$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/41a5a0ef-03c9-3154-aea2-f8611c12e671.roa File: 41a5a0ef-03c9-3154-aea2-f8611c12e671.roa (raw, json) Hash identifier: nUvLjcb+v7RpbVm83PEX3P2vkNG4yRvV/7O6o/6XPYg= Subject key identifier: 4A:99:EA:58:78:6D:2D:15:B3:46:96:79:28:FE:35:9F:33:E2:0F:A3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B1CB432AAF4C92571B500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/41a5a0ef-03c9-3154-aea2-f8611c12e671.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.57.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:1c:b4:32:aa:f4:c9:25:71:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=d7e97162-e5b4-44f4-bd79-b8a0a1a6ae03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:2b:76:a7:07:bc:75:17:60:cd:b1:4a:aa: fe:4a:f8:31:2b:75:e6:f1:4b:37:41:e5:9a:57:be: 27:2f:4e:c5:1d:d3:eb:92:83:c4:b1:cb:c4:a0:9f: 5c:6e:34:4b:9a:c1:72:83:43:81:10:70:4d:34:77: 35:8c:42:a6:af:fd:60:a8:0c:b5:d0:d0:cf:68:09: 48:19:2c:d7:73:aa:05:9e:0b:f6:22:7c:c3:08:fb: b1:68:2b:87:91:5c:aa:70:5c:40:6f:b9:f8:4a:55: fe:03:be:0e:60:ab:d7:33:43:d9:18:8d:98:5f:b7: 04:b5:34:e4:cd:0a:ef:7e:97:59:c0:8d:3b:5d:0c: 55:8b:e4:f5:25:f6:66:0d:8d:4c:df:f9:ee:b9:55: bd:74:c1:18:d4:4c:3e:da:13:4c:29:f3:e5:39:52: 06:de:bc:93:50:2d:4c:0a:76:ca:fb:19:53:d4:fb: 8d:f5:74:11:d3:9d:28:04:4c:d3:94:85:c1:40:70: 5f:28:a5:52:49:c9:c4:ac:09:2f:c8:d8:e3:d6:78: b6:61:69:3c:64:53:af:dc:4d:6f:1a:48:46:65:d5: bb:28:24:1c:50:12:ea:c6:02:63:fb:55:66:3f:c4: 7d:cd:fe:56:b5:f1:dc:8a:eb:84:00:8f:7c:fe:38: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:99:EA:58:78:6D:2D:15:B3:46:96:79:28:FE:35:9F:33:E2:0F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/41a5a0ef-03c9-3154-aea2-f8611c12e671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:83:00:ed:af:25:44:65:d6:d1:f6:23:a0:09:58:32:1f:92: a5:d1:d1:03:dd:8c:44:36:58:46:c3:e8:cb:58:f9:4c:b0:a2: 54:88:a7:39:cd:6f:8d:5f:fb:47:a8:fc:b5:97:ce:a7:a1:a6: 9f:20:40:2f:72:57:f1:a9:26:ba:b8:c9:2d:ec:9f:c1:f8:f4: 95:83:19:bc:9d:96:aa:1f:d6:eb:31:86:19:d2:cb:95:62:e2: 98:3b:a0:d1:f9:b4:86:e7:da:fb:d4:82:f6:55:82:61:0e:f8: b7:76:49:93:70:90:3c:19:0d:05:d8:88:88:f8:40:11:95:b9: 9a:0d:b9:20:46:28:e1:84:f2:15:5b:17:5c:38:f8:54:ec:b0: b7:1f:27:91:93:a5:b3:1f:43:0f:16:eb:0d:5b:f2:60:2e:d1: 18:fb:2b:e7:be:d7:43:f3:bb:79:60:3e:2c:b4:38:ad:a5:1e: 9c:1e:d9:9e:b0:a2:20:6b:d9:21:9e:46:13:da:78:b7:a4:8f: 46:21:1d:02:06:b0:32:a3:b0:0e:eb:af:8d:1c:4a:1b:8e:ae: fa:79:1b:0e:2d:12:b5:0b:5b:ce:17:5c:50:39:0c:79:d2:b0: 40:8d:e5:d3:10:a6:2e:d6:0d:72:c6:4a:c3:1a:f4:20:8b:03: be:de:2c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxy0Mqr0ySVxtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ZDdlOTcxNjItZTViNC00NGY0LWJkNzktYjhhMGExYTZhZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovgrdqcHvHUXYM2xSqr+SvgxK3Xm8Us3QeWa V74nL07FHdPrkoPEscvEoJ9cbjRLmsFyg0OBEHBNNHc1jEKmr/1gqAy10NDPaAlI GSzXc6oFngv2InzDCPuxaCuHkVyqcFxAb7n4SlX+A74OYKvXM0PZGI2YX7cEtTTk zQrvfpdZwI07XQxVi+T1JfZmDY1M3/nuuVW9dMEY1Ew+2hNMKfPlOVIG3ryTUC1M CnbK+xlT1PuN9XQR050oBEzTlIXBQHBfKKVSScnErAkvyNjj1ni2YWk8ZFOv3E1v GkhGZdW7KCQcUBLqxgJj+1VmP8R9zf5WtfHciuuEAI98/jj7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqZ6lh4bS0Vs0aWeSj+NZ8z4g+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDFhNWEwZWYtMDNjOS0z MTU0LWFlYTItZjg2MTFjMTJlNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiDAO2vJURl1tH2I6AJWDIfkqXR0QPdjEQ2WEbD6MtY+UywolSIpznN b41f+0eo/LWXzqehpp8gQC9yV/GpJrq4yS3sn8H49JWDGbydlqof1usxhhnSy5Vi 4pg7oNH5tIbn2vvUgvZVgmEO+Ld2SZNwkDwZDQXYiIj4QBGVuZoNuSBGKOGE8hVb F1w4+FTssLcfJ5GTpbMfQw8W6w1b8mAu0Rj7K+e+10Pzu3lgPiy0OK2lHpwe2Z6w oiBr2SGeRhPaeLekj0YhHQIGsDKjsA7rr40cShuOrvp5Gw4tErULW84XXFA5DHnS sECN5dMQpi7WDXLGSsMa9CCLA77eLFg= -----END CERTIFICATE-----Generated at Fri May 22 17:40:43 2026 by rpki-client