$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa File: 39708eac-3243-3a6a-88da-6bc7ae510463.roa (raw, json) Hash identifier: fOAEDrlS7lfq6STO2Ug5bATu9VKeQDhv+bI4Yl5d1gg= Subject key identifier: 21:3F:5D:AF:2B:6A:1F:8F:2D:0B:E8:72:20:A7:0E:20:E9:10:D0:91 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B60B878BDA4C2AD559A00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.33.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:60:b8:78:bd:a4:c2:ad:55:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=28533d1e-455d-4805-b8b3-56bac557d9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b1:fc:f6:24:fe:b2:44:b2:28:56:01:49:c7: e4:b8:6c:a9:c4:58:f4:ae:ac:58:51:52:6c:8a:59: d0:b7:4f:28:a8:1b:51:87:16:d6:95:3d:d4:3e:ed: 82:e0:71:21:db:83:8a:0c:45:41:48:a5:27:70:21: 51:2f:d7:03:f0:3b:e0:09:2f:61:fc:d4:91:20:7c: 2b:2c:ec:d8:a7:a3:a7:66:8a:7b:44:fe:20:f9:dd: d2:36:05:4d:54:03:f5:ce:94:03:43:2b:b5:e4:d2: 5e:13:1d:d5:65:23:e8:b0:e9:d5:13:76:76:d2:3d: 7f:76:05:ef:ac:f1:e6:b2:c0:b6:47:d2:97:a1:00: 09:15:ab:0b:15:e1:8e:80:66:61:17:3e:e8:53:2e: be:7e:5d:f1:4e:0e:1e:1d:fe:f8:56:4f:8b:62:5b: 56:bb:85:d4:8b:08:29:80:f2:50:05:ec:10:ef:18: f4:78:9d:42:a5:42:02:61:18:ad:a2:ee:c7:51:dd: 88:42:a1:a1:b4:f6:f1:3d:95:9b:a0:91:25:db:bf: 3c:63:b2:38:da:b2:7d:b9:c8:5d:7e:f8:09:06:f2: c8:97:b4:66:dc:db:c8:eb:bb:35:7e:3e:0c:bd:65: d4:59:b5:2f:8e:cc:83:49:34:a4:d1:07:86:f5:e9: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3F:5D:AF:2B:6A:1F:8F:2D:0B:E8:72:20:A7:0E:20:E9:10:D0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d9:61:7d:d8:ae:16:41:17:50:f9:28:63:9d:a6:b5:1c:80: 09:08:4a:b7:24:09:8c:3b:f6:18:f6:0a:d2:eb:b2:98:13:2d: 05:76:8f:b6:2f:54:2a:05:4d:19:92:e6:b6:d8:f9:62:56:e1: 37:a0:72:f0:75:d9:9d:ab:5f:48:09:36:ed:fb:86:81:85:e6: f8:3b:91:af:57:f0:6b:57:9f:19:16:97:c7:33:7e:4e:ef:7b: e0:32:b7:da:c4:25:20:b1:f1:55:54:7e:88:3c:0c:f0:a0:e2: 67:02:1d:50:51:5c:e0:67:7e:35:11:49:82:79:84:eb:09:b3: 88:24:03:d0:e1:9e:85:88:7e:7a:8a:92:6a:05:46:74:d9:59: d7:87:82:94:bf:65:1f:c1:ac:34:db:e8:73:06:eb:cd:4f:ba: b0:22:4f:69:26:da:4a:33:43:db:89:ad:3f:0d:21:32:7f:24: ac:c6:93:f5:5e:94:b4:0b:07:f2:a1:a6:d9:62:f7:9e:71:10: e5:d8:7c:d8:d1:e6:16:20:b0:5b:c7:3e:a4:7b:d2:de:2a:8e: 4f:b5:7a:32:51:a7:0b:94:03:fa:e5:00:51:53:1f:7d:d6:92: b1:62:f0:24:64:9a:01:43:74:b8:12:9a:7f:8e:c5:b5:9e:e3: a7:03:1e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2C4eL2kwq1VmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Mjg1MzNkMWUtNDU1ZC00ODA1LWI4YjMtNTZiYWM1NTdkOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7H89iT+skSyKFYBScfkuGypxFj0rqxYUVJs ilnQt08oqBtRhxbWlT3UPu2C4HEh24OKDEVBSKUncCFRL9cD8DvgCS9h/NSRIHwr LOzYp6OnZop7RP4g+d3SNgVNVAP1zpQDQyu15NJeEx3VZSPosOnVE3Z20j1/dgXv rPHmssC2R9KXoQAJFasLFeGOgGZhFz7oUy6+fl3xTg4eHf74Vk+LYltWu4XUiwgp gPJQBewQ7xj0eJ1CpUICYRitou7HUd2IQqGhtPbxPZWboJEl2788Y7I42rJ9uchd fvgJBvLIl7Rm3NvI67s1fj4MvWXUWbUvjsyDSTSk0QeG9elWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE/Xa8rah+PLQvociCnDiDpENCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzk3MDhlYWMtMzI0My0z YTZhLTg4ZGEtNmJjN2FlNTEwNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTZYX3YrhZBF1D5KGOdprUcgAkISrckCYw79hj2CtLrspgTLQV2j7Yv VCoFTRmS5rbY+WJW4TegcvB12Z2rX0gJNu37hoGF5vg7ka9X8GtXnxkWl8czfk7v e+Ayt9rEJSCx8VVUfog8DPCg4mcCHVBRXOBnfjURSYJ5hOsJs4gkA9DhnoWIfnqK kmoFRnTZWdeHgpS/ZR/BrDTb6HMG681PurAiT2km2kozQ9uJrT8NITJ/JKzGk/Ve lLQLB/Khptli955xEOXYfNjR5hYgsFvHPqR70t4qjk+1ejJRpwuUA/rlAFFTH33W krFi8CRkmgFDdLgSmn+OxbWe46cDHvE= -----END CERTIFICATE-----Generated at Fri May 22 18:31:04 2026 by rpki-client