$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa File: 6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa (raw, json) Hash identifier: Vm05oB0ZvFi/L+Lhhm1CJ1ERXG0mZD6Ddt5s6UUPqfY= Subject key identifier: 57:4F:AE:D3:CE:B7:3F:06:D2:8F:57:5F:A7:0A:15:C5:A6:99:51:84 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2B7B817A6DF9371E9E20 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.47.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2b:7b:81:7a:6d:f9:37:1e:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=be458447-d045-4d94-ae97-fb72a3a22fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:32:c7:1a:01:e6:e9:4e:02:21:1a:53:ea: 90:52:5b:e7:3b:56:ff:33:a8:a2:a2:a2:e7:b1:07: 43:70:c0:97:39:9f:62:71:ae:44:3e:86:50:0e:c4: 17:fa:a1:54:3b:5e:4a:df:fc:b0:8f:cf:28:11:f6: 8a:bc:6b:ea:a2:a6:83:83:18:47:9d:8a:5a:2d:94: df:4e:d1:b5:4b:7c:7a:09:fb:19:d4:e2:c2:f1:26: e9:44:6d:11:54:8e:98:aa:61:cc:c2:f6:c8:12:c3: f0:93:29:d2:42:c8:00:0f:3c:1c:fd:1a:c5:2b:58: 7c:8a:4f:b4:35:9a:1e:fe:24:6e:1d:92:ff:77:67: 5b:16:cd:60:17:86:65:e9:ca:14:f5:d5:08:90:28: ab:04:d8:30:a3:28:6e:b2:8b:14:99:93:89:0b:95: ee:f0:85:b7:61:fb:ed:ec:04:a5:09:78:66:b4:bb: 14:7f:6b:9c:83:a3:ae:bf:02:31:93:1e:bc:bb:79: 18:99:89:a7:3d:4e:46:c9:69:4e:32:17:9d:84:9d: 2f:eb:53:74:67:5d:d1:1e:a0:fd:21:c5:fa:76:18: 0b:bc:16:52:d3:71:aa:87:c3:78:c8:3e:07:41:ec: f6:ad:09:0f:24:d3:bb:89:4e:a5:83:01:bd:e7:c6: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4F:AE:D3:CE:B7:3F:06:D2:8F:57:5F:A7:0A:15:C5:A6:99:51:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:65:09:99:89:76:f3:49:ac:c3:36:84:2c:af:90:d5:94:bb: 7e:11:fa:61:8a:7c:55:b5:e5:e5:79:32:05:5c:1a:46:6c:80: fe:64:93:63:e2:ab:88:1f:3b:43:80:3e:93:5d:17:d4:a6:9a: b4:00:af:d8:be:85:2e:15:09:d9:a1:29:53:31:84:b0:09:1b: 43:f8:c1:3a:f1:2a:4e:e6:bf:48:2d:c1:f4:6b:79:e8:f9:7a: a8:86:2c:de:cc:69:29:76:7a:58:27:c6:04:51:ac:81:38:55: 09:89:80:a6:2d:fb:33:9b:24:35:35:d2:5a:e7:77:b7:a3:42: ce:69:b8:90:10:27:b4:84:6e:52:ee:68:e2:dc:aa:a3:07:ba: 99:76:e7:d7:6d:6d:be:65:ce:0c:d9:ea:20:a8:3f:fd:99:a1: 6f:31:02:de:d3:e3:e8:c5:f3:52:45:d5:bd:0b:35:43:6a:53: 39:7f:c9:fe:0a:38:99:fd:84:a1:27:09:ca:14:aa:b1:8b:3c: 51:f3:d4:34:73:c8:2a:77:06:ef:dc:90:74:47:91:62:2e:79: 4a:f6:7e:5c:8f:90:52:db:9c:5f:98:7c:84:38:1d:ac:ee:83: c9:5d:66:3b:f8:13:bb:3c:3f:3c:66:98:85:78:d4:c5:10:fe: 3a:40:27:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyt7gXpt+TceniAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk YmU0NTg0NDctZDA0NS00ZDk0LWFlOTctZmI3MmEzYTIyZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ4yxxoB5ulOAiEaU+qQUlvnO1b/M6iioqLn sQdDcMCXOZ9ica5EPoZQDsQX+qFUO15K3/ywj88oEfaKvGvqoqaDgxhHnYpaLZTf TtG1S3x6CfsZ1OLC8SbpRG0RVI6YqmHMwvbIEsPwkynSQsgADzwc/RrFK1h8ik+0 NZoe/iRuHZL/d2dbFs1gF4Zl6coU9dUIkCirBNgwoyhusosUmZOJC5Xu8IW3Yfvt 7ASlCXhmtLsUf2ucg6OuvwIxkx68u3kYmYmnPU5GyWlOMhedhJ0v61N0Z13RHqD9 IcX6dhgLvBZS03Gqh8N4yD4HQez2rQkPJNO7iU6lgwG958YSrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdPrtPOtz8G0o9XX6cKFcWmmVGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNmNmNzEyOGQtZTY5YS0z ZjNlLThhYjctMjZhYTlmNzQwYmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtlCZmJdvNJrMM2hCyvkNWUu34R+mGKfFW15eV5MgVcGkZsgP5kk2Pi q4gfO0OAPpNdF9SmmrQAr9i+hS4VCdmhKVMxhLAJG0P4wTrxKk7mv0gtwfRreej5 eqiGLN7MaSl2elgnxgRRrIE4VQmJgKYt+zObJDU10lrnd7ejQs5puJAQJ7SEblLu aOLcqqMHupl259dtbb5lzgzZ6iCoP/2ZoW8xAt7T4+jF81JF1b0LNUNqUzl/yf4K OJn9hKEnCcoUqrGLPFHz1DRzyCp3Bu/ckHRHkWIueUr2flyPkFLbnF+YfIQ4Hazu g8ldZjv4E7s8PzxmmIV41MUQ/jpAJ0U= -----END CERTIFICATE-----Generated at Fri May 22 17:37:28 2026 by rpki-client