$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa File: ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa (raw, json) Hash identifier: gB3kfkHudQcdfTCEqyE4S1WThLnglGbsPi3GoHorZQ0= Subject key identifier: 99:EF:6E:2E:86:00:43:EE:E9:F1:2F:75:F2:61:1A:F9:35:FC:1D:DB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B1FA7DED4E9C7AEAE5AE0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.52.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:1f:a7:de:d4:e9:c7:ae:ae:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=bb690ac6-525c-47db-809c-6753f3a11dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:0f:85:9e:e1:d0:51:fd:98:75:b1:f6:8a: 4f:21:6a:72:57:65:87:31:ed:59:88:8c:51:4e:df: 92:d0:04:0a:56:4d:20:24:08:33:99:23:9c:06:69: 72:cb:19:30:7c:1a:65:27:e8:4a:49:f4:5e:7f:af: 3d:23:33:29:31:75:80:40:d3:ac:33:4f:c2:a0:ce: 12:79:08:fb:86:e0:37:6e:43:85:14:af:6a:34:b3: ca:60:dc:c7:b8:8d:79:14:ea:db:60:4e:91:70:4d: 2e:06:e5:df:f6:c7:73:c1:e3:01:c1:ff:48:ff:d7: 42:7c:85:2c:ad:a5:ec:29:aa:53:c8:0e:9b:44:bb: 26:f5:7d:34:07:9b:9e:44:61:62:59:80:bb:fd:4b: e0:4d:ba:b6:52:e9:3f:b1:2f:52:21:f6:72:d6:31: 95:ea:8e:a7:88:92:3c:d2:55:b5:27:cc:60:e5:82: a7:17:99:d3:3e:5c:94:c8:0f:96:f2:c1:0c:23:b0: 6a:0c:75:61:f5:21:f8:18:03:b4:a3:c1:50:e8:3e: 2e:ef:af:bc:68:98:b3:b1:6b:c2:e3:60:1d:1c:e8: e4:93:fd:52:76:a3:46:a5:a8:50:ef:99:cc:b7:43: a9:12:3c:13:6b:92:63:e1:ba:ad:05:3c:5c:86:5f: c0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:6E:2E:86:00:43:EE:E9:F1:2F:75:F2:61:1A:F9:35:FC:1D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bc:06:c7:3c:33:04:c2:6d:25:07:98:75:2d:04:d1:a7:c1: e9:23:05:c7:49:a8:9a:98:ca:84:d9:c3:ad:d0:43:17:fb:79: ad:c4:12:85:62:fd:68:08:27:bc:4d:5e:fa:1c:14:87:c8:13: 88:a7:1f:3a:03:3e:ec:69:91:04:32:b8:a7:e1:14:0e:84:d0: 74:f7:63:d3:88:18:a5:3a:d4:f3:67:9d:2c:51:fa:e5:d2:a0: ea:09:3b:0e:80:97:8b:ff:00:7f:d3:fb:cb:24:02:0e:17:d1: 4f:ca:40:c4:f2:9c:9d:ba:aa:7c:d4:c8:b0:41:03:43:b4:24: 03:3a:34:89:1a:ec:0d:df:c3:44:f4:2a:6a:f4:fc:a2:e3:f9: 3b:43:13:af:a3:81:b4:eb:89:8d:4d:5c:82:aa:17:83:37:74: 1c:fe:d6:86:99:a1:41:40:ae:75:d7:a2:c5:c8:17:11:60:53: 8c:45:1e:75:3a:63:c5:6c:c7:ee:d0:42:ae:17:9e:89:b2:d6: 73:a5:fc:35:8b:ea:21:74:ea:c4:64:d0:c0:b2:e6:b7:49:e4: 4d:30:ce:5d:2a:07:7b:2a:9e:7a:2f:a1:c4:ee:d1:6c:72:70: c2:8a:c3:fc:af:b9:14:ea:07:31:13:57:ab:0f:cf:44:17:62: 6f:fa:e3:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGx+n3tTpx66uWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk YmI2OTBhYzYtNTI1Yy00N2RiLTgwOWMtNjc1M2YzYTExZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFIPhZ7h0FH9mHWx9opPIWpyV2WHMe1ZiIxR Tt+S0AQKVk0gJAgzmSOcBmlyyxkwfBplJ+hKSfRef689IzMpMXWAQNOsM0/CoM4S eQj7huA3bkOFFK9qNLPKYNzHuI15FOrbYE6RcE0uBuXf9sdzweMBwf9I/9dCfIUs raXsKapTyA6bRLsm9X00B5ueRGFiWYC7/UvgTbq2Uuk/sS9SIfZy1jGV6o6niJI8 0lW1J8xg5YKnF5nTPlyUyA+W8sEMI7BqDHVh9SH4GAO0o8FQ6D4u76+8aJizsWvC 42AdHOjkk/1SdqNGpahQ75nMt0OpEjwTa5Jj4bqtBTxchl/ASQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnvbi6GAEPu6fEvdfJhGvk1/B3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmY4YTUyOTItOWYwMy0z MDQzLWI1ZjktNWE5ODhlNGVhYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu8Bsc8MwTCbSUHmHUtBNGnwekjBcdJqJqYyoTZw63QQxf7ea3EEoVi /WgIJ7xNXvocFIfIE4inHzoDPuxpkQQyuKfhFA6E0HT3Y9OIGKU61PNnnSxR+uXS oOoJOw6Al4v/AH/T+8skAg4X0U/KQMTynJ26qnzUyLBBA0O0JAM6NIka7A3fw0T0 Kmr0/KLj+TtDE6+jgbTriY1NXIKqF4M3dBz+1oaZoUFArnXXosXIFxFgU4xFHnU6 Y8Vsx+7QQq4Xnomy1nOl/DWL6iF06sRk0MCy5rdJ5E0wzl0qB3sqnnovocTu0Wxy cMKKw/yvuRTqBzETV6sPz0QXYm/64zs= -----END CERTIFICATE-----Generated at Fri May 22 18:29:19 2026 by rpki-client