$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa File: ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa (raw, json) Hash identifier: aKGAOvifFMxck/JaPg51McY1KwkDzC4kqDaZG6ib1+g= Subject key identifier: 24:A2:3B:74:AA:7C:B8:77:F2:1B:DD:19:55:2B:CF:0B:22:6D:E0:F8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2D273E5357A090A7F580 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.60.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2d:27:3e:53:57:a0:90:a7:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=c3e7ae58-ff94-4b0c-abd4-01da8d61ece5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:7c:6b:4f:0f:f7:a5:60:d1:57:44:c8:11: 6a:40:d1:46:13:bb:3a:3c:9d:95:43:e6:0d:fc:00: a1:bb:1f:f0:45:b9:b1:3f:e4:ff:7b:cc:ff:d1:4b: d4:71:4c:8b:38:d3:09:20:fd:7e:3f:43:66:37:e8: 84:03:8d:6e:17:5c:ce:38:61:91:a7:3f:80:dd:48: 91:90:8a:e6:17:e1:e5:1c:cc:92:1d:43:19:41:1f: 26:fa:3c:0f:80:4f:f2:dc:a2:cb:3e:02:de:4d:73: d0:ef:c7:c8:df:df:ae:cc:7c:cb:b2:2e:ec:10:5b: ed:33:ec:89:da:42:de:9d:77:fb:6c:4d:d3:10:6b: 8e:88:73:50:03:2d:f0:00:bb:b8:d8:b3:5d:cd:16: af:73:61:6a:27:87:f5:b6:20:2d:bf:86:32:3c:a8: 35:e6:f7:9d:95:c6:e9:a8:16:81:07:c9:bc:05:86: f1:c7:03:8c:e2:21:92:9b:b2:63:4f:20:80:35:8d: b7:ea:9f:12:36:f2:2e:c1:c8:44:19:cf:06:9b:f6: b5:7f:d5:76:f7:d0:31:b5:34:7c:c4:94:1e:34:8c: 57:51:a6:85:bd:16:21:86:9b:e9:7e:19:76:c2:c0: 33:f9:8f:fb:49:b6:2f:56:23:eb:cc:01:95:55:0c: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A2:3B:74:AA:7C:B8:77:F2:1B:DD:19:55:2B:CF:0B:22:6D:E0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:00:68:44:bc:b6:85:6e:c4:0c:1c:e1:52:07:b0:6a:9c:a9: af:a9:dc:cf:c5:0e:67:6a:11:fe:b2:bd:be:1d:88:33:7d:7e: 4a:68:cc:6d:db:c4:ff:39:53:b0:6d:09:e6:63:ba:40:05:03: be:5e:37:53:de:c3:7a:74:ec:52:93:f9:f0:57:5c:b3:15:b7: d8:0b:58:79:c5:32:e4:f6:a5:d1:17:82:95:5b:58:b1:6e:cb: c6:3a:19:07:27:69:ea:34:20:25:06:cc:9a:4b:c5:42:35:77: ad:83:1a:af:13:13:1a:26:40:90:a0:b3:e2:0b:98:b1:d7:b1: 44:fd:03:73:bf:e6:92:65:8a:66:e4:fe:9f:34:52:21:16:3d: a5:09:ee:74:58:9e:db:67:a2:8e:a8:30:6e:59:d5:bc:fe:22: 23:28:b8:b2:87:1b:16:17:42:1e:da:86:5b:f9:2e:70:ab:89: 01:76:cd:49:1e:f3:13:8b:fb:94:c2:6a:ed:34:27:40:b8:28: a2:55:f1:4c:a3:60:49:b7:a5:47:4c:c1:2d:4e:fe:b5:f6:70: e4:20:ae:50:b7:dc:07:78:cb:5a:41:a4:ba:fb:d6:87:43:66: 9f:3d:b2:08:a0:ff:51:61:3b:fc:a4:07:e2:b0:d6:64:00:3d: 77:f8:70:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGy0nPlNXoJCn9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk YzNlN2FlNTgtZmY5NC00YjBjLWFiZDQtMDFkYThkNjFlY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdZ8a08P96Vg0VdEyBFqQNFGE7s6PJ2VQ+YN /AChux/wRbmxP+T/e8z/0UvUcUyLONMJIP1+P0NmN+iEA41uF1zOOGGRpz+A3UiR kIrmF+HlHMySHUMZQR8m+jwPgE/y3KLLPgLeTXPQ78fI39+uzHzLsi7sEFvtM+yJ 2kLenXf7bE3TEGuOiHNQAy3wALu42LNdzRavc2FqJ4f1tiAtv4YyPKg15vedlcbp qBaBB8m8BYbxxwOM4iGSm7JjTyCANY236p8SNvIuwchEGc8Gm/a1f9V299AxtTR8 xJQeNIxXUaaFvRYhhpvpfhl2wsAz+Y/7SbYvViPrzAGVVQw/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSiO3SqfLh38hvdGVUrzwsibeD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2E5YzAwYTktMGMxNC0z NTJmLThhYzktZGVmNDAzYmMzYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUAaES8toVuxAwc4VIHsGqcqa+p3M/FDmdqEf6yvb4diDN9fkpozG3b xP85U7BtCeZjukAFA75eN1Pew3p07FKT+fBXXLMVt9gLWHnFMuT2pdEXgpVbWLFu y8Y6GQcnaeo0ICUGzJpLxUI1d62DGq8TExomQJCgs+ILmLHXsUT9A3O/5pJlimbk /p80UiEWPaUJ7nRYnttnoo6oMG5Z1bz+IiMouLKHGxYXQh7ahlv5LnCriQF2zUke 8xOL+5TCau00J0C4KKJV8UyjYEm3pUdMwS1O/rX2cOQgrlC33Ad4y1pBpLr71odD Zp89sgig/1FhO/ykB+Kw1mQAPXf4cOA= -----END CERTIFICATE-----Generated at Fri May 22 17:37:28 2026 by rpki-client