$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa File: c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa (raw, json) Hash identifier: /Upkmjh5EdG5+4rzufK6miRVcAQvM7wfW14SV5ciGWw= Subject key identifier: 6B:5C:78:D6:C7:40:06:22:89:4F:81:9E:66:2D:83:31:09:19:2A:68 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B27712D894DCF2B214880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.37.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:27:71:2d:89:4d:cf:2b:21:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=e051976b-5d30-482e-93ce-c585a8e050f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:47:47:1c:fc:30:6b:0a:74:6e:9d:55:5e: 34:6b:79:b7:00:cf:dc:0d:a7:ea:3c:4e:4c:ce:f6: c0:39:88:67:89:87:46:ba:99:c4:95:dc:3d:e5:f6: e0:31:61:53:78:97:ba:89:b6:64:7b:18:eb:b7:4e: 19:bd:dc:ea:cd:b4:29:89:4d:32:72:ed:67:f7:29: 83:6a:50:77:fb:04:3a:93:ed:0e:b7:ee:0f:83:35: fe:6b:08:62:98:d7:72:b6:df:08:53:48:b2:b6:ea: 64:d1:c2:7d:06:30:3d:0e:ac:b9:62:fd:6c:9c:d3: c2:5c:97:5c:80:85:51:14:bb:5d:bb:a4:39:6b:6b: ff:b2:a8:b9:55:7f:d1:b6:6e:6d:0c:7e:03:0b:0d: e2:3a:1b:a4:3a:a0:da:6d:b4:bc:92:50:3f:47:79: 7c:f3:ef:ac:84:ab:34:ba:6b:e4:dd:64:d9:6f:3d: a6:aa:db:cd:1e:59:88:e1:32:cb:56:50:9a:8c:40: 11:17:2e:ef:27:89:0f:eb:c3:5b:4d:24:ab:fe:4a: 5a:8c:f1:72:a8:10:0b:2e:22:ad:5b:25:fe:f3:c3: 75:51:73:54:3c:cb:57:65:69:0f:28:f7:50:5b:df: 27:a5:04:60:75:2e:44:cf:2f:c3:be:7d:8f:b2:c8: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:78:D6:C7:40:06:22:89:4F:81:9E:66:2D:83:31:09:19:2A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:84:e9:f2:41:b1:5b:50:c1:00:43:59:c8:ed:ea:ac:18:d4: 48:1c:5f:06:95:06:0a:88:cd:f7:b6:a1:dd:9c:ad:fd:d9:e6: 5f:af:9a:18:90:cb:29:41:d8:e2:b8:2f:b2:3f:d7:d8:fd:14: 9a:dd:2d:5d:65:ac:66:a2:bf:b7:1f:b2:7b:ee:e3:bc:29:02: 95:8a:92:2d:eb:7f:47:0e:9e:b2:92:96:8f:04:ea:c6:89:23: a6:06:95:78:a9:07:84:9d:0b:95:0f:a6:8f:ff:fa:82:d3:1d: 43:b5:6a:69:2f:a6:55:59:f3:ee:42:5a:14:db:bc:fc:0a:51: df:3a:68:fc:a9:47:5d:9a:d1:8b:00:e7:89:c0:4f:59:77:ce: 9c:44:8e:be:d5:a2:0c:17:a7:6d:b4:6d:37:f2:52:df:62:23: da:f2:31:3d:41:06:e7:ae:2b:47:71:60:7a:bc:60:7a:46:ca: 4f:19:a8:cb:13:1b:41:f8:09:55:16:59:5c:ec:34:1f:1a:fb: 40:14:2f:c9:9f:87:b9:9a:5f:e9:98:c7:96:18:d3:c7:e9:88: 10:a9:44:69:91:71:3d:a3:63:a7:ca:2a:63:58:f6:51:93:5f: 97:96:b6:a6:fb:51:0b:d7:e8:37:69:0d:17:90:70:0d:39:f1: 01:0c:95:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGydxLYlNzyshSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ZTA1MTk3NmItNWQzMC00ODJlLTkzY2UtYzU4NWE4ZTA1MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BlHRxz8MGsKdG6dVV40a3m3AM/cDafqPE5M zvbAOYhniYdGupnEldw95fbgMWFTeJe6ibZkexjrt04ZvdzqzbQpiU0ycu1n9ymD alB3+wQ6k+0Ot+4PgzX+awhimNdytt8IU0iytupk0cJ9BjA9Dqy5Yv1snNPCXJdc gIVRFLtdu6Q5a2v/sqi5VX/Rtm5tDH4DCw3iOhukOqDabbS8klA/R3l88++shKs0 umvk3WTZbz2mqtvNHlmI4TLLVlCajEARFy7vJ4kP68NbTSSr/kpajPFyqBALLiKt WyX+88N1UXNUPMtXZWkPKPdQW98npQRgdS5Ezy/Dvn2Pssgr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtceNbHQAYiiU+BnmYtgzEJGSpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzM0YjhkMTEtNjViOS0z YzE5LTk4YzktYWM4YzAwYzlmMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2E6fJBsVtQwQBDWcjt6qwY1EgcXwaVBgqIzfe2od2crf3Z5l+vmhiQ yylB2OK4L7I/19j9FJrdLV1lrGaiv7cfsnvu47wpApWKki3rf0cOnrKSlo8E6saJ I6YGlXipB4SdC5UPpo//+oLTHUO1amkvplVZ8+5CWhTbvPwKUd86aPypR12a0YsA 54nAT1l3zpxEjr7VogwXp220bTfyUt9iI9ryMT1BBueuK0dxYHq8YHpGyk8ZqMsT G0H4CVUWWVzsNB8a+0AUL8mfh7maX+mYx5YY08fpiBCpRGmRcT2jY6fKKmNY9lGT X5eWtqb7UQvX6DdpDReQcA058QEMlfg= -----END CERTIFICATE-----Generated at Fri May 22 17:38:25 2026 by rpki-client