$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json) Hash identifier: up3PpGbqO5FVlI8vxpkAmg1hGMlWr46QFrDj8rvMIyY= Subject key identifier: 8D:30:DC:E9:A9:57:0A:1E:B4:1D:0B:01:52:E9:7F:A4:4D:F4:C6:D9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B208B8E879851D9902D00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.35.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:20:8b:8e:87:98:51:d9:90:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=5e73b918-0681-4fb6-89d0-5fc9e0680b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:b9:32:89:68:d1:bf:7b:98:38:13:59:25: e9:08:0e:75:8a:9d:cd:36:02:90:b9:5f:11:c1:00: ea:47:f7:7d:93:c2:a3:12:f1:3d:94:38:08:9a:8e: cb:7b:12:07:2d:49:a3:29:38:c8:09:9c:4d:95:22: d1:43:86:47:3b:31:cb:3e:7e:20:a1:30:0c:59:ab: 75:dd:ac:02:60:de:75:ef:6e:ed:72:05:83:ae:ee: 17:b7:3c:2b:ce:59:bc:1e:6a:9f:df:1d:e7:c8:55: 6b:c7:a8:d6:31:01:87:12:7d:11:ed:20:2c:61:6f: dc:cb:49:e8:ca:d0:54:e3:39:0b:4b:3c:c7:21:6f: 7e:84:e7:2b:d0:cd:d7:50:28:0c:d7:3f:73:fe:4e: 2e:a9:57:29:bb:33:18:ef:a4:54:1c:5b:90:4b:7e: 40:c9:bc:98:8b:f6:6f:5c:2b:85:a4:ee:d7:0e:2b: 06:4d:53:b7:dd:87:e2:d5:a5:94:9e:2e:e8:4f:da: 04:dd:db:f1:d1:1a:5a:82:ef:5b:50:2d:78:de:42: 98:3c:94:d8:5b:06:13:d9:05:a2:23:81:0b:aa:0f: e1:2c:ae:22:1c:c8:9b:a2:3a:19:37:f1:c5:a2:2b: ba:5e:92:af:5a:4c:7c:e9:aa:27:e6:19:68:eb:ad: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:30:DC:E9:A9:57:0A:1E:B4:1D:0B:01:52:E9:7F:A4:4D:F4:C6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a8:fd:8b:f9:a2:6a:46:c3:d7:88:3b:e6:b7:cf:a4:87:0d: 9a:e6:15:77:9d:f5:10:f1:43:0e:b1:0a:24:8b:c8:ac:58:da: 18:dd:4e:ca:46:92:b7:fd:c5:d0:c7:60:e3:9e:63:70:0d:7b: ec:a0:09:95:6c:ed:89:a1:83:f9:ed:67:1c:84:bb:36:c0:db: 37:e9:dd:ea:92:47:88:8f:61:0e:46:e0:86:13:33:2c:27:ee: 7f:4f:7f:f0:59:87:73:05:e2:8b:b5:db:31:d4:a6:2e:67:e8: 72:76:3d:f9:90:67:07:de:75:a2:1d:23:27:47:57:08:90:66: ba:fa:32:a3:08:87:57:f7:d4:0d:d4:73:2f:43:53:40:09:eb: ed:1c:52:a2:02:12:9b:3f:34:a9:3a:bb:a5:96:4e:2d:2f:e2: 73:e5:24:09:1b:f8:1c:64:e5:ae:00:26:ac:40:ed:d9:5c:f3: 29:53:8c:2e:97:85:cf:62:94:98:58:8b:8c:80:61:94:f9:fb: f4:17:6f:69:0c:9b:2b:69:92:a3:13:2e:e2:1a:38:70:2e:3f: 80:1b:2d:c3:67:02:ef:a1:ec:fa:75:99:ab:02:0f:43:66:fb: 1b:cc:20:8b:0a:d8:a4:e7:0f:d5:d4:78:18:9d:ea:48:1b:16: a2:28:5d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyCLjoeYUdmQLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NWU3M2I5MTgtMDY4MS00ZmI2LTg5ZDAtNWZjOWUwNjgwYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqK5Molo0b97mDgTWSXpCA51ip3NNgKQuV8R wQDqR/d9k8KjEvE9lDgImo7LexIHLUmjKTjICZxNlSLRQ4ZHOzHLPn4goTAMWat1 3awCYN51727tcgWDru4Xtzwrzlm8Hmqf3x3nyFVrx6jWMQGHEn0R7SAsYW/cy0no ytBU4zkLSzzHIW9+hOcr0M3XUCgM1z9z/k4uqVcpuzMY76RUHFuQS35AybyYi/Zv XCuFpO7XDisGTVO33Yfi1aWUni7oT9oE3dvx0Rpagu9bUC143kKYPJTYWwYT2QWi I4ELqg/hLK4iHMibojoZN/HFoiu6XpKvWkx86aon5hlo661JPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0w3OmpVwoetB0LAVLpf6RN9MbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJhZjA1ODktNTA2MC0z YTk4LTliNTMtZWE3YmUyNmYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6o/Yv5ompGw9eIO+a3z6SHDZrmFXed9RDxQw6xCiSLyKxY2hjdTspG krf9xdDHYOOeY3ANe+ygCZVs7Ymhg/ntZxyEuzbA2zfp3eqSR4iPYQ5G4IYTMywn 7n9Pf/BZh3MF4ou12zHUpi5n6HJ2PfmQZwfedaIdIydHVwiQZrr6MqMIh1f31A3U cy9DU0AJ6+0cUqICEps/NKk6u6WWTi0v4nPlJAkb+Bxk5a4AJqxA7dlc8ylTjC6X hc9ilJhYi4yAYZT5+/QXb2kMmytpkqMTLuIaOHAuP4AbLcNnAu+h7Pp1masCD0Nm +xvMIIsK2KTnD9XUeBid6kgbFqIoXZA= -----END CERTIFICATE-----Generated at Fri May 22 17:39:31 2026 by rpki-client