$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa File: be468998-0ccd-30b7-9166-469ae59ced7d.roa (raw, json) Hash identifier: hzRx2asxli0d0SqXBU/N54YlIIZ9OSlw8fonen1svq0= Subject key identifier: 01:CF:52:43:A8:62:8F:08:C4:48:80:ED:6D:AF:D8:E0:EA:7D:B0:3F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2F4E0AA98AD369057800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.33.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2f:4e:0a:a9:8a:d3:69:05:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=e7a48d4a-86b0-48aa-b996-5ed2a13f3026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:48:94:95:5b:bb:d4:fe:fb:40:5c:3a:1c: c6:3b:05:85:a1:0f:f4:00:d5:89:88:90:81:95:fc: ba:39:c9:f0:74:45:3a:6d:0d:84:52:f8:26:c6:b2: 11:c6:85:06:72:0e:13:3e:54:1c:48:f8:bd:27:29: 5d:0b:6a:59:a8:e1:44:b4:4b:75:0b:db:42:da:a8: 85:fa:02:ce:9e:6f:95:4a:3d:fa:4a:96:9f:4d:0a: 08:90:7a:8d:40:76:58:a7:46:79:9f:ac:3f:b0:31: cc:34:77:ef:76:f3:83:40:6f:95:2a:e5:ba:a8:28: 05:f0:09:85:91:22:02:0c:85:4c:fd:d9:17:21:4c: 3d:d3:6f:a9:2b:d4:27:76:c5:9d:91:db:43:de:25: cb:95:45:b6:39:12:1f:25:79:4a:07:90:88:d5:65: 11:57:dd:be:ed:ac:f5:35:71:79:b1:7e:f6:97:03: a9:53:55:75:aa:ca:35:6c:14:a5:55:17:92:dc:5d: 6d:96:12:b9:39:63:12:d6:62:61:43:1d:2c:4b:df: 47:a0:f6:0f:3b:ca:4b:29:fb:7a:99:c6:81:31:80: cb:87:47:b7:6c:c2:9f:b9:bd:21:d5:c5:fe:b9:9f: 18:fe:01:ca:ee:cf:10:8b:73:a6:b8:90:63:06:3e: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:52:43:A8:62:8F:08:C4:48:80:ED:6D:AF:D8:E0:EA:7D:B0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:52:95:00:04:22:8c:9b:e0:e1:fe:10:b4:3d:36:60:24:e8: 9b:89:15:88:67:df:1d:84:37:6c:d4:6a:d4:ee:a6:7a:9b:74: ab:c7:9a:62:46:ad:66:1a:44:68:3b:e9:1f:53:74:c1:f6:68: 69:d0:1a:2a:8c:b3:ea:29:0e:47:02:f0:b4:14:ab:b2:2b:8d: c4:33:ea:b4:ef:4e:86:68:32:84:54:7d:06:17:8e:41:5c:c3: 68:20:ff:a8:70:70:08:92:1e:0c:20:7b:45:66:f1:6d:76:41: 71:82:3e:cc:23:c5:21:7f:22:aa:4c:fe:a1:e5:59:a5:80:94: fd:ed:19:10:33:09:3b:1b:38:53:30:99:29:65:f0:c2:20:15: 62:97:d3:16:9c:eb:28:37:8c:38:1d:25:9f:1d:7b:05:b9:c9: a2:32:86:dc:e7:1f:09:86:4f:f9:21:d0:53:37:f1:90:3e:10: b9:08:d6:22:d0:87:df:8a:47:ec:03:3b:b1:f1:a0:67:69:16: 74:21:e8:ff:51:ba:06:9f:2c:b6:b6:40:6f:5f:88:96:ff:b9: a0:0f:11:e5:b3:c3:a7:9d:6d:db:39:c2:be:eb:94:3d:33:87: 5f:3a:82:bb:04:b8:d5:11:e0:cd:99:de:b2:ce:a7:e4:f8:8c: 2b:11:59:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGy9OCqmK02kFeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ZTdhNDhkNGEtODZiMC00OGFhLWI5OTYtNWVkMmExM2YzMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLZIlJVbu9T++0BcOhzGOwWFoQ/0ANWJiJCB lfy6OcnwdEU6bQ2EUvgmxrIRxoUGcg4TPlQcSPi9JyldC2pZqOFEtEt1C9tC2qiF +gLOnm+VSj36SpafTQoIkHqNQHZYp0Z5n6w/sDHMNHfvdvODQG+VKuW6qCgF8AmF kSICDIVM/dkXIUw902+pK9QndsWdkdtD3iXLlUW2ORIfJXlKB5CI1WURV92+7az1 NXF5sX72lwOpU1V1qso1bBSlVReS3F1tlhK5OWMS1mJhQx0sS99HoPYPO8pLKft6 mcaBMYDLh0e3bMKfub0h1cX+uZ8Y/gHK7s8Qi3OmuJBjBj7cjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHPUkOoYo8IxEiA7W2v2ODqfbA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmU0Njg5OTgtMGNjZC0z MGI3LTkxNjYtNDY5YWU1OWNlZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFSlQAEIoyb4OH+ELQ9NmAk6JuJFYhn3x2EN2zUatTupnqbdKvHmmJG rWYaRGg76R9TdMH2aGnQGiqMs+opDkcC8LQUq7IrjcQz6rTvToZoMoRUfQYXjkFc w2gg/6hwcAiSHgwge0Vm8W12QXGCPswjxSF/IqpM/qHlWaWAlP3tGRAzCTsbOFMw mSll8MIgFWKX0xac6yg3jDgdJZ8dewW5yaIyhtznHwmGT/kh0FM38ZA+ELkI1iLQ h9+KR+wDO7HxoGdpFnQh6P9RugafLLa2QG9fiJb/uaAPEeWzw6edbds5wr7rlD0z h186grsEuNUR4M2Z3rLOp+T4jCsRWak= -----END CERTIFICATE-----Generated at Fri May 22 18:31:57 2026 by rpki-client