$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa File: 40ff31f9-bb55-3743-9e6e-0ed497625978.roa (raw, json) Hash identifier: yxCqBMEA9iCbYmkHgCb5rETG89PjuWFgKEP0ltp5irM= Subject key identifier: 11:A3:11:D4:64:2E:21:C4:1A:83:7A:BB:51:05:DC:D7:DC:88:8E:BA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2E3E720091A07A8F9700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.36.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2e:3e:72:00:91:a0:7a:8f:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=54f45948-7555-467a-be92-c755cf572bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:b4:e7:0a:20:73:7f:37:85:2f:da:c4:3f: 84:24:ea:f1:28:15:c1:f8:a7:0a:b6:1e:77:c2:af: a5:75:2e:18:a8:7a:0d:48:f8:3d:cd:97:de:8e:ba: e4:39:9f:88:a9:9a:39:ec:84:d8:ec:39:65:88:f6: 47:d4:d8:24:ff:11:28:d8:71:9c:ec:49:f5:86:da: 08:c3:8a:0d:97:7e:0c:65:4e:60:a0:be:d8:8e:87: e4:81:f4:86:98:ce:14:37:15:d0:3b:56:cd:53:86: 39:b7:68:fa:38:fe:fe:3b:35:6f:85:3c:a6:19:10: b9:25:91:0f:c3:08:bc:8a:a8:a5:dd:a0:92:59:fd: 65:e8:c0:08:a3:95:e9:1f:39:23:73:8a:4e:a1:c8: fd:7b:79:87:6f:3d:5d:73:ee:30:d4:38:54:33:31: d6:b8:84:e8:24:92:e9:ee:26:4d:f8:5c:9c:e6:76: 7d:c4:c1:ca:55:b0:5f:e9:c1:75:cf:57:f1:21:09: 1b:5d:69:2c:43:a3:97:1f:00:1c:95:a4:de:85:f6: f6:20:97:84:f0:83:7b:28:65:e7:81:78:bd:49:dd: ae:72:d6:39:b7:cc:b9:27:76:ef:17:3c:14:a7:63: a0:b3:bd:de:e7:c2:62:21:36:03:27:fc:66:f4:ce: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:11:D4:64:2E:21:C4:1A:83:7A:BB:51:05:DC:D7:DC:88:8E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1d:73:a6:cb:85:ce:fd:03:9e:f9:09:a7:21:a8:f1:82:d6: 3e:74:e5:08:a8:13:c0:56:d2:48:3f:4c:0a:42:c0:58:9c:6a: 38:17:d0:c4:25:12:85:34:72:7a:22:ae:2c:ed:d0:6a:bd:48: 48:45:e9:15:61:f4:03:c4:48:28:d8:be:f2:bd:e7:68:50:69: 86:02:f9:e4:c9:0e:8c:d9:ad:84:ea:3a:5b:14:af:e7:b6:6d: a7:9e:f5:99:7f:12:c6:cc:95:ae:53:54:52:a8:e0:69:4f:0f: 9d:e8:b5:ab:2c:bc:e2:07:e7:9a:3e:81:f0:8a:b4:40:ee:68: c9:b6:9e:e9:6a:6c:13:75:15:f0:db:30:23:62:ea:1d:a9:e6: 9d:d5:c8:cc:9d:aa:bf:d1:82:79:79:30:3a:db:dc:7f:00:79: 19:5f:7d:11:c2:74:92:14:94:20:b4:7b:62:f9:25:90:d9:5d: c5:4d:48:eb:e0:e1:82:c6:61:c1:b0:82:fd:03:8d:b4:75:0d: d9:47:4b:22:33:33:de:5b:e7:40:ff:00:6f:9c:ee:9d:25:37: 56:e3:c6:4a:97:69:e7:6b:1c:f1:5c:9c:ed:d1:71:2f:92:95: 04:a1:8d:ca:af:00:bf:44:25:a3:11:6f:97:88:9a:5d:55:8c: bf:e4:e6:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGy4+cgCRoHqPlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NTRmNDU5NDgtNzU1NS00NjdhLWJlOTItYzc1NWNmNTcyYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSS05wogc383hS/axD+EJOrxKBXB+KcKth53 wq+ldS4YqHoNSPg9zZfejrrkOZ+IqZo57ITY7DlliPZH1Ngk/xEo2HGc7En1htoI w4oNl34MZU5goL7YjofkgfSGmM4UNxXQO1bNU4Y5t2j6OP7+OzVvhTymGRC5JZEP wwi8iqil3aCSWf1l6MAIo5XpHzkjc4pOocj9e3mHbz1dc+4w1DhUMzHWuIToJJLp 7iZN+Fyc5nZ9xMHKVbBf6cF1z1fxIQkbXWksQ6OXHwAclaTehfb2IJeE8IN7KGXn gXi9Sd2uctY5t8y5J3bvFzwUp2Ogs73e58JiITYDJ/xm9M7tBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGjEdRkLiHEGoN6u1EF3NfciI66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDBmZjMxZjktYmI1NS0z NzQzLTllNmUtMGVkNDk3NjI1OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMdc6bLhc79A575CachqPGC1j505QioE8BW0kg/TApCwFicajgX0MQl EoU0cnoirizt0Gq9SEhF6RVh9APESCjYvvK952hQaYYC+eTJDozZrYTqOlsUr+e2 baee9Zl/EsbMla5TVFKo4GlPD53otassvOIH55o+gfCKtEDuaMm2nulqbBN1FfDb MCNi6h2p5p3VyMydqr/Rgnl5MDrb3H8AeRlffRHCdJIUlCC0e2L5JZDZXcVNSOvg 4YLGYcGwgv0DjbR1DdlHSyIzM95b50D/AG+c7p0lN1bjxkqXaedrHPFcnO3RcS+S lQShjcqvAL9EJaMRb5eIml1VjL/k5hw= -----END CERTIFICATE-----Generated at Fri May 22 17:39:45 2026 by rpki-client