$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa File: e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa (raw, json) Hash identifier: piQZ191Dw5SSIle+7Yhmx6SDrOeXdIMzGN1UtiTJ70A= Subject key identifier: DD:1E:E7:8B:0E:67:EF:72:8E:6A:AB:9E:67:66:AC:0D:B6:B0:D4:47 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B5718A0D4BB1B0A8CCDC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.49.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:57:18:a0:d4:bb:1b:0a:8c:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=8d400b93-3ec5-4c18-bd51-277864f90751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:c7:72:c6:ae:3c:02:88:54:b6:6b:0e:f2: 09:59:83:0f:d2:10:aa:0b:ce:e8:47:d9:11:cb:1a: 59:b3:b5:0b:d8:7f:6e:19:84:6f:2f:c4:77:10:67: be:5e:c5:46:b6:db:00:1a:44:a9:40:c9:d9:42:8b: c6:9d:64:5b:51:a4:3b:a5:a9:58:8f:40:85:f6:94: ec:f3:16:15:6e:8a:17:12:18:2f:e6:1e:3f:9b:7d: 6b:bd:bd:93:22:05:f7:d2:2e:59:5c:bc:3f:81:1c: de:39:bd:d6:ad:e5:20:56:47:83:f7:99:0c:62:21: 0d:ab:a7:74:63:4c:66:66:51:a0:3c:0b:f3:28:27: 41:4e:3d:d5:b6:46:ae:b2:df:d0:4e:d6:23:2c:84: 3b:03:a0:42:78:d2:1c:03:ec:90:92:f2:3a:b9:c5: 64:70:07:0f:72:31:dd:1b:27:bf:70:4d:cc:42:a7: 86:77:4d:01:36:f6:70:b4:3a:59:62:d2:ef:b8:8f: 00:4e:f1:d0:a2:5d:38:54:64:81:39:7e:4d:c0:4e: 56:93:b1:66:ac:3d:d2:ce:dc:3e:9a:f4:59:36:83: a8:91:2b:2d:99:21:ee:88:64:41:04:4b:7d:90:c2: 03:95:3d:a9:f7:f9:ea:55:33:a8:c5:6b:8e:c4:0e: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1E:E7:8B:0E:67:EF:72:8E:6A:AB:9E:67:66:AC:0D:B6:B0:D4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f4:a2:9d:93:04:85:ab:b0:f9:4b:b3:81:07:0f:35:2d:30: 45:0c:7d:ec:5f:4a:f9:f1:03:14:80:2d:39:0b:4f:4a:21:c0: b6:57:40:e7:e0:79:da:7f:bb:e5:ee:36:89:5e:79:29:ed:20: 69:27:6a:e4:30:7e:17:7d:d7:8f:5c:4f:ae:03:87:83:38:a9: 10:45:a6:f5:6e:b1:90:f8:d1:89:f4:0d:1d:a7:f6:2d:0e:1e: be:21:f2:45:ef:b8:67:ef:dd:20:12:1c:4b:cd:02:13:f5:05: fb:b6:af:b9:75:65:bd:c8:2d:87:15:36:6e:ea:9c:ed:41:8d: 41:9c:4d:ba:5f:1b:d1:b5:62:97:c2:40:85:d3:c3:9f:33:53: af:b4:be:be:7e:d9:80:6d:ac:6c:a7:0e:74:a3:b1:32:78:4c: 63:1a:79:f9:48:df:58:9f:7d:ca:bf:c3:0e:7a:55:0d:02:e8: 7e:71:e5:08:c9:ed:37:98:3f:0a:3c:55:06:08:27:3d:fb:48: 5f:bb:4e:30:4d:0c:0e:67:98:22:18:0e:cc:b8:34:9d:68:cf: 88:97:8b:80:22:5f:f2:3c:dd:b0:94:37:b5:17:9e:1d:dd:c8: d9:e7:83:b8:9f:99:45:bd:f9:83:0a:fa:ac:3d:0b:94:2a:65: 00:a7:93:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1cYoNS7GwqMzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk OGQ0MDBiOTMtM2VjNS00YzE4LWJkNTEtMjc3ODY0ZjkwNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMfHcsauPAKIVLZrDvIJWYMP0hCqC87oR9kR yxpZs7UL2H9uGYRvL8R3EGe+XsVGttsAGkSpQMnZQovGnWRbUaQ7palYj0CF9pTs 8xYVbooXEhgv5h4/m31rvb2TIgX30i5ZXLw/gRzeOb3WreUgVkeD95kMYiENq6d0 Y0xmZlGgPAvzKCdBTj3Vtkaust/QTtYjLIQ7A6BCeNIcA+yQkvI6ucVkcAcPcjHd Gye/cE3MQqeGd00BNvZwtDpZYtLvuI8ATvHQol04VGSBOX5NwE5Wk7FmrD3Sztw+ mvRZNoOokSstmSHuiGRBBEt9kMIDlT2p9/nqVTOoxWuOxA7NowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0e54sOZ+9yjmqrnmdmrA22sNRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTY2ZTk4NzEtOGZkZC0z Mzg3LWI4MmItZjExN2E1ZDhiNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH0op2TBIWrsPlLs4EHDzUtMEUMfexfSvnxAxSALTkLT0ohwLZXQOfg edp/u+XuNoleeSntIGknauQwfhd9149cT64Dh4M4qRBFpvVusZD40Yn0DR2n9i0O Hr4h8kXvuGfv3SASHEvNAhP1Bfu2r7l1Zb3ILYcVNm7qnO1BjUGcTbpfG9G1YpfC QIXTw58zU6+0vr5+2YBtrGynDnSjsTJ4TGMaeflI31iffcq/ww56VQ0C6H5x5QjJ 7TeYPwo8VQYIJz37SF+7TjBNDA5nmCIYDsy4NJ1oz4iXi4AiX/I83bCUN7UXnh3d yNnng7ifmUW9+YMK+qw9C5QqZQCnk3U= -----END CERTIFICATE-----Generated at Fri May 22 17:39:03 2026 by rpki-client