$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa File: a436ac52-91aa-3c41-8e92-858df4f15e6d.roa (raw, json) Hash identifier: CbwtMkVt4+s6YUp/KzSSsST74qNmwfz97df1eKNpdjQ= Subject key identifier: AC:90:00:34:FB:D6:0F:B3:F0:60:65:8D:75:00:58:E1:40:36:18:48 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2D3441A0FFEF46C9A480 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.32.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2d:34:41:a0:ff:ef:46:c9:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=81f63366-c7e9-4259-9874-bfce2c519cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:92:82:83:72:4f:ba:c9:73:04:fb:9e:0f: a8:cc:b9:32:e0:e2:24:eb:34:92:7d:7d:27:4b:b0: f0:d7:e0:35:50:70:b3:16:c3:46:77:62:55:67:60: 89:af:43:df:18:d3:77:32:47:6c:3f:2b:44:92:bd: 1a:3d:37:11:d9:d0:a3:26:c8:80:9e:c4:90:32:fa: 37:fa:af:48:9c:ed:5a:62:0e:4d:7c:e1:67:f2:fa: 1d:6e:4f:cf:f7:0f:ea:78:b9:16:5c:75:3c:25:ff: af:cf:74:df:e0:4d:e0:73:39:82:f2:e0:e9:c7:85: 94:c2:ea:b7:c7:fe:bf:f7:42:15:72:a8:88:cd:76: b1:cb:03:9a:89:72:39:30:cc:53:59:fb:0d:d9:a6: b8:19:20:90:69:5e:21:db:2c:ef:d8:25:7f:03:6e: 8c:7c:3b:76:af:1e:c7:6f:8c:56:4d:4a:81:02:1f: 90:7c:97:14:a2:7b:f3:82:93:05:a7:c4:40:e8:e1: 49:64:bf:04:73:ce:a9:d1:9d:31:08:f2:d8:11:43: 21:b9:f8:69:e4:f3:0c:c2:05:c4:ff:b3:2d:cc:ca: cb:72:4e:e2:51:be:f3:39:12:9e:83:5b:87:20:ec: 35:fa:59:f4:6f:38:d0:4d:e0:79:24:7d:a3:02:69: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:00:34:FB:D6:0F:B3:F0:60:65:8D:75:00:58:E1:40:36:18:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e7:07:f8:95:6b:d1:90:64:17:ec:0b:4e:ad:ea:82:bc:95: 8e:29:6b:8f:ce:2a:c7:20:55:71:aa:71:ab:44:3e:39:e3:32: fb:c1:a8:2a:2d:22:f3:80:11:3b:00:6d:2c:a5:17:e9:6c:65: 74:2b:cd:de:c3:15:42:10:c2:5f:e4:8e:a1:64:22:ef:d0:21: c5:fe:fa:65:62:b5:ff:38:0f:06:9f:32:97:8f:23:53:ca:b0: 9f:72:82:11:49:5e:63:36:33:38:b5:c3:87:c8:a2:2b:44:c2: 0f:18:01:e4:e7:b4:6a:7b:37:11:93:48:e7:69:c1:56:e2:ca: cc:ea:97:f4:2a:73:51:36:4d:94:a5:57:7f:8e:3b:12:9d:72: e8:db:63:4b:9a:01:f2:20:4a:c9:10:d0:34:06:87:b2:c1:c7: 7f:1b:94:8d:d9:83:78:71:44:14:59:b7:31:c6:2d:c7:48:41: 07:4f:86:07:1c:78:4c:9a:f9:74:a6:7e:e1:a0:6d:88:90:8d: 0e:b5:58:0f:a1:e9:dc:70:db:ed:34:34:24:50:7f:e8:4c:41: 27:c1:43:60:2f:0e:14:08:c2:2e:11:42:5e:98:b5:87:ac:26: ee:2c:1a:68:8b:ee:14:cb:0a:b2:f9:48:1e:28:07:25:d7:81: 7a:bf:7d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGy00QaD/70bJpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ODFmNjMzNjYtYzdlOS00MjU5LTk4NzQtYmZjZTJjNTE5Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAmSgoNyT7rJcwT7ng+ozLky4OIk6zSSfX0n S7Dw1+A1UHCzFsNGd2JVZ2CJr0PfGNN3MkdsPytEkr0aPTcR2dCjJsiAnsSQMvo3 +q9InO1aYg5NfOFn8vodbk/P9w/qeLkWXHU8Jf+vz3Tf4E3gczmC8uDpx4WUwuq3 x/6/90IVcqiIzXaxywOaiXI5MMxTWfsN2aa4GSCQaV4h2yzv2CV/A26MfDt2rx7H b4xWTUqBAh+QfJcUonvzgpMFp8RA6OFJZL8Ec86p0Z0xCPLYEUMhufhp5PMMwgXE /7MtzMrLck7iUb7zORKeg1uHIOw1+ln0bzjQTeB5JH2jAmlvVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyQADT71g+z8GBljXUAWOFANhhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTQzNmFjNTItOTFhYS0z YzQxLThlOTItODU4ZGY0ZjE1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPnB/iVa9GQZBfsC06t6oK8lY4pa4/OKscgVXGqcatEPjnjMvvBqCot IvOAETsAbSylF+lsZXQrzd7DFUIQwl/kjqFkIu/QIcX++mVitf84DwafMpePI1PK sJ9yghFJXmM2Mzi1w4fIoitEwg8YAeTntGp7NxGTSOdpwVbiyszql/Qqc1E2TZSl V3+OOxKdcujbY0uaAfIgSskQ0DQGh7LBx38blI3Zg3hxRBRZtzHGLcdIQQdPhgcc eEya+XSmfuGgbYiQjQ61WA+h6dxw2+00NCRQf+hMQSfBQ2AvDhQIwi4RQl6YtYes Ju4sGmiL7hTLCrL5SB4oByXXgXq/fXY= -----END CERTIFICATE-----Generated at Fri May 22 17:39:03 2026 by rpki-client