$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa File: 642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa (raw, json) Hash identifier: Uh10y/KW6ok9FiBr1ZiQQAb7XjoH/+i6ZLjkuW3qgL8= Subject key identifier: E6:DB:33:86:73:D4:D9:34:53:4B:C1:43:15:87:A7:17:1C:4E:E7:87 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B5DAE976DF3C533D0A380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.35.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:5d:ae:97:6d:f3:c5:33:d0:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=0db2ae46-2d02-414c-8d55-6504e1d0916b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:39:43:f5:65:e9:ec:2f:25:65:5a:49:b8: cb:e9:21:2b:40:e8:eb:76:5d:54:aa:24:a2:00:f3: 70:3e:be:61:4b:c1:eb:45:ae:ad:46:57:d6:ea:d1: 2e:16:95:f4:d4:15:11:bb:00:4c:0f:f5:e9:e9:bc: ab:a1:8e:65:84:dd:7c:71:c9:b9:60:59:ca:d2:4c: 6e:4c:a7:46:2d:f5:30:7b:b6:d4:96:bf:57:00:d6: 37:65:2e:b8:6b:8d:ff:18:65:fd:56:86:2e:96:95: 47:f2:b4:33:57:ff:9d:10:a5:75:be:db:ef:d8:6a: ae:f7:e0:4f:d0:1f:08:44:2d:31:6a:5a:7f:0b:34: 6d:f2:4c:57:3d:dd:83:5b:94:c2:df:38:84:21:e4: 41:a8:1a:b1:70:54:97:d1:cf:af:8a:db:dd:03:dc: f5:c2:36:86:29:85:53:34:55:a9:96:14:46:44:40: 52:c1:c5:dd:9a:fb:b5:fb:ea:63:69:16:f9:98:0f: 94:dd:52:8d:45:ed:32:ae:80:a1:fa:01:4e:22:92: a9:fc:63:fa:03:3b:6d:96:73:c9:c3:60:5d:ad:44: e2:34:c3:f3:bf:39:26:d6:f8:7c:0a:c9:64:0d:12: 12:27:49:a4:b0:b0:ef:ad:b5:b6:3f:d3:b7:c3:9f: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:33:86:73:D4:D9:34:53:4B:C1:43:15:87:A7:17:1C:4E:E7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:35:5d:55:12:2a:47:02:ab:9c:58:13:c2:ed:f2:40:4a:3e: b5:e4:87:4e:e4:cb:be:92:7d:32:2e:26:f6:f1:14:99:20:98: 35:8f:53:72:a4:60:40:2c:e0:cb:48:a0:6d:06:56:03:6c:4e: 31:88:bb:9e:98:1d:3e:14:7d:e4:48:90:6e:cf:58:92:09:1a: c9:2a:5c:ab:46:91:e9:38:89:c7:e6:f2:a3:69:f1:97:65:df: 11:19:ff:ab:41:48:7e:62:29:ca:a4:0b:c3:42:b7:03:9f:0f: e7:ce:99:9b:28:83:e9:bf:8b:ab:bf:29:b5:eb:b7:f2:51:d3: f3:0e:36:ec:54:04:af:b7:cc:67:ea:ee:54:9f:9f:64:0f:a5: 82:28:f3:8d:7a:20:3c:bc:39:28:f1:7f:6d:77:07:1d:42:9e: 57:e9:98:2a:0d:22:3d:e5:53:61:5b:29:cb:51:b5:96:79:8d: ff:38:62:e4:17:91:fb:07:90:f5:a0:0f:d9:41:04:a0:9f:07: cb:c9:27:ba:12:37:ed:0b:4a:98:84:48:21:49:bc:46:9f:fe: a1:20:39:b7:fe:32:5b:d7:53:08:a7:c0:f7:10:82:eb:4c:ae: a4:38:32:11:ca:32:03:2d:b6:51:08:10:2b:c5:15:ba:13:ef: a9:e7:43:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG12ul23zxTPQo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MGRiMmFlNDYtMmQwMi00MTRjLThkNTUtNjUwNGUxZDA5MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynk5Q/Vl6ewvJWVaSbjL6SErQOjrdl1UqiSi APNwPr5hS8HrRa6tRlfW6tEuFpX01BURuwBMD/Xp6byroY5lhN18ccm5YFnK0kxu TKdGLfUwe7bUlr9XANY3ZS64a43/GGX9VoYulpVH8rQzV/+dEKV1vtvv2Gqu9+BP 0B8IRC0xalp/CzRt8kxXPd2DW5TC3ziEIeRBqBqxcFSX0c+vitvdA9z1wjaGKYVT NFWplhRGREBSwcXdmvu1++pjaRb5mA+U3VKNRe0yroCh+gFOIpKp/GP6AzttlnPJ w2BdrUTiNMPzvzkm1vh8CslkDRISJ0mksLDvrbW2P9O3w5+ZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObbM4Zz1Nk0U0vBQxWHpxccTueHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjQyOTI4ZGUtZGJjMS0z MjZhLTlhM2ItZmM5ZmM5Y2JkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG01XVUSKkcCq5xYE8Lt8kBKPrXkh07ky76SfTIuJvbxFJkgmDWPU3Kk YEAs4MtIoG0GVgNsTjGIu56YHT4UfeRIkG7PWJIJGskqXKtGkek4icfm8qNp8Zdl 3xEZ/6tBSH5iKcqkC8NCtwOfD+fOmZsog+m/i6u/KbXrt/JR0/MONuxUBK+3zGfq 7lSfn2QPpYIo8416IDy8OSjxf213Bx1CnlfpmCoNIj3lU2FbKctRtZZ5jf84YuQX kfsHkPWgD9lBBKCfB8vJJ7oSN+0LSpiESCFJvEaf/qEgObf+MlvXUwinwPcQgutM rqQ4MhHKMgMttlEIECvFFboT76nnQ8E= -----END CERTIFICATE-----Generated at Fri May 22 17:40:38 2026 by rpki-client