$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa File: b968a0f5-a9a4-37a1-ae22-297830d659f3.roa (raw, json) Hash identifier: sswuxJf3B/TVzLNPoqTmGuQCuqbJ+tRUR97QezgSYHM= Subject key identifier: 65:44:B7:38:A0:92:83:1B:44:97:6E:80:F1:2A:B1:E0:61:E5:19:E3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B609061F219E3D9D61D80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:60:90:61:f2:19:e3:d9:d6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=1f85f600-ff81-46c3-85ee-3a6147f789d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:c9:52:e3:dd:6a:39:47:4e:72:2b:5a:f8: 38:f2:92:92:b3:11:99:56:8d:ed:af:f3:61:26:4d: eb:5e:d1:a2:6b:9e:7d:6a:95:df:07:f2:00:92:22: 5d:bb:21:d4:9d:c6:39:ed:08:e6:e0:00:7a:ff:e4: fa:b5:d3:e9:9e:d2:55:60:5e:fc:d9:2b:14:2a:64: 1e:31:6c:95:17:7f:cf:d2:99:ab:3f:43:23:ae:e7: f8:f6:0c:d7:8c:f2:20:79:b0:a3:8c:1f:1a:4f:fa: f9:aa:16:c0:90:9d:82:47:d9:c4:72:79:f0:d1:4a: c4:dd:68:ec:47:09:80:41:0e:6c:c2:2e:24:aa:84: 62:ba:56:f8:16:49:31:0b:9c:76:c5:80:d8:e9:4f: 6f:c8:fb:c4:64:9b:fd:32:c7:93:7a:22:37:bf:3e: a7:01:49:4d:34:52:d3:8b:a7:20:e9:60:77:69:4b: b1:ef:34:ee:38:10:2f:a7:b4:cd:ef:7d:5f:e1:ce: 81:29:0b:bc:08:13:d8:6d:90:79:3a:13:ea:91:51: 27:4e:44:82:33:79:e4:79:41:a8:4e:87:02:04:a4: 4c:24:5b:b4:35:b6:18:87:7b:10:4e:dc:e3:33:e0: df:54:07:73:a9:28:a9:2c:cb:a9:1e:64:fe:f3:53: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:B7:38:A0:92:83:1B:44:97:6E:80:F1:2A:B1:E0:61:E5:19:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4f:c9:45:b9:01:a5:42:61:fb:80:ea:2c:db:84:d0:02:a0: 08:d2:c3:c5:6b:69:05:45:2a:05:29:a3:93:f9:36:3d:91:2c: b9:bc:c3:73:36:e7:c7:77:ab:d6:bb:68:81:4c:44:b5:e2:fa: 5f:75:82:37:37:80:b2:db:ec:f4:24:94:49:d9:b8:69:54:db: 25:68:7e:ea:ba:ed:01:ae:83:b0:98:24:8b:75:8b:49:6c:db: 75:e9:8e:30:88:8f:31:ba:84:7b:d5:cc:fe:77:cd:44:f3:3f: 35:53:66:df:d7:95:24:e8:f3:59:69:b7:14:68:a7:20:fe:fa: 51:ed:39:b7:80:88:b6:55:a4:f1:e7:71:da:ac:7d:76:26:08: 4f:81:d0:23:f2:04:3d:13:72:64:b4:5c:8a:4a:b2:94:18:9a: 75:bc:14:9e:53:7d:03:53:1b:a4:0e:69:7e:29:da:86:a0:8d: b8:90:73:eb:b2:b7:47:fe:70:d3:14:b5:a8:5c:d3:c7:13:e8: 85:ae:89:c8:5d:4a:25:2b:8b:61:e1:30:4c:e3:47:83:cf:42: 04:26:ab:4a:cb:d5:e7:b7:2b:b6:7b:cc:25:19:8b:62:36:0b: 02:3d:cc:e2:df:9a:68:3d:42:1a:fe:17:6f:20:60:fa:78:31: a1:1a:96:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2CQYfIZ49nWHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MWY4NWY2MDAtZmY4MS00NmMzLTg1ZWUtM2E2MTQ3Zjc4OWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYHJUuPdajlHTnIrWvg48pKSsxGZVo3tr/Nh Jk3rXtGia559apXfB/IAkiJduyHUncY57Qjm4AB6/+T6tdPpntJVYF782SsUKmQe MWyVF3/P0pmrP0Mjruf49gzXjPIgebCjjB8aT/r5qhbAkJ2CR9nEcnnw0UrE3Wjs RwmAQQ5swi4kqoRiulb4FkkxC5x2xYDY6U9vyPvEZJv9MseTeiI3vz6nAUlNNFLT i6cg6WB3aUux7zTuOBAvp7TN731f4c6BKQu8CBPYbZB5OhPqkVEnTkSCM3nkeUGo TocCBKRMJFu0NbYYh3sQTtzjM+DfVAdzqSipLMupHmT+81N3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVEtzigkoMbRJdugPEqseBh5RnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjk2OGEwZjUtYTlhNC0z N2ExLWFlMjItMjk3ODMwZDY1OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJPyUW5AaVCYfuA6izbhNACoAjSw8VraQVFKgUpo5P5Nj2RLLm8w3M2 58d3q9a7aIFMRLXi+l91gjc3gLLb7PQklEnZuGlU2yVofuq67QGug7CYJIt1i0ls 23XpjjCIjzG6hHvVzP53zUTzPzVTZt/XlSTo81lptxRopyD++lHtObeAiLZVpPHn cdqsfXYmCE+B0CPyBD0TcmS0XIpKspQYmnW8FJ5TfQNTG6QOaX4p2oagjbiQc+uy t0f+cNMUtahc08cT6IWuichdSiUri2HhMEzjR4PPQgQmq0rL1ee3K7Z7zCUZi2I2 CwI9zOLfmmg9Qhr+F28gYPp4MaEalqA= -----END CERTIFICATE-----Generated at Fri May 22 17:38:44 2026 by rpki-client