$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bde3aa23-417b-3df7-81f2-cca7796c6b47.roa File: bde3aa23-417b-3df7-81f2-cca7796c6b47.roa (raw, json) Hash identifier: cJWlQMxxZeyR+9OXGJoHt2H8h8kqVAV5N+sswD9J0G8= Subject key identifier: 6C:B3:31:0E:96:54:61:7C:D3:5E:FB:64:BE:A5:15:7D:F7:88:12:89 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2C7E20573803CA728B00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bde3aa23-417b-3df7-81f2-cca7796c6b47.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.55.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2c:7e:20:57:38:03:ca:72:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=3c8dc409-abf5-4013-9c36-f21de5176227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:5f:e3:c3:89:28:84:44:98:53:a9:66:31: 37:2c:22:a1:e8:25:3a:b9:8a:ba:b9:f8:51:d4:70: ac:91:9b:fc:5f:b8:c8:0d:3c:1c:9f:cc:e5:31:ae: 82:8d:1e:f1:2b:6b:0a:60:04:58:35:22:e2:13:d9: 31:f1:25:a1:a9:f1:4b:50:aa:ad:39:01:fd:26:ad: 32:fd:7e:8b:56:b7:d0:45:06:01:2a:09:96:39:c7: 7e:11:2c:7c:dd:db:5d:f6:cc:2b:ca:7f:ec:4a:df: dc:dc:4e:3c:26:05:c9:bd:e6:3e:77:50:74:8b:c5: 64:55:14:ab:29:75:04:83:2f:20:46:84:45:ee:a7: 39:44:34:e3:5e:40:e9:15:31:ca:ea:b8:8f:59:fe: 55:0b:d4:56:35:e4:46:bb:f7:9d:c5:d8:87:47:ed: e8:f7:00:b9:b3:33:ed:6c:e9:18:43:78:6b:69:66: 21:d2:87:12:2b:0e:54:aa:30:eb:3b:a3:2b:61:ad: 91:69:26:48:76:99:f6:24:fa:77:74:cd:ad:bc:20: 30:07:6f:92:9e:66:91:87:c9:75:78:a6:c9:7b:47: 34:37:da:1c:76:2c:1f:98:a5:0c:0a:04:e4:d5:0e: 69:58:dc:2c:27:36:9e:9e:ad:9f:b3:a5:6a:54:29: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:31:0E:96:54:61:7C:D3:5E:FB:64:BE:A5:15:7D:F7:88:12:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bde3aa23-417b-3df7-81f2-cca7796c6b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.55.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:79:02:0c:66:ee:ed:f5:5a:96:13:e8:2d:06:14:cf:17:af: 8a:22:88:1b:2a:a7:4a:56:1e:3d:bb:9d:8b:4a:a0:a9:2c:5f: 0c:93:04:08:fb:c8:44:b4:5b:0e:1f:3b:5e:04:bc:33:e8:5a: 13:27:ee:be:d7:90:99:65:11:d7:b4:51:63:9e:57:54:92:14: a2:60:65:73:bf:63:e3:4f:fd:62:30:89:cd:aa:34:14:21:1f: 97:59:6b:ee:76:ec:5a:88:b1:75:25:eb:02:26:81:9c:16:4d: c6:e5:c7:fd:1c:3f:b5:a4:ea:6f:75:93:86:5b:6e:6b:a8:89: 01:3e:34:16:6e:1c:62:71:ef:64:ee:38:8d:65:00:80:1f:ae: 65:7e:dc:40:07:c8:1f:28:ac:dc:61:d2:11:4f:45:37:30:38: 96:6d:19:2f:35:0f:2a:0b:7c:fd:be:08:28:f7:2f:90:40:30: 3d:b4:f2:17:c1:e8:85:b3:80:3f:86:a2:03:2c:1a:80:4f:97: b1:67:5f:c4:fc:98:52:74:36:98:7c:33:97:03:e9:d0:11:69: 71:81:5f:be:81:2b:be:93:79:e6:66:76:78:fd:93:01:d5:f1: a8:bf:a7:d8:ae:2c:a4:5b:fc:f3:8e:a4:61:b9:9b:b2:99:3c: ef:31:61:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyx+IFc4A8pyiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk M2M4ZGM0MDktYWJmNS00MDEzLTljMzYtZjIxZGU1MTc2MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbJf48OJKIREmFOpZjE3LCKh6CU6uYq6ufhR 1HCskZv8X7jIDTwcn8zlMa6CjR7xK2sKYARYNSLiE9kx8SWhqfFLUKqtOQH9Jq0y /X6LVrfQRQYBKgmWOcd+ESx83dtd9swryn/sSt/c3E48JgXJveY+d1B0i8VkVRSr KXUEgy8gRoRF7qc5RDTjXkDpFTHK6riPWf5VC9RWNeRGu/edxdiHR+3o9wC5szPt bOkYQ3hraWYh0ocSKw5UqjDrO6MrYa2RaSZIdpn2JPp3dM2tvCAwB2+SnmaRh8l1 eKbJe0c0N9ocdiwfmKUMCgTk1Q5pWNwsJzaenq2fs6VqVCkDcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyzMQ6WVGF80177ZL6lFX33iBKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmRlM2FhMjMtNDE3Yi0z ZGY3LTgxZjItY2NhNzc5NmM2YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx5Agxm7u31WpYT6C0GFM8Xr4oiiBsqp0pWHj27nYtKoKksXwyTBAj7 yES0Ww4fO14EvDPoWhMn7r7XkJllEde0UWOeV1SSFKJgZXO/Y+NP/WIwic2qNBQh H5dZa+527FqIsXUl6wImgZwWTcblx/0cP7Wk6m91k4ZbbmuoiQE+NBZuHGJx72Tu OI1lAIAfrmV+3EAHyB8orNxh0hFPRTcwOJZtGS81DyoLfP2+CCj3L5BAMD208hfB 6IWzgD+GogMsGoBPl7FnX8T8mFJ0Nph8M5cD6dARaXGBX76BK76TeeZmdnj9kwHV 8ai/p9iuLKRb/POOpGG5m7KZPO8xYQ8= -----END CERTIFICATE-----Generated at Fri May 22 17:38:29 2026 by rpki-client