$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/667fc059-a257-31d8-83bc-d0070578d874.roa File: 667fc059-a257-31d8-83bc-d0070578d874.roa (raw, json) Hash identifier: iKeVGLZf4JUquXfIKZKtouHzDdMEOgBc417Z2OU1vYk= Subject key identifier: C7:1F:90:21:0A:5C:9D:95:01:FC:9C:2C:4C:DB:56:50:41:4E:28:11 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B5F4F6C05E0A131588E84 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/667fc059-a257-31d8-83bc-d0070578d874.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.53.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:5f:4f:6c:05:e0:a1:31:58:8e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=95d0a962-5166-4427-bed1-530e01001866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:c5:e6:47:db:10:6e:71:25:1f:8c:13:32: f6:60:b5:3f:78:7c:27:59:0b:a9:b9:64:ea:58:3f: 07:4f:52:5e:3c:b5:b5:4a:c6:09:e1:01:76:98:99: 18:d1:c0:9c:2c:bd:ff:d9:86:6b:0b:57:b3:8b:04: c1:fc:e2:84:b3:f5:a0:32:e7:61:ef:84:01:9d:f7: 69:de:0b:a2:57:db:9d:a2:54:52:a6:d6:56:15:1f: e6:90:2e:e5:e0:91:16:11:41:51:10:61:3a:68:f8: 64:43:02:76:4a:d2:75:39:fb:58:32:2f:8d:48:15: a4:39:96:6e:f8:cf:94:37:10:30:3d:83:9f:d6:f9: 20:9a:cf:fa:6c:c6:1f:4f:bc:c3:d7:1f:80:ce:77: d4:59:6a:e4:9a:92:06:9c:51:89:e9:76:63:e0:dc: a3:66:4d:fb:92:c2:18:3f:6e:b9:08:8b:2a:d1:9c: 6a:fe:77:98:b6:c4:e7:31:a5:c1:a5:8c:5a:a1:bd: 22:19:32:b7:4d:d4:a9:d5:e6:1f:cd:46:a2:a7:d8: 32:6c:20:c7:39:57:33:36:bd:ef:a0:2f:fe:28:fd: b9:49:2a:8f:40:7d:f0:db:99:3b:61:f4:44:5c:e2: a7:8b:a3:86:6a:03:76:c9:5d:1f:88:2d:bb:54:75: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:90:21:0A:5C:9D:95:01:FC:9C:2C:4C:DB:56:50:41:4E:28:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/667fc059-a257-31d8-83bc-d0070578d874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5d:e9:09:2f:23:56:a9:1b:0e:cb:e8:21:46:15:0c:23:29: 73:26:04:2c:56:94:7f:d1:d3:b6:55:b4:d9:dc:3e:ed:15:4a: 5a:8e:e0:c7:d8:8d:4f:14:d9:71:40:41:20:9e:d8:de:7c:f0: 1c:75:bd:5a:2c:18:4d:34:ff:a2:bd:be:31:2f:97:75:80:43: d1:af:6b:d1:f3:c9:8c:c1:38:7a:d3:46:02:ec:74:b9:b0:8e: 84:1f:0a:b1:1c:c5:e2:6b:75:4a:36:91:cc:90:c5:8b:81:27: 22:82:a9:0d:33:15:71:3d:1a:73:35:c3:61:65:67:78:40:dc: a0:97:3c:e5:a4:96:7c:5d:9b:03:99:bd:66:34:c2:51:ac:70: e5:07:11:1c:75:07:72:36:38:1c:a5:ef:f2:63:15:8c:d8:fd: a2:e7:f9:10:36:ee:4d:5d:b4:0c:d7:8c:50:c5:51:59:1c:ed: 7a:1b:4a:4d:70:ab:9f:d6:18:a9:af:24:11:b8:17:af:ba:c5: 97:a8:ac:d7:75:1c:95:b8:ca:ac:79:64:18:ef:7d:c0:99:1c: 76:c5:37:27:86:ff:69:10:26:32:c4:a7:b6:d3:40:51:73:e4: 21:a6:bc:a0:9a:6c:f2:34:b1:bd:e0:a0:3e:75:14:de:31:4d: 5f:f5:d4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG19PbAXgoTFYjoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk OTVkMGE5NjItNTE2Ni00NDI3LWJlZDEtNTMwZTAxMDAxODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYDF5kfbEG5xJR+MEzL2YLU/eHwnWQupuWTq WD8HT1JePLW1SsYJ4QF2mJkY0cCcLL3/2YZrC1eziwTB/OKEs/WgMudh74QBnfdp 3guiV9udolRSptZWFR/mkC7l4JEWEUFREGE6aPhkQwJ2StJ1OftYMi+NSBWkOZZu +M+UNxAwPYOf1vkgms/6bMYfT7zD1x+AznfUWWrkmpIGnFGJ6XZj4NyjZk37ksIY P265CIsq0Zxq/neYtsTnMaXBpYxaob0iGTK3TdSp1eYfzUaip9gybCDHOVczNr3v oC/+KP25SSqPQH3w25k7YfREXOKni6OGagN2yV0fiC27VHUtBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcfkCEKXJ2VAfycLEzbVlBBTigRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjY3ZmMwNTktYTI1Ny0z MWQ4LTgzYmMtZDAwNzA1NzhkODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNd6QkvI1apGw7L6CFGFQwjKXMmBCxWlH/R07ZVtNncPu0VSlqO4MfY jU8U2XFAQSCe2N588Bx1vVosGE00/6K9vjEvl3WAQ9Gva9HzyYzBOHrTRgLsdLmw joQfCrEcxeJrdUo2kcyQxYuBJyKCqQ0zFXE9GnM1w2FlZ3hA3KCXPOWklnxdmwOZ vWY0wlGscOUHERx1B3I2OByl7/JjFYzY/aLn+RA27k1dtAzXjFDFUVkc7XobSk1w q5/WGKmvJBG4F6+6xZeorNd1HJW4yqx5ZBjvfcCZHHbFNyeG/2kQJjLEp7bTQFFz 5CGmvKCabPI0sb3goD51FN4xTV/11JQ= -----END CERTIFICATE-----Generated at Fri May 22 17:41:14 2026 by rpki-client