$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa File: 33fa41b8-82e8-3942-8551-e56832c3b17b.roa (raw, json) Hash identifier: arFGwlJvHBEhrpmt3nlK0m6WIPhsNSotZnrrczaPbuE= Subject key identifier: 48:8D:BD:E3:47:93:9D:61:0A:E1:6D:1E:35:B7:A9:A0:AD:EF:30:A5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B6230B7656D65A9695680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.57.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:62:30:b7:65:6d:65:a9:69:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=5632d831-6037-4986-a720-d23ce14cf17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:a3:ab:d8:c2:12:f5:b7:bd:68:4e:c7:8d: df:ea:76:60:f7:c3:e2:81:3b:1b:fb:e4:ea:3f:0f: 33:1a:89:70:55:2c:c7:fc:8d:3e:e8:d0:20:66:5f: 6c:d2:33:b8:a9:45:ff:75:93:5a:94:eb:13:1d:29: 36:f0:be:bc:c5:84:53:fd:c8:6e:a0:01:bb:3f:5b: 06:2e:c1:57:45:d0:14:d9:6f:13:76:cc:f8:3c:a2: 8c:c6:78:21:a5:90:d6:f8:50:5c:1d:0e:d5:b3:f3: d2:bc:61:d3:a9:40:63:a3:8b:82:81:44:37:48:be: f4:ca:39:5f:52:3d:7b:e2:b7:24:3f:1e:91:39:00: 18:a1:21:be:41:b7:9a:5b:e8:40:8d:aa:cf:ad:02: 21:c6:06:24:8b:b7:a5:a6:9a:52:9c:ea:7a:23:2e: be:bd:0d:f5:05:87:f7:0b:3a:16:0d:50:8b:65:eb: f6:c6:34:b0:4a:e1:78:16:66:5e:d9:b5:2e:d0:a5: 91:ec:29:c4:b1:d9:5b:44:67:81:13:b5:d9:a3:b3: fe:44:6b:fd:78:61:ef:6a:31:33:b6:3f:94:4c:3a: 5e:92:22:22:e1:c8:d8:ff:8b:81:16:a9:f2:e1:2a: 3d:f4:68:2a:2f:ec:83:cb:9f:64:2a:35:f7:0c:77: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:BD:E3:47:93:9D:61:0A:E1:6D:1E:35:B7:A9:A0:AD:EF:30:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:85:e0:ba:bf:f2:f1:e7:6b:7e:c6:f9:93:14:c8:79:2d:cc: 98:eb:fa:f5:ce:60:f8:f1:38:94:db:53:ea:80:52:16:59:6f: f9:19:dd:3d:87:59:39:6d:c2:02:33:30:bf:c9:c9:71:0e:e9: 1c:29:af:5f:61:a6:45:2a:a4:4a:cd:cc:b7:df:e4:b7:ab:32: f0:3d:b2:d9:c5:06:50:ff:4e:e7:86:68:e8:12:79:52:75:78: 26:fe:34:ae:6e:2e:3d:2d:08:85:a7:d1:2d:7c:d4:f7:03:bf: e7:24:73:56:1e:37:d4:a2:59:96:cb:88:c0:70:2e:8f:0a:c2: 7f:07:73:d0:7f:fb:c2:6c:5d:e4:f7:c0:1d:8d:d8:78:f6:01: f8:61:06:0c:2f:af:0c:f0:86:11:9a:c7:2c:9b:f1:ab:ff:9d: 25:4d:46:ad:a2:a8:13:71:9c:c3:83:cc:34:3b:db:d5:db:93: bc:61:e5:d4:97:c7:44:ec:2b:1c:f4:c6:69:89:35:84:62:54: b3:40:a7:8a:68:72:07:64:5e:a3:cc:eb:69:aa:b1:27:9c:1c: 5e:5a:14:9b:e2:45:e5:4c:c5:f4:89:3c:74:48:86:f7:e2:0f: b5:16:51:5f:3e:20:4c:fc:ad:09:70:fc:93:e1:1a:e2:2e:e9: dd:30:30:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2Iwt2VtZalpVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NTYzMmQ4MzEtNjAzNy00OTg2LWE3MjAtZDIzY2UxNGNmMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJijq9jCEvW3vWhOx43f6nZg98PigTsb++Tq Pw8zGolwVSzH/I0+6NAgZl9s0jO4qUX/dZNalOsTHSk28L68xYRT/chuoAG7P1sG LsFXRdAU2W8Tdsz4PKKMxnghpZDW+FBcHQ7Vs/PSvGHTqUBjo4uCgUQ3SL70yjlf Uj174rckPx6ROQAYoSG+QbeaW+hAjarPrQIhxgYki7elpppSnOp6Iy6+vQ31BYf3 CzoWDVCLZev2xjSwSuF4FmZe2bUu0KWR7CnEsdlbRGeBE7XZo7P+RGv9eGHvajEz tj+UTDpekiIi4cjY/4uBFqny4So99GgqL+yDy59kKjX3DHfVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiNveNHk51hCuFtHjW3qaCt7zClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzNmYTQxYjgtODJlOC0z OTQyLTg1NTEtZTU2ODMyYzNiMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCF4Lq/8vHna37G+ZMUyHktzJjr+vXOYPjxOJTbU+qAUhZZb/kZ3T2H WTltwgIzML/JyXEO6Rwpr19hpkUqpErNzLff5LerMvA9stnFBlD/TueGaOgSeVJ1 eCb+NK5uLj0tCIWn0S181PcDv+ckc1YeN9SiWZbLiMBwLo8Kwn8Hc9B/+8JsXeT3 wB2N2Hj2AfhhBgwvrwzwhhGaxyyb8av/nSVNRq2iqBNxnMODzDQ729Xbk7xh5dSX x0TsKxz0xmmJNYRiVLNAp4pocgdkXqPM62mqsSecHF5aFJviReVMxfSJPHRIhvfi D7UWUV8+IEz8rQlw/JPhGuIu6d0wMJo= -----END CERTIFICATE-----Generated at Fri May 22 17:38:57 2026 by rpki-client