$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa File: 9cd416fb-8786-3914-9147-fb72fa08441a.roa (raw, json) Hash identifier: dfJDV8PoZW70W2AUP2xLzy1yaSRM+ju9jx9b4oHfQ+w= Subject key identifier: 54:85:B7:7A:53:80:7F:60:48:9A:A7:01:1E:86:E1:55:90:87:0D:12 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2F27870BFD34DA63C240 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.33.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2f:27:87:0b:fd:34:da:63:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=447e810a-8781-4243-8cdb-0dd96ba0c33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:e7:fd:ab:5a:f2:5a:20:75:98:d5:d5:47: 63:77:26:5d:23:7d:b3:a6:52:5d:5c:1a:3c:93:10: 7b:12:bb:dc:00:75:24:e7:73:a7:e6:02:58:dc:3e: 32:12:76:e9:3c:44:c5:62:4e:31:41:3c:51:d7:38: 1a:41:12:3c:03:87:d8:26:0a:f8:3f:98:fe:51:05: 56:e4:a9:b9:1d:00:da:3f:16:7c:bd:2f:9e:38:19: 11:f6:ca:8b:55:03:70:41:e6:fa:ed:09:6a:6c:e5: 00:ff:b6:f0:e0:05:89:63:8e:46:7a:c9:47:33:9a: 90:fa:f0:42:55:7d:91:ec:4c:0c:ee:40:1a:d4:f9: 7e:b8:62:85:67:d7:cc:f8:bc:c7:51:5d:a0:e6:f1: 37:a0:12:5b:58:8d:01:c6:fc:04:de:02:6b:9f:3b: 73:94:5c:9e:ce:91:84:06:9b:6c:f1:86:68:11:dc: b9:6a:06:42:b4:97:28:8d:e8:4b:e3:30:dc:1a:0f: 12:47:d1:f8:60:91:e8:a4:81:22:70:01:9c:04:f1: f3:ad:aa:67:09:6b:e5:44:a8:66:af:ab:a5:38:f1: 63:60:f5:9f:e6:d0:3c:5d:1e:b4:b9:80:ac:c0:59: 53:00:9c:ef:3f:b1:a6:93:0e:3a:ed:07:60:df:77: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:85:B7:7A:53:80:7F:60:48:9A:A7:01:1E:86:E1:55:90:87:0D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bb:53:14:b5:9b:a5:8c:92:fb:8a:de:6a:ab:27:5c:ea:29: 7b:38:64:a0:9b:66:d8:6a:71:d3:9d:0d:96:50:3c:30:66:9d: bc:29:30:63:49:67:a1:8c:00:2c:05:77:a7:c0:4f:01:65:e0: f1:71:60:58:d8:42:b2:61:06:d8:32:af:69:ae:35:ba:51:1f: 1f:fa:11:4d:f1:44:27:46:2e:43:9a:03:7e:df:7e:f6:e6:0f: 15:0b:8d:28:b1:50:e6:f6:f4:2c:f8:d0:e8:6e:3c:9e:b5:e9: f8:65:9a:4c:a9:7f:78:25:0a:06:0d:77:4a:9e:fe:dd:06:d5: ac:18:fc:f3:9b:39:08:06:b4:d5:0b:90:2d:c0:f0:8a:33:ad: 50:6c:a7:79:1a:64:b1:1e:d1:48:54:8b:11:85:ee:68:93:16: 2d:6e:e2:33:8b:0f:7a:f6:aa:3c:f9:10:ae:ce:01:33:58:b6: aa:7e:9e:6c:46:d9:64:63:fd:ce:36:cc:81:c1:51:14:bf:f8: 78:ea:cf:43:f1:72:21:08:d9:ca:89:7b:68:70:4b:60:03:2b: f6:25:d1:11:e0:72:36:5c:f4:18:9f:35:49:a3:1d:51:d8:1b: ae:33:0e:60:30:68:0f:ed:32:36:0d:55:3a:13:0f:2f:8b:64: 90:09:f8:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGy8nhwv9NNpjwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NDQ3ZTgxMGEtODc4MS00MjQzLThjZGItMGRkOTZiYTBjMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmzn/ata8logdZjV1UdjdyZdI32zplJdXBo8 kxB7ErvcAHUk53On5gJY3D4yEnbpPETFYk4xQTxR1zgaQRI8A4fYJgr4P5j+UQVW 5Km5HQDaPxZ8vS+eOBkR9sqLVQNwQeb67QlqbOUA/7bw4AWJY45GeslHM5qQ+vBC VX2R7EwM7kAa1Pl+uGKFZ9fM+LzHUV2g5vE3oBJbWI0BxvwE3gJrnztzlFyezpGE Bpts8YZoEdy5agZCtJcojehL4zDcGg8SR9H4YJHopIEicAGcBPHzrapnCWvlRKhm r6ulOPFjYPWf5tA8XR60uYCswFlTAJzvP7Gmkw467Qdg33dnUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSFt3pTgH9gSJqnAR6G4VWQhw0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWNkNDE2ZmItODc4Ni0z OTE0LTkxNDctZmI3MmZhMDg0NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy7UxS1m6WMkvuK3mqrJ1zqKXs4ZKCbZthqcdOdDZZQPDBmnbwpMGNJ Z6GMACwFd6fATwFl4PFxYFjYQrJhBtgyr2muNbpRHx/6EU3xRCdGLkOaA37ffvbm DxULjSixUOb29Cz40OhuPJ616fhlmkypf3glCgYNd0qe/t0G1awY/PObOQgGtNUL kC3A8IozrVBsp3kaZLEe0UhUixGF7miTFi1u4jOLD3r2qjz5EK7OATNYtqp+nmxG 2WRj/c42zIHBURS/+Hjqz0PxciEI2cqJe2hwS2ADK/Yl0RHgcjZc9BifNUmjHVHY G64zDmAwaA/tMjYNVToTDy+LZJAJ+Ps= -----END CERTIFICATE-----Generated at Fri May 22 18:30:52 2026 by rpki-client