$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa File: cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa (raw, json) Hash identifier: P4SeLEIt4KknJUMz7Qmb0wJ6HvP4myRlMVVGO49+Nd4= Subject key identifier: 43:A6:28:60:34:8D:56:7B:0D:6C:AB:C8:AE:EF:4B:73:E4:B7:73:D8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B5AF9362845CF99AE8120 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.32.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:5a:f9:36:28:45:cf:99:ae:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=5a599a66-c071-469c-9677-eeaf2ec3c3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:3e:38:dc:77:82:ed:db:c6:09:b2:07:11: dc:0b:ed:4c:55:af:b9:79:a7:bf:01:e7:c0:b6:65: c4:aa:77:70:58:60:42:80:03:c4:1a:27:86:11:ed: ad:d7:3e:ed:b7:11:f3:43:76:ea:9a:b1:f5:19:e7: 9a:b4:69:89:23:b4:5c:97:ca:78:14:8a:6f:cf:cb: 75:11:e3:9a:02:22:f3:b7:75:c3:d1:52:09:3e:4c: b5:fc:a3:6a:73:bd:4c:db:79:a5:f9:91:70:d7:43: 3d:fa:0f:45:3e:f0:e8:07:43:54:04:0e:1e:28:e4: 66:8f:b7:a9:70:8b:b5:fe:2e:17:83:59:cf:9f:69: 69:25:a2:ad:23:f1:27:8e:40:d5:b5:ae:73:bd:f2: e5:57:55:54:ff:cd:9b:b3:d3:a3:00:d5:0e:ba:5a: f7:f0:fc:54:2d:c2:81:ca:ee:68:f3:e9:d0:da:7b: 6c:3b:5c:07:36:17:72:5c:88:93:9c:9d:d8:14:63: b5:55:00:b9:35:25:97:d8:c5:36:95:f3:b1:b0:89: d2:01:c8:c4:33:6a:69:33:70:ec:eb:89:1b:d2:eb: af:fc:c1:d1:8d:fb:6d:f4:2f:04:97:c7:1d:3c:96: 9a:89:43:c4:37:00:7a:8f:72:88:9e:2f:47:16:b8: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A6:28:60:34:8D:56:7B:0D:6C:AB:C8:AE:EF:4B:73:E4:B7:73:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:47:cf:74:d0:7a:83:1f:65:c0:30:10:81:67:68:80:4c:a3: 8d:d8:8e:a7:18:c2:48:b7:71:06:06:17:e4:48:43:f6:f1:89: 5e:bf:d2:e5:29:66:d4:73:58:e6:41:cd:78:82:cb:42:ba:9c: 7d:2d:bc:7c:aa:6f:f3:d3:18:01:28:ea:0c:d3:e2:00:a6:23: b3:f9:69:6f:d2:0d:60:3e:8f:58:b0:4b:24:4f:f3:18:0c:0a: e1:96:e9:2e:8d:0b:c2:f0:96:de:52:b7:31:0e:96:10:1e:ad: 7a:aa:e4:fc:bd:27:f0:b4:25:9a:1a:54:e1:91:b9:39:d5:a3: ae:22:67:a4:e4:56:57:5e:c8:d4:98:dc:63:81:8b:e1:24:48: 1e:00:02:6b:4a:f9:f0:10:2e:8b:a6:26:ef:1d:ef:35:39:96: e9:37:43:df:88:5f:a7:a6:43:90:fb:7a:2b:95:b3:3f:e5:92: aa:e2:05:86:7a:5c:58:f1:bb:e4:8a:d5:25:73:76:3e:e3:c1: 00:c2:14:7e:d1:b4:b5:d0:7d:55:7a:87:a1:24:7a:57:6c:b1: 86:9a:3e:34:b6:0a:d1:65:15:6e:78:ca:7d:0a:de:53:10:af: 33:54:39:42:df:0a:8a:f5:ea:48:e4:3b:f3:dd:d1:39:e4:ee: 09:e4:42:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1r5NihFz5mugSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NWE1OTlhNjYtYzA3MS00NjljLTk2NzctZWVhZjJlYzNjM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubg+ONx3gu3bxgmyBxHcC+1MVa+5eae/AefA tmXEqndwWGBCgAPEGieGEe2t1z7ttxHzQ3bqmrH1GeeatGmJI7Rcl8p4FIpvz8t1 EeOaAiLzt3XD0VIJPky1/KNqc71M23ml+ZFw10M9+g9FPvDoB0NUBA4eKORmj7ep cIu1/i4Xg1nPn2lpJaKtI/EnjkDVta5zvfLlV1VU/82bs9OjANUOulr38PxULcKB yu5o8+nQ2ntsO1wHNhdyXIiTnJ3YFGO1VQC5NSWX2MU2lfOxsInSAcjEM2ppM3Ds 64kb0uuv/MHRjftt9C8El8cdPJaaiUPENwB6j3KIni9HFrj+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOmKGA0jVZ7DWyryK7vS3Pkt3PYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjYzk1YzktZjFkMS0z NDJjLWEyZmYtM2MwM2MzMmY4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJHz3TQeoMfZcAwEIFnaIBMo43YjqcYwki3cQYGF+RIQ/bxiV6/0uUp ZtRzWOZBzXiCy0K6nH0tvHyqb/PTGAEo6gzT4gCmI7P5aW/SDWA+j1iwSyRP8xgM CuGW6S6NC8Lwlt5StzEOlhAerXqq5Py9J/C0JZoaVOGRuTnVo64iZ6TkVldeyNSY 3GOBi+EkSB4AAmtK+fAQLoumJu8d7zU5luk3Q9+IX6emQ5D7eiuVsz/lkqriBYZ6 XFjxu+SK1SVzdj7jwQDCFH7RtLXQfVV6h6EkeldssYaaPjS2CtFlFW54yn0K3lMQ rzNUOULfCor16kjkO/Pd0Tnk7gnkQuk= -----END CERTIFICATE-----Generated at Fri May 22 17:39:46 2026 by rpki-client