$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa File: d5af2629-6142-348d-a1e2-7787336c8706.roa (raw, json) Hash identifier: dOQDJnHhSivJW8pPZMTQbCh+ADCS3yWOBm0CUSo+E1g= Subject key identifier: BE:AE:3D:00:F9:8A:5F:E4:2B:73:8E:42:D4:DC:A7:E7:F9:5E:0B:B7 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B2C534AAB0E8098FA9900 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.35.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2c:53:4a:ab:0e:80:98:fa:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=98d00547-a979-4015-aa34-489999338d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:da:24:c2:ca:34:2d:0b:6f:96:50:af:84: 7f:8d:96:79:79:5e:67:82:0d:90:44:28:68:ff:1c: 85:84:49:43:e7:29:b1:e7:aa:77:98:32:34:c0:d5: a0:71:e8:ef:97:e6:50:1d:8a:cc:02:7a:43:6e:ca: b4:f8:2b:65:ab:b6:d8:44:b1:e0:ed:11:2e:fc:80: d2:57:5d:2e:f5:17:48:48:84:94:e1:ef:a8:4f:45: a8:45:84:2c:50:c6:94:8f:91:1a:9e:c6:e1:03:86: 86:2c:c0:df:c2:36:41:21:84:1a:89:03:9a:f6:83: 0c:75:4c:b4:42:19:45:b9:0b:f2:d6:4f:de:d7:c0: 16:87:0a:02:2b:6c:16:f2:31:bb:b9:6f:8c:2c:c1: d7:99:8c:a2:a1:72:ba:4d:d5:a4:e6:ad:bf:9d:ca: 0c:1a:6a:e8:2a:aa:b5:86:a7:0e:0a:3c:6a:22:0c: d8:5a:96:17:74:59:36:e0:3b:06:72:d6:25:b2:4c: 63:53:d5:3c:a9:de:cc:84:99:cb:d1:ac:b5:5b:ed: 4b:0c:9b:3b:42:f9:8f:8f:98:35:d8:bc:09:b0:00: bf:8f:d0:7b:8a:a7:c3:f8:4d:0c:6c:b8:7b:01:af: a0:ab:b5:fc:d4:22:56:63:af:e6:4a:74:23:cb:cd: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AE:3D:00:F9:8A:5F:E4:2B:73:8E:42:D4:DC:A7:E7:F9:5E:0B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c7:4d:5f:1e:79:25:2c:ba:8f:22:dc:59:b0:c3:63:3c:1d: ac:9a:a3:9e:5d:48:6c:8f:ca:9c:81:c1:c6:2e:37:b3:32:35: 80:14:7b:9c:0a:0a:64:bd:50:26:61:dd:36:71:b3:1d:f2:e6: 28:9f:f0:39:0a:28:d2:8a:ca:51:d8:47:02:24:de:27:40:bc: 94:d9:2a:bf:0d:31:c4:a9:6e:19:7b:45:34:f0:ad:73:ad:b5: a4:55:a4:72:eb:95:ee:e8:50:da:bb:1e:e8:a4:4a:90:e9:f3: 90:d2:54:c5:ce:a6:23:33:c1:23:02:26:4c:96:33:89:8b:11: fe:f9:30:9e:0c:2e:92:6e:8b:54:f9:ba:38:16:84:5d:73:71: f1:4c:c1:39:0a:13:75:67:bc:dc:46:a5:ef:ec:3f:a9:8c:67: 6d:1f:89:f0:8b:38:6c:7f:56:0c:2e:5f:ce:05:59:ef:f1:19: 1e:95:ac:f2:a3:1a:a4:bc:57:7a:bc:a7:a9:4b:56:15:7c:92: 7a:a5:2b:0d:c3:88:6e:96:c9:2c:2c:bb:74:0e:b6:39:87:e6: ed:3c:3f:9f:cd:41:f8:7d:8b:73:ef:ea:ef:46:4d:a4:c5:a7: 9c:cb:45:cf:01:f5:fc:94:79:43:ce:60:cb:f5:c4:d1:3d:79: e1:ca:0f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyxTSqsOgJj6mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk OThkMDA1NDctYTk3OS00MDE1LWFhMzQtNDg5OTk5MzM4ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDzaJMLKNC0Lb5ZQr4R/jZZ5eV5ngg2QRCho /xyFhElD5ymx56p3mDI0wNWgcejvl+ZQHYrMAnpDbsq0+Ctlq7bYRLHg7REu/IDS V10u9RdISISU4e+oT0WoRYQsUMaUj5EansbhA4aGLMDfwjZBIYQaiQOa9oMMdUy0 QhlFuQvy1k/e18AWhwoCK2wW8jG7uW+MLMHXmYyioXK6TdWk5q2/ncoMGmroKqq1 hqcOCjxqIgzYWpYXdFk24DsGctYlskxjU9U8qd7MhJnL0ay1W+1LDJs7QvmPj5g1 2LwJsAC/j9B7iqfD+E0MbLh7Aa+gq7X81CJWY6/mSnQjy815zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6uPQD5il/kK3OOQtTcp+f5Xgu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDVhZjI2MjktNjE0Mi0z NDhkLWExZTItNzc4NzMzNmM4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnHTV8eeSUsuo8i3Fmww2M8Hayao55dSGyPypyBwcYuN7MyNYAUe5wK CmS9UCZh3TZxsx3y5iif8DkKKNKKylHYRwIk3idAvJTZKr8NMcSpbhl7RTTwrXOt taRVpHLrle7oUNq7HuikSpDp85DSVMXOpiMzwSMCJkyWM4mLEf75MJ4MLpJui1T5 ujgWhF1zcfFMwTkKE3VnvNxGpe/sP6mMZ20fifCLOGx/VgwuX84FWe/xGR6VrPKj GqS8V3q8p6lLVhV8knqlKw3DiG6WySwsu3QOtjmH5u08P5/NQfh9i3Pv6u9GTaTF p5zLRc8B9fyUeUPOYMv1xNE9eeHKDyQ= -----END CERTIFICATE-----Generated at Fri May 22 18:30:51 2026 by rpki-client