$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa File: e4427f2e-8c0b-3316-9550-f264211ff023.roa (raw, json) Hash identifier: QcRvw/q72EeW8kZfT9ppBuMzGoBRQ1L9bki+Qbjw+gM= Subject key identifier: 68:32:01:0E:1C:16:8A:4F:6D:67:D2:F0:3F:0C:73:D7:6E:01:C9:41 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B543F825078D231806080 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.38.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:54:3f:82:50:78:d2:31:80:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=76906f93-404c-4aeb-9b56-f739335c7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:77:87:cd:62:e6:ca:03:e1:e7:d2:91:4b: 3d:9f:b9:6d:6d:df:14:fb:76:1d:e6:24:d5:46:75: 61:26:77:a1:4d:b9:06:3e:d7:4d:bb:ed:9d:34:d2: 4b:86:b9:9a:51:22:bc:14:de:69:6d:a1:4f:5e:25: d2:99:94:1f:f2:a1:8d:38:3a:f9:c5:70:8b:8f:af: 71:db:76:26:19:8c:b8:b6:43:24:e1:97:5a:17:be: c4:46:38:6a:31:53:90:4c:82:06:73:ad:66:6b:32: aa:66:fa:14:dd:5a:10:a1:4e:db:a7:a0:0a:6b:3f: c0:bf:cf:53:51:db:91:aa:76:88:bb:b3:47:11:8f: 0c:bb:9e:a7:fa:29:be:39:ac:4d:c7:d4:5c:5c:f6: 6b:8b:5c:04:49:37:7e:29:f4:eb:25:30:53:a3:8e: 85:d9:3d:48:49:11:95:38:db:9a:89:64:31:6c:83: 15:96:35:07:01:50:01:61:a8:1c:92:31:52:2d:42: c2:e4:e0:56:3e:f0:0b:1a:34:26:61:27:62:bf:47: bc:d2:13:8b:c5:53:cb:e3:d8:94:1b:6f:1b:c3:bd: 62:5b:11:c6:3a:1b:78:bb:c4:15:19:6a:41:3e:ab: 0d:b6:b0:5f:a2:38:65:ba:cc:35:ea:61:b8:1a:56: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:01:0E:1C:16:8A:4F:6D:67:D2:F0:3F:0C:73:D7:6E:01:C9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:32:ad:3b:3f:91:50:f7:b7:ad:db:71:72:79:b6:2e:c1:1f: 01:cf:3c:67:05:46:e6:18:b8:04:3f:fd:ad:7e:31:9d:53:55: 9b:f1:b2:10:2c:3c:03:43:39:73:d1:9a:e1:e9:72:a7:b4:b4: ae:b8:54:b0:1a:de:cc:66:61:56:09:87:9b:23:e9:6f:04:16: ea:b4:8f:e2:99:b5:8d:aa:39:20:41:da:9f:e6:a1:fa:65:de: 2b:72:79:3f:7b:e0:5a:ea:34:b5:48:08:91:0f:74:41:71:60: 5c:0d:68:1b:47:29:3a:c7:0a:e4:95:06:1b:e6:e3:94:7c:77: 6e:7a:bf:32:c5:fc:b4:b2:e7:f0:eb:d5:91:f2:a8:64:29:c8: 34:63:a2:0a:8b:b2:57:62:55:99:11:cf:fb:6a:91:66:2d:d3: 89:cf:49:76:78:c3:4a:c3:35:56:ac:38:66:f6:85:10:18:99: 97:5e:56:b2:e0:e2:b8:d5:a3:fd:dc:9e:38:32:67:9a:09:84: 5d:69:31:7a:53:41:09:e9:fa:de:7f:22:fb:36:ed:20:b5:11: ec:a0:e9:eb:ef:f9:de:11:90:f5:06:3d:ce:9b:6b:10:4e:79: 3f:d8:4f:1a:ab:0e:4d:98:54:83:99:af:d4:71:8a:74:65:c1: d3:b9:13:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1Q/glB40jGAYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NzY5MDZmOTMtNDA0Yy00YWViLTliNTYtZjczOTMzNWM3Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfx3h81i5soD4efSkUs9n7ltbd8U+3Yd5iTV RnVhJnehTbkGPtdNu+2dNNJLhrmaUSK8FN5pbaFPXiXSmZQf8qGNODr5xXCLj69x 23YmGYy4tkMk4ZdaF77ERjhqMVOQTIIGc61mazKqZvoU3VoQoU7bp6AKaz/Av89T UduRqnaIu7NHEY8Mu56n+im+OaxNx9RcXPZri1wESTd+KfTrJTBTo46F2T1ISRGV ONuaiWQxbIMVljUHAVABYagckjFSLULC5OBWPvALGjQmYSdiv0e80hOLxVPL49iU G28bw71iWxHGOht4u8QVGWpBPqsNtrBfojhlusw16mG4GlbxKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgyAQ4cFopPbWfS8D8Mc9duAclBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTQ0MjdmMmUtOGMwYi0z MzE2LTk1NTAtZjI2NDIxMWZmMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsyrTs/kVD3t63bcXJ5ti7BHwHPPGcFRuYYuAQ//a1+MZ1TVZvxshAs PANDOXPRmuHpcqe0tK64VLAa3sxmYVYJh5sj6W8EFuq0j+KZtY2qOSBB2p/mofpl 3ityeT974FrqNLVICJEPdEFxYFwNaBtHKTrHCuSVBhvm45R8d256vzLF/LSy5/Dr 1ZHyqGQpyDRjogqLsldiVZkRz/tqkWYt04nPSXZ4w0rDNVasOGb2hRAYmZdeVrLg 4rjVo/3cnjgyZ5oJhF1pMXpTQQnp+t5/Ivs27SC1Eeyg6evv+d4RkPUGPc6baxBO eT/YTxqrDk2YVIOZr9RxinRlwdO5E+g= -----END CERTIFICATE-----Generated at Fri May 22 17:40:56 2026 by rpki-client