$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa File: 437c7491-acf1-3988-ad8f-3d1717c41cc3.roa (raw, json) Hash identifier: +lYA7dbS1JGnzIB8HITRspEXPopu3YRqpmKv36MnHiM= Subject key identifier: 7C:BF:92:F8:5C:50:16:79:1D:76:9C:0B:D2:3A:91:79:1A:D9:72:00 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B1CA2DF92953697E3B600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:1c:a2:df:92:95:36:97:e3:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=78b85c58-573f-44ff-ba47-f8c14809d734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:1c:6b:6f:6d:3c:d7:b4:00:60:67:b4:2d: ac:d2:6e:7f:73:12:01:d0:79:ce:9c:e2:7d:98:17: d0:4b:07:00:c6:fb:ff:d2:dd:e0:d0:a0:12:bd:cd: 0a:c9:57:12:3b:18:f3:b7:89:45:ce:cd:28:c1:04: b1:83:89:ad:ef:e5:cb:79:b8:ea:6b:fb:e7:23:5a: fd:b7:e9:34:7d:a5:04:74:60:7d:50:ca:7b:af:6b: 03:22:8f:8d:3e:38:f0:94:46:83:33:d6:af:65:cb: a7:16:ae:18:10:e7:68:9b:48:6a:24:6d:bf:7d:2d: 86:f7:88:48:2f:d8:e7:1b:09:fa:dd:11:1d:7f:37: b0:a6:62:0a:af:93:a6:3a:c0:df:48:e5:18:c1:c2: 4f:74:a1:5e:a9:0b:ae:84:49:62:98:14:bb:24:53: d2:ca:a7:a0:9e:82:a4:56:c2:9d:ec:7a:d5:63:76: 33:38:2f:85:11:af:a8:17:a9:6d:98:2d:6c:bf:f6: 84:c1:61:0a:4f:4a:f8:a4:b9:ac:d5:0d:0a:46:13: 39:47:4d:a3:27:a0:67:c7:85:9b:45:bf:45:22:b9: 1c:99:ca:9c:24:ff:50:27:47:1a:41:ad:17:47:db: f7:98:b7:20:ae:21:5d:cd:d3:f5:c2:3e:c0:fc:12: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BF:92:F8:5C:50:16:79:1D:76:9C:0B:D2:3A:91:79:1A:D9:72:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6e:4b:99:c9:94:c6:fa:af:85:df:04:a8:07:8a:d7:85:90: be:18:7a:ee:11:5c:74:d2:81:25:bf:ae:12:d0:90:7f:c7:01: 6c:fd:93:c6:84:db:22:ae:71:58:d1:79:94:1e:e4:3b:48:be: 34:30:21:40:42:ee:98:4a:ab:dd:fb:42:c1:08:3a:48:86:85: 99:68:d8:62:5f:40:f3:94:5e:26:da:d2:c0:b0:6c:a9:ac:d6: b9:0c:78:32:63:c6:47:8d:e2:a8:f7:61:52:1d:e6:3c:80:5a: 01:f7:bf:39:90:8c:7a:f0:de:c3:9b:70:bd:8a:21:6d:52:ac: e8:74:ef:90:3e:76:65:6d:86:38:af:97:e3:92:f7:f8:4d:88: 3f:c7:d1:c1:fd:d8:b0:86:a2:d1:62:b5:f2:a1:05:ec:25:f0: 5e:4b:0a:03:bf:da:18:e4:7e:7d:ae:1a:d1:c7:5a:38:d4:55: f6:a1:09:ad:ff:e5:8f:3e:ab:55:3c:52:79:66:40:44:f9:66: f8:ad:0e:b2:51:42:30:82:5b:64:28:5f:0d:36:b6:46:ee:ab: 3c:b2:11:91:8c:72:19:1a:fb:24:5f:17:fd:8c:ec:b1:86:5a: 41:53:91:a1:29:a6:36:bd:ba:42:02:5d:73:cf:57:41:01:a3: b7:84:f2:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxyi35KVNpfjtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NzhiODVjNTgtNTczZi00NGZmLWJhNDctZjhjMTQ4MDlkNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9wca29tPNe0AGBntC2s0m5/cxIB0HnOnOJ9 mBfQSwcAxvv/0t3g0KASvc0KyVcSOxjzt4lFzs0owQSxg4mt7+XLebjqa/vnI1r9 t+k0faUEdGB9UMp7r2sDIo+NPjjwlEaDM9avZcunFq4YEOdom0hqJG2/fS2G94hI L9jnGwn63REdfzewpmIKr5OmOsDfSOUYwcJPdKFeqQuuhElimBS7JFPSyqegnoKk VsKd7HrVY3YzOC+FEa+oF6ltmC1sv/aEwWEKT0r4pLms1Q0KRhM5R02jJ6Bnx4Wb Rb9FIrkcmcqcJP9QJ0caQa0XR9v3mLcgriFdzdP1wj7A/BKVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy/kvhcUBZ5HXacC9I6kXka2XIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDM3Yzc0OTEtYWNmMS0z OTg4LWFkOGYtM2QxNzE3YzQxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9uS5nJlMb6r4XfBKgHiteFkL4Yeu4RXHTSgSW/rhLQkH/HAWz9k8aE 2yKucVjReZQe5DtIvjQwIUBC7phKq937QsEIOkiGhZlo2GJfQPOUXiba0sCwbKms 1rkMeDJjxkeN4qj3YVId5jyAWgH3vzmQjHrw3sObcL2KIW1SrOh075A+dmVthjiv l+OS9/hNiD/H0cH92LCGotFitfKhBewl8F5LCgO/2hjkfn2uGtHHWjjUVfahCa3/ 5Y8+q1U8UnlmQET5ZvitDrJRQjCCW2QoXw02tkbuqzyyEZGMchka+yRfF/2M7LGG WkFTkaEppja9ukICXXPPV0EBo7eE8o0= -----END CERTIFICATE-----Generated at Fri May 22 17:39:48 2026 by rpki-client