$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa File: 8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa (raw, json) Hash identifier: W8Bd5/+7IDbk5k0amDFJpK2pQk4knebdpvZlW8wDfNE= Subject key identifier: 56:09:5F:2A:C5:ED:BF:5D:3B:D3:48:D4:3C:FB:4C:DA:BE:AD:FA:A9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2CB220835B5F0291F890 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.38.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2c:b2:20:83:5b:5f:02:91:f8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=c83c4d3a-73bb-4772-b600-e804bf5e6224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:33:0d:4c:24:0f:ff:15:17:ae:f4:71:51: b0:81:e5:8f:9f:5d:34:fc:b6:f6:5d:33:09:eb:54: a4:9b:91:3f:4c:34:fe:d3:96:2c:00:2b:d4:b5:4f: 1a:23:78:cd:59:5f:05:ce:08:6b:c0:19:02:dd:d9: c3:b0:a7:f5:33:c7:f2:a3:c1:57:51:68:b1:a8:ac: ba:0d:ff:7e:bf:2f:ca:d1:b4:2a:c6:b0:31:51:8a: 7f:83:3e:c5:e7:56:be:c5:7f:72:06:f6:a7:33:f7: 5a:bd:d0:92:61:e6:95:f4:c6:5b:0e:0c:c9:d9:c4: c4:00:ed:6f:37:6e:68:c1:2c:e7:35:97:b7:d5:14: 8b:4f:65:28:4b:0e:56:89:3b:d4:21:9d:4f:43:76: c5:55:c2:4e:56:34:55:a6:63:fe:90:d2:b0:d4:8f: 48:77:ae:3f:b6:6b:0e:b2:a4:b2:62:e3:3c:9a:57: e3:c5:54:d4:a7:51:8e:76:74:d1:76:ea:8a:8a:3f: 7c:03:1d:90:16:f8:b7:3b:5e:e8:52:d2:ab:a6:9b: 5d:75:61:a7:b5:62:7b:ad:41:5d:36:7d:88:83:2b: 5f:81:c2:02:c2:da:3d:55:94:00:31:36:48:80:18: cd:f7:01:16:35:ee:a9:d4:15:6b:15:82:c9:19:b0: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:09:5F:2A:C5:ED:BF:5D:3B:D3:48:D4:3C:FB:4C:DA:BE:AD:FA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:51:cf:fc:56:05:99:82:14:f7:6c:e6:ae:53:15:03:75:80: d6:40:82:7c:11:98:30:87:01:43:fa:1f:28:e6:dd:4c:63:97: 5f:db:19:3b:4d:01:0b:7d:31:2e:13:3f:f3:0e:cd:37:61:0b: 44:16:9d:34:0b:b0:6b:d5:e1:32:9b:75:79:a9:77:45:38:24: 7a:d6:27:e2:f1:f4:3d:f1:66:bc:8f:af:ff:b6:93:4f:42:8c: ac:be:7e:29:12:32:a8:ae:5a:b8:8d:34:54:bf:87:0a:1a:a6: b9:1a:85:74:eb:5c:a1:a7:7a:bf:05:d7:57:0b:5f:73:13:e4: 79:a7:e1:bd:80:fa:01:5d:6a:a6:10:6a:e0:f0:0b:2b:82:5e: 45:ac:56:d7:f2:0b:d5:07:f5:b4:f1:14:68:31:51:12:0c:0e: a7:95:34:41:44:26:a4:24:ce:da:fd:ad:61:6b:f8:f0:24:e6: 78:4d:36:bd:a0:d0:d1:ef:58:8a:8d:6e:bb:d0:20:83:4a:13: c2:c2:f1:e4:ed:5b:bd:77:2d:61:5a:c7:20:c8:57:7a:91:ae: 0b:e3:a4:5f:5c:a7:81:a0:68:25:0d:cb:ad:fb:1b:32:9d:a5: 82:36:a0:98:9b:ff:86:a3:b5:d7:34:29:03:70:3e:00:7f:cc: c6:e2:b8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyyyIINbXwKR+JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk YzgzYzRkM2EtNzNiYi00NzcyLWI2MDAtZTgwNGJmNWU2MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd8zDUwkD/8VF670cVGwgeWPn100/Lb2XTMJ 61Skm5E/TDT+05YsACvUtU8aI3jNWV8FzghrwBkC3dnDsKf1M8fyo8FXUWixqKy6 Df9+vy/K0bQqxrAxUYp/gz7F51a+xX9yBvanM/davdCSYeaV9MZbDgzJ2cTEAO1v N25owSznNZe31RSLT2UoSw5WiTvUIZ1PQ3bFVcJOVjRVpmP+kNKw1I9Id64/tmsO sqSyYuM8mlfjxVTUp1GOdnTRduqKij98Ax2QFvi3O17oUtKrpptddWGntWJ7rUFd Nn2IgytfgcICwto9VZQAMTZIgBjN9wEWNe6p1BVrFYLJGbCWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYJXyrF7b9dO9NI1Dz7TNq+rfqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGFmYjA5N2QtYmY1MS0z ZmMwLTkxYjEtMjA0NmFjYmQzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpRz/xWBZmCFPds5q5TFQN1gNZAgnwRmDCHAUP6Hyjm3Uxjl1/bGTtN AQt9MS4TP/MOzTdhC0QWnTQLsGvV4TKbdXmpd0U4JHrWJ+Lx9D3xZryPr/+2k09C jKy+fikSMqiuWriNNFS/hwoaprkahXTrXKGner8F11cLX3MT5Hmn4b2A+gFdaqYQ auDwCyuCXkWsVtfyC9UH9bTxFGgxURIMDqeVNEFEJqQkztr9rWFr+PAk5nhNNr2g 0NHvWIqNbrvQIINKE8LC8eTtW713LWFaxyDIV3qRrgvjpF9cp4GgaCUNy637GzKd pYI2oJib/4ajtdc0KQNwPgB/zMbiuAA= -----END CERTIFICATE-----Generated at Fri May 22 17:38:56 2026 by rpki-client