cd:3f:b3:c7: b2:ab:19:b8:93:13:5a:96:ca:65:cd:f1:98:13:76: 68:eb:c7:f1:1f:be:39:e8:d2:d9:88:4c:16:c0:02: ae:d2:b9:53:e8:38:5b:66:2d:17:82:89:2d:da:32: 25:ff:70:bd:78:31:20:6b:7e:14:36:c2:a8:ef:fe: 46:b2:a3:cd:43:b3:b1:c0:9c:1c:8d:5c:ff:69:39: ea:ca:c2:c7:22:66:01:64:92:df:ef:3f:20:46:97: d0:91:18:70:76:32:e9:6f:6c:99:2e:a5:69:0a:47: 25:61:a3:7c:f3:57:55:f3:e6:3a:68:d3:2a:8b:16: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:E5:FA:F3:D9:1F:9E:FB:CE:44:58:DB:07:3C:F0:3B:F0:42:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3282e0ee-77d2-3b5a-8b25-f1b6abf8c075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:38:0f:46:2d:0a:a4:20:0c:1c:b9:60:17:4d:ae:12:ec:a2: 53:c2:5c:5c:29:db:6c:c0:47:6d:81:68:7e:05:03:97:0e:2d: 5a:78:c8:f8:47:a9:16:ea:78:4d:2d:45:83:1f:fd:d5:3e:ef: bc:8e:27:c5:09:de:60:aa:58:3c:13:c7:73:a6:40:69:a5:07: 18:3a:22:e3:b0:3f:2c:a8:a0:c6:19:8c:f0:ee:3e:67:0c:c4: 1e:45:12:17:1e:1f:7c:a1:8e:45:96:45:9a:6b:f7:5d:2e:a2: 7c:c8:af:d8:1c:bd:97:78:ff:ad:9a:54:69:71:09:71:bc:64: f0:6e:5a:50:14:25:50:4d:32:c8:d5:55:ea:13:ee:16:42:97: f3:59:44:b8:29:1c:7d:8b:64:26:a2:22:28:80:95:ed:9c:1b: 33:cb:b6:62:b8:ca:f1:04:37:a5:dc:f2:c8:0f:cc:bf:02:8d: ef:1b:fd:58:78:d0:34:51:be:15:af:ba:0b:f2:94:77:39:94: b8:4a:27:21:c8:6e:4a:0e:75:e6:99:d5:86:c5:c5:47:22:11: 48:0f:1e:b8:f7:21:19:53:63:c6:37:f0:f2:53:e7:88:b8:c6: ab:94:be:25:ee:00:1f:84:b4:02:57:c7:26:d8:8f:78:ab:5f: fe:48:6c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1eVVyCI3gd7HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Yzc2NTE4YjYtM2ZjNy00OWVkLThkMmUtNGRlMmQxNjBjZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDy3d5GFhV0am2Cv+ZBQBbondYTGVR7fWkGB CT7jL9RgYM7uLfVbdAn3NnpSF6aLp+ucx14dL29yqt/F2ra8Ze5lqEnkvBqPNlSC GpPSZqdkzyr+Fbqrun95C80XzNDj3ckC5irGvST23tljLCe+VMRZl817U4Zar4m/ /MoQ6jpIj80/s8eyqxm4kxNalsplzfGYE3Zo68fxH7456NLZiEwWwAKu0rlT6Dhb Zi0Xgokt2jIl/3C9eDEga34UNsKo7/5GsqPNQ7OxwJwcjVz/aTnqysLHImYBZJLf 7z8gRpfQkRhwdjLpb2yZLqVpCkclYaN881dV8+Y6aNMqixbvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdw5frz2R+e+85EWNsHPPA78EJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzI4MmUwZWUtNzdkMi0z YjVhLThiMjUtZjFiNmFiZjhjMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC84D0YtCqQgDBy5YBdNrhLsolPCXFwp22zAR22BaH4FA5cOLVp4yPhH qRbqeE0tRYMf/dU+77yOJ8UJ3mCqWDwTx3OmQGmlBxg6IuOwPyyooMYZjPDuPmcM xB5FEhceH3yhjkWWRZpr910uonzIr9gcvZd4/62aVGlxCXG8ZPBuWlAUJVBNMsjV VeoT7hZCl/NZRLgpHH2LZCaiIiiAle2cGzPLtmK4yvEEN6Xc8sgPzL8Cje8b/Vh4 0DRRvhWvugvylHc5lLhKJyHIbkoOdeaZ1YbFxUciEUgPHrj3IRlTY8Y38PJT54i4 xquUviXuAB+EtAJXxybYj3irX/5IbNI= -----END CERTIFICATE-----Generated at Fri May 22 17:40:29 2026 by rpki-client