$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa File: 62c08158-0e7c-3b09-b973-f35c8fe33560.roa (raw, json) Hash identifier: SpFenSej0UJqJ7FQKnQhlLZCygYToEbImGpGT9wmZTo= Subject key identifier: 3A:43:80:5F:70:A5:F0:B1:28:86:02:F1:E4:3B:7C:25:03:C8:E6:06 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B57BBCF5FF9EB0ADDA1C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.32.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:57:bb:cf:5f:f9:eb:0a:dd:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=a7ce6115-8118-45b6-ae7c-de7aa526f62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:bb:3d:ae:e8:f6:95:ea:53:4c:36:19:07: d1:d1:66:e1:ca:b8:9c:b5:6f:fb:71:98:ee:8b:9d: df:7b:16:0f:81:bc:1b:4c:7f:d9:64:93:3d:d9:b3: 73:90:8d:42:66:b7:e4:fa:6f:e2:75:b1:87:05:b2: 70:0e:e0:68:42:73:7c:c8:0b:c8:75:e1:b6:32:bc: 46:67:d7:75:b1:4b:73:65:d9:d7:90:a9:75:be:bb: 80:a9:92:f4:00:1e:2e:ba:88:9b:74:c7:a2:b4:43: eb:3f:d9:7d:d9:04:85:4c:4c:ef:e7:eb:ff:4e:8b: aa:a6:b4:4b:8d:74:a5:24:53:a0:79:ec:8f:e2:a1: 78:0d:97:7b:03:6d:90:6b:4b:2f:3d:22:35:bc:d5: 60:88:ca:a4:28:d7:67:74:94:83:7e:6c:1d:88:5a: e5:38:41:83:27:ee:3a:25:80:95:a3:ce:fb:0d:3b: 1a:02:7d:d9:89:f4:66:e5:cd:aa:6d:91:df:50:c5: f2:9d:86:ab:9d:a3:41:ed:e7:47:70:34:46:10:6e: b5:7e:fa:5b:df:cb:ef:2c:b4:50:79:09:0d:d6:25: ca:12:e9:5b:66:a5:97:b3:22:e0:34:ca:86:8d:c3: 3b:b4:95:1e:8a:2c:64:d2:08:fb:ed:f3:f5:91:34: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:43:80:5F:70:A5:F0:B1:28:86:02:F1:E4:3B:7C:25:03:C8:E6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:24:17:6f:9e:25:65:46:59:61:5c:e4:be:63:c1:92:c8:3d: ad:c2:2a:32:25:c7:8a:cf:ed:bc:76:5a:99:8e:b4:20:ea:04: ba:c8:dc:aa:c6:37:3d:16:1e:79:d6:07:05:ba:7f:69:63:75: 41:30:12:7d:8a:21:4d:22:15:d0:32:2f:b1:4f:6a:af:89:cb: 4a:1a:8c:be:c0:8d:ef:4b:31:d9:06:f5:b3:87:41:3e:0a:ff: 3c:79:14:38:2f:39:aa:a6:ac:37:38:1c:51:73:a3:ca:99:59: 37:c8:9f:d9:1d:3e:98:1e:e6:ab:46:95:0e:a3:72:a3:46:de: 19:21:27:d6:37:b2:10:bf:13:c1:31:be:04:13:5d:88:75:24: 9d:d8:00:d2:53:a3:8d:f1:36:a6:27:09:34:06:d1:39:72:cd: cf:08:9b:42:5f:cf:ea:ce:31:06:30:fd:68:78:9e:b5:b5:bb: b9:c9:7c:65:e4:f9:73:9e:c3:e6:d9:40:86:97:91:63:3e:f1: 17:7f:50:e6:f2:de:68:fd:2b:17:f8:73:83:4f:56:48:9f:61: b3:87:82:21:69:37:4a:5b:8b:81:5e:13:08:42:9d:d5:31:22: 31:43:f1:4f:62:6a:d1:25:ec:b0:ef:66:99:9c:01:2d:19:b8: a4:a9:68:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1e7z1/56wrdocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk YTdjZTYxMTUtODExOC00NWI2LWFlN2MtZGU3YWE1MjZmNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuga7Pa7o9pXqU0w2GQfR0WbhyrictW/7cZju i53fexYPgbwbTH/ZZJM92bNzkI1CZrfk+m/idbGHBbJwDuBoQnN8yAvIdeG2MrxG Z9d1sUtzZdnXkKl1vruAqZL0AB4uuoibdMeitEPrP9l92QSFTEzv5+v/TouqprRL jXSlJFOgeeyP4qF4DZd7A22Qa0svPSI1vNVgiMqkKNdndJSDfmwdiFrlOEGDJ+46 JYCVo877DTsaAn3ZifRm5c2qbZHfUMXynYarnaNB7edHcDRGEG61fvpb38vvLLRQ eQkN1iXKEulbZqWXsyLgNMqGjcM7tJUeiixk0gj77fP1kTQxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpDgF9wpfCxKIYC8eQ7fCUDyOYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjJjMDgxNTgtMGU3Yy0z YjA5LWI5NzMtZjM1YzhmZTMzNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMkF2+eJWVGWWFc5L5jwZLIPa3CKjIlx4rP7bx2WpmOtCDqBLrI3KrG Nz0WHnnWBwW6f2ljdUEwEn2KIU0iFdAyL7FPaq+Jy0oajL7Aje9LMdkG9bOHQT4K /zx5FDgvOaqmrDc4HFFzo8qZWTfIn9kdPpge5qtGlQ6jcqNG3hkhJ9Y3shC/E8Ex vgQTXYh1JJ3YANJTo43xNqYnCTQG0Tlyzc8Im0Jfz+rOMQYw/Wh4nrW1u7nJfGXk +XOew+bZQIaXkWM+8Rd/UOby3mj9Kxf4c4NPVkifYbOHgiFpN0pbi4FeEwhCndUx IjFD8U9iatEl7LDvZpmcAS0ZuKSpaM0= -----END CERTIFICATE-----Generated at Fri May 22 18:32:12 2026 by rpki-client