$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa File: 533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa (raw, json) Hash identifier: V5i+dU7L703ao88vPPISxuEz4wJ+ehOKrgN3uVCbMbs= Subject key identifier: 59:1D:C2:53:7A:9A:D7:EF:5C:2D:30:9E:F1:C6:B2:F7:57:F1:D2:91 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B5A57B3FEAE22FD606080 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.32.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:5a:57:b3:fe:ae:22:fd:60:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=9096c976-962e-40db-a4dc-49eca493ae19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:ed:32:e7:67:2e:28:c1:8d:0f:4a:ec:a3: 84:ba:30:55:32:2d:35:ab:c5:d0:cd:44:ef:5c:13: e1:e5:df:41:2c:bd:71:89:46:66:a6:68:b9:08:20: 65:7a:61:70:8c:cd:b4:8b:16:0b:4a:24:4f:e9:f8: 7c:77:47:81:a1:2e:a4:be:1e:e9:87:06:26:ff:95: 1b:bf:a1:49:a5:fb:cf:eb:3e:9f:0c:31:4e:cf:ee: a7:d0:25:e5:40:2d:a0:8c:bd:74:c3:5c:ee:4f:dc: 67:c8:c4:36:9a:6f:77:1d:59:26:15:11:a8:a4:72: ab:f0:85:1a:0b:99:0c:41:de:5e:4a:bd:c0:92:99: 22:d8:bf:b4:8c:61:b6:92:0d:67:0d:44:06:05:b1: d6:ad:1b:a0:76:ef:d7:3f:8e:48:8a:c1:42:94:97: e4:a4:d5:fc:eb:df:34:54:db:ba:a7:53:4f:95:94: 7a:38:6e:4b:e4:ff:88:18:e9:04:3f:11:93:e5:84: e2:ee:41:69:79:cf:5e:e0:c7:c5:83:dc:41:6f:9b: 16:f3:8c:c7:6e:4b:e5:7e:f3:a9:60:42:87:2b:a0: 84:dc:e6:b3:3e:d4:8c:c8:c2:15:7e:36:de:f7:18: d9:40:fb:6b:94:e2:c1:cf:a0:c4:28:05:1d:cc:5e: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:C2:53:7A:9A:D7:EF:5C:2D:30:9E:F1:C6:B2:F7:57:F1:D2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:44:75:49:72:12:aa:14:de:8c:5d:2c:d1:2f:fa:b9:ab:4d: 13:c9:ea:90:df:c9:03:91:2e:a2:ce:ed:e4:16:41:86:9c:b4: 5b:f8:db:c9:bc:e3:d3:93:95:02:e2:63:e0:91:46:a8:46:23: d0:4a:1d:02:f6:73:24:fe:a7:fa:7a:43:f5:5c:5d:22:ce:5b: b3:b5:76:10:de:e9:22:33:6e:ae:e4:47:17:b2:76:01:cc:42: eb:9a:84:b0:f5:de:1f:63:03:0a:8b:f1:01:35:74:14:b8:8e: a4:bb:af:d8:8b:25:cc:c1:87:9e:45:f6:e2:2a:40:09:c0:70: 05:c3:3a:f0:cf:4a:d8:03:f2:0d:77:f6:e9:d1:e3:83:91:28: 42:db:8b:1f:ff:5d:1d:3f:e7:26:cc:96:ec:0c:b4:79:6d:93: 0f:78:d8:d2:48:68:9c:82:42:b9:b1:49:f7:5f:4a:f5:04:fb: ba:90:d4:cb:6b:1c:27:3f:0e:27:0d:1b:62:ca:85:7b:6c:27: 3b:62:50:2b:0b:42:d3:49:f6:56:a0:dc:35:4a:91:fb:d4:8f: 5c:8b:e8:5c:d8:be:ca:63:cb:cd:f5:42:3d:7b:86:f3:cd:a2: 4a:58:f9:8f:42:d2:d4:44:f0:1c:ac:ec:f1:79:da:35:7e:f5: 32:e2:97:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1pXs/6uIv1gYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk OTA5NmM5NzYtOTYyZS00MGRiLWE0ZGMtNDllY2E0OTNhZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixrtMudnLijBjQ9K7KOEujBVMi01q8XQzUTv XBPh5d9BLL1xiUZmpmi5CCBlemFwjM20ixYLSiRP6fh8d0eBoS6kvh7phwYm/5Ub v6FJpfvP6z6fDDFOz+6n0CXlQC2gjL10w1zuT9xnyMQ2mm93HVkmFRGopHKr8IUa C5kMQd5eSr3Akpki2L+0jGG2kg1nDUQGBbHWrRugdu/XP45IisFClJfkpNX86980 VNu6p1NPlZR6OG5L5P+IGOkEPxGT5YTi7kFpec9e4MfFg9xBb5sW84zHbkvlfvOp YEKHK6CE3OazPtSMyMIVfjbe9xjZQPtrlOLBz6DEKAUdzF427wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkdwlN6mtfvXC0wnvHGsvdX8dKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTMzYzZkODUtMWYyZi0z OGUzLWFhODUtODhkZmIxMGNjMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVEdUlyEqoU3oxdLNEv+rmrTRPJ6pDfyQORLqLO7eQWQYactFv428m8 49OTlQLiY+CRRqhGI9BKHQL2cyT+p/p6Q/VcXSLOW7O1dhDe6SIzbq7kRxeydgHM QuuahLD13h9jAwqL8QE1dBS4jqS7r9iLJczBh55F9uIqQAnAcAXDOvDPStgD8g13 9unR44ORKELbix//XR0/5ybMluwMtHltkw942NJIaJyCQrmxSfdfSvUE+7qQ1Mtr HCc/DicNG2LKhXtsJztiUCsLQtNJ9lag3DVKkfvUj1yL6FzYvspjy831Qj17hvPN okpY+Y9C0tRE8Bys7PF52jV+9TLil5o= -----END CERTIFICATE-----Generated at Fri May 22 17:38:59 2026 by rpki-client