$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa File: 3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa (raw, json) Hash identifier: 537zmELGg8f6fivqxxPwgjLuYlrnINQ5tmUHtwDeELI= Subject key identifier: 68:96:81:3B:10:97:1A:A7:D5:B0:5C:B8:35:33:28:F0:AF:69:49:EE Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B303B77E4FBB453FDD880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.38.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:30:3b:77:e4:fb:b4:53:fd:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=4c23be69-3020-4450-a770-b7f9aeb677ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:d2:f7:22:c7:af:32:48:e3:55:4a:f2:a6: 68:a6:38:af:fd:70:ea:c1:16:f1:4b:4d:73:09:4f: c7:1a:9d:b7:85:88:41:68:df:de:55:53:94:4b:18: 5e:b1:89:17:78:71:23:72:52:2d:4c:ac:c0:97:a9: 72:49:d0:c2:0c:4d:cf:2f:a5:f9:92:5f:06:77:91: 77:e4:70:00:c2:3e:f9:a7:18:31:0a:67:e9:a3:0b: 2d:6e:ed:15:76:40:3a:71:91:a7:0b:82:35:d6:5a: f0:0e:83:a7:4d:cb:af:d9:a9:19:f0:ed:ee:80:32: 3c:d2:8f:7a:cb:9b:ad:7c:b7:c0:1a:c1:3b:1a:a0: 22:9c:b3:33:e3:53:f6:71:af:e1:40:12:7a:b8:1e: df:1f:92:f6:66:da:1a:16:a9:a3:5a:1e:d5:46:66: 22:5c:13:50:22:52:2d:b2:c0:fb:ea:1a:f2:19:21: b0:f0:56:ad:64:16:bb:2d:32:2e:70:bd:15:ec:c6: a5:0d:9b:3b:fe:a4:99:87:52:89:02:e9:6d:b2:fd: 20:0b:7c:88:56:37:7e:7f:43:44:4e:52:ea:7b:cf: b5:a2:82:04:84:5f:e8:0f:97:90:40:5a:c0:59:cf: 9b:cd:e9:63:39:a7:55:ac:73:63:e5:8c:9c:3e:1d: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:96:81:3B:10:97:1A:A7:D5:B0:5C:B8:35:33:28:F0:AF:69:49:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ed:db:d7:71:7e:3b:b9:0d:12:89:26:7b:dc:16:50:11:64: 63:4f:d3:80:98:fc:e4:7d:9e:30:1b:78:af:24:ff:3f:a5:b0: 00:6c:ff:c0:2e:bb:a5:35:b5:16:b4:b1:77:da:80:6e:27:90: 58:22:ac:23:24:f0:14:56:74:85:b9:7a:a4:8d:34:2d:0f:a5: fa:a6:e9:e9:d6:83:c7:6a:3b:86:82:ca:63:7a:06:5a:4a:5d: a5:36:0d:1d:db:02:87:85:9c:ec:6e:8b:aa:ba:a4:4b:b6:51: e8:96:8f:c0:a3:e9:69:23:5a:b3:11:85:d5:3f:d0:52:3a:55: 4b:67:c4:c9:8a:af:f9:48:8f:63:bb:44:af:fc:57:f5:fd:21: ca:f3:26:64:fc:75:bd:9b:ac:fc:08:3a:2f:f2:14:3f:d9:a5: 1a:cf:31:82:f7:4b:1a:6f:fb:6c:82:7f:10:a3:39:91:34:a0: d7:a4:da:d8:c4:97:d7:b1:91:d5:3c:a1:1c:ab:bb:8b:ec:89: 03:78:86:a3:56:99:6c:22:e9:d8:3d:fb:80:86:a7:7a:98:34: 0d:38:25:c2:aa:d6:6f:68:0d:5a:3a:21:31:17:44:4a:21:8a: a5:e4:39:01:e5:14:d3:02:69:91:43:60:2c:19:b3:2b:17:ad: a8:57:92:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzA7d+T7tFP92IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NGMyM2JlNjktMzAyMC00NDUwLWE3NzAtYjdmOWFlYjY3N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixDS9yLHrzJI41VK8qZopjiv/XDqwRbxS01z CU/HGp23hYhBaN/eVVOUSxhesYkXeHEjclItTKzAl6lySdDCDE3PL6X5kl8Gd5F3 5HAAwj75pxgxCmfpowstbu0VdkA6cZGnC4I11lrwDoOnTcuv2akZ8O3ugDI80o96 y5utfLfAGsE7GqAinLMz41P2ca/hQBJ6uB7fH5L2ZtoaFqmjWh7VRmYiXBNQIlIt ssD76hryGSGw8FatZBa7LTIucL0V7MalDZs7/qSZh1KJAultsv0gC3yIVjd+f0NE TlLqe8+1ooIEhF/oD5eQQFrAWc+bzeljOadVrHNj5YycPh0syQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiWgTsQlxqn1bBcuDUzKPCvaUnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2VmMTg5NjQtMGIzZi0z ZmY2LTg0NjMtOGZkYTQ0NDYzZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArt29dxfju5DRKJJnvcFlARZGNP04CY/OR9njAbeK8k/z+lsABs/8Au u6U1tRa0sXfagG4nkFgirCMk8BRWdIW5eqSNNC0Ppfqm6enWg8dqO4aCymN6BlpK XaU2DR3bAoeFnOxui6q6pEu2UeiWj8Cj6WkjWrMRhdU/0FI6VUtnxMmKr/lIj2O7 RK/8V/X9IcrzJmT8db2brPwIOi/yFD/ZpRrPMYL3Sxpv+2yCfxCjOZE0oNek2tjE l9exkdU8oRyru4vsiQN4hqNWmWwi6dg9+4CGp3qYNA04JcKq1m9oDVo6ITEXREoh iqXkOQHlFNMCaZFDYCwZsysXrahXkiA= -----END CERTIFICATE-----Generated at Fri May 22 18:30:33 2026 by rpki-client