$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa File: f8c8223c-bd4f-350e-af6b-a0e241edab57.roa (raw, json) Hash identifier: jIEP/8nnoKnNub8pmtT8m/o3/XGa2dVjgU/6bwdgxiA= Subject key identifier: CA:4E:33:36:41:CC:72:CF:97:69:56:A8:D0:27:E0:F0:BD:D9:69:51 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B648D252BEB4535D5BF80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.50.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:64:8d:25:2b:eb:45:35:d5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=8b02dd01-ebc2-450d-8be5-a0f44a2cf6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:23:75:38:19:6a:e1:ad:e2:6f:2a:fd:bf: b9:20:67:ab:27:1d:2a:71:f8:f1:b7:96:ca:37:c9: b5:38:20:6e:35:7e:a9:dd:c1:be:37:dd:52:f4:da: 9c:1f:a4:91:59:2b:c3:d5:33:03:41:e1:29:5c:4c: a5:12:b0:46:a0:27:cf:ac:e8:c6:a9:86:f1:ce:e4: 15:74:36:09:37:d1:1d:6f:5b:5a:fb:df:67:ad:ae: 99:d5:32:b8:2c:8f:db:6b:73:83:a1:d7:21:f8:5f: ea:7d:5f:4c:2e:00:14:c6:6a:81:f6:a7:d1:b0:52: 26:ff:bd:98:de:4c:2d:73:2b:2f:7a:f1:c3:64:fa: e2:85:ab:ea:fc:1c:83:73:d8:b3:47:31:48:d0:17: e9:a3:2c:72:13:0a:7b:1d:da:59:ea:29:f3:b2:92: bb:01:0a:0a:37:30:da:7e:e9:28:10:f7:42:d9:a7: 61:da:98:58:72:89:b1:40:e6:f7:e7:00:6b:8b:af: e6:02:71:dc:64:6e:6b:a2:ee:e7:c1:1b:b1:01:dd: b5:5b:29:f7:09:47:9b:22:f2:d2:73:18:de:97:31: 1f:b2:de:18:ee:9a:d8:53:e7:87:8c:2c:6e:f0:05: 6f:ef:49:bf:5a:41:f9:b7:46:a2:92:b4:f9:a3:48: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4E:33:36:41:CC:72:CF:97:69:56:A8:D0:27:E0:F0:BD:D9:69:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:71:40:d3:7e:3b:25:d9:d8:21:8a:59:e3:64:bc:83:97:61: e6:5f:b2:11:11:e7:f2:0b:3f:fd:66:e7:88:87:ad:96:7c:80: 05:4b:80:32:a8:5e:b3:96:45:18:59:f3:16:50:7e:1d:bb:7b: a0:26:8c:32:3c:8f:5b:e4:3a:f2:b9:d8:e8:78:5a:90:19:77: a9:8d:c7:3f:84:cf:a8:21:51:89:22:f3:b8:f2:aa:71:cf:c9: 86:bd:e4:28:6a:17:84:e3:40:dc:3b:4a:6f:ac:04:d5:9e:d7: 50:ae:fb:99:a1:5d:73:8d:64:e1:ac:36:80:c6:99:88:70:f1: 19:ed:11:5f:b0:1f:c4:5a:cb:d8:2c:2d:94:77:1c:72:35:14: de:5b:2e:80:ed:7c:5d:0b:15:fc:f5:db:b0:25:df:72:35:ab: c0:bc:e8:ee:16:a9:4c:fe:35:84:70:ac:9f:c2:36:c4:9d:1a: 09:c0:91:6c:54:f6:11:8d:18:62:2f:9a:0e:7f:00:a2:d8:b7: b3:89:f4:35:4f:14:39:74:b5:98:c3:0a:e3:f0:58:44:48:f8: 08:f4:ab:c3:55:73:d3:cf:af:c8:fc:07:c6:72:a7:e9:96:ce: de:ea:a8:76:ed:1b:7d:11:9c:4d:e5:20:58:89:55:2c:16:1f: 3e:a4:8f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2SNJSvrRTXVv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk OGIwMmRkMDEtZWJjMi00NTBkLThiZTUtYTBmNDRhMmNmNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSgjdTgZauGt4m8q/b+5IGerJx0qcfjxt5bK N8m1OCBuNX6p3cG+N91S9NqcH6SRWSvD1TMDQeEpXEylErBGoCfPrOjGqYbxzuQV dDYJN9Edb1ta+99nra6Z1TK4LI/ba3ODodch+F/qfV9MLgAUxmqB9qfRsFIm/72Y 3kwtcysvevHDZPrihavq/ByDc9izRzFI0BfpoyxyEwp7HdpZ6inzspK7AQoKNzDa fukoEPdC2adh2phYcomxQOb35wBri6/mAnHcZG5rou7nwRuxAd21Wyn3CUebIvLS cxjelzEfst4Y7prYU+eHjCxu8AVv70m/WkH5t0aikrT5o0gIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpOMzZBzHLPl2lWqNAn4PC92WlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjhjODIyM2MtYmQ0Zi0z NTBlLWFmNmItYTBlMjQxZWRhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9xQNN+OyXZ2CGKWeNkvIOXYeZfshER5/ILP/1m54iHrZZ8gAVLgDKo XrOWRRhZ8xZQfh27e6AmjDI8j1vkOvK52Oh4WpAZd6mNxz+Ez6ghUYki87jyqnHP yYa95ChqF4TjQNw7Sm+sBNWe11Cu+5mhXXONZOGsNoDGmYhw8RntEV+wH8Ray9gs LZR3HHI1FN5bLoDtfF0LFfz127Al33I1q8C86O4WqUz+NYRwrJ/CNsSdGgnAkWxU 9hGNGGIvmg5/AKLYt7OJ9DVPFDl0tZjDCuPwWERI+Aj0q8NVc9PPr8j8B8Zyp+mW zt7qqHbtG30RnE3lIFiJVSwWHz6kj/A= -----END CERTIFICATE-----Generated at Fri May 22 18:30:50 2026 by rpki-client