$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa File: 4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa (raw, json) Hash identifier: XZnNQ9r4PyR5lzBjW6Dg8clK3KnVKBus8SX3Pilytqc= Subject key identifier: 5D:A7:8B:34:C2:4F:9C:F9:9C:0F:4D:8C:33:DF:C1:D7:A9:95:4A:33 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DAAE04C836306822FB989ABC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 16591 IP address blocks: 136.60.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:4c:83:63:06:82:2f:b9:89:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=a48392fe-13ff-4670-8fad-475d6b6ca0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:21:4c:de:a0:e3:06:3c:b2:9e:73:1c:d8: cd:df:fb:77:be:2e:05:c1:80:77:0b:c9:36:af:f8: 20:c6:57:79:40:a1:01:f5:21:d0:2c:22:9d:41:51: 11:3c:e0:0e:d6:3e:cb:8f:8f:2a:fd:f3:e1:c6:65: 7c:cf:24:e5:dd:93:6f:26:05:f0:e0:70:37:4b:b5: d6:4b:3e:80:06:d3:c6:74:7c:7b:74:c1:82:1d:66: d4:1b:8e:df:df:0d:30:d0:c2:db:c2:14:0e:21:d0: 3e:f9:ec:bd:bb:be:51:1a:32:30:5e:a9:7b:de:9b: e0:c1:c4:b6:9d:60:e2:fe:d1:64:82:db:c5:39:89: 17:06:c8:66:9c:46:d8:1f:2e:d4:01:fe:26:7e:7f: 50:b6:35:fb:33:8b:72:15:15:34:a5:ec:a5:b2:b4: c8:db:60:2d:f2:79:68:2a:0a:e0:1b:5e:e7:31:98: d6:ac:7c:55:0f:e0:ea:dd:8f:6d:0e:85:26:9f:05: e8:70:ff:63:82:d1:e1:b9:3e:a3:79:e1:84:16:11: 7e:af:96:ab:13:22:df:7a:3a:24:6a:53:8d:36:67: 82:30:40:f7:28:db:0a:f2:69:96:ed:70:a6:7e:20: 58:63:9a:f1:c5:95:8a:3f:65:cc:f6:48:81:2c:a8: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:8B:34:C2:4F:9C:F9:9C:0F:4D:8C:33:DF:C1:D7:A9:95:4A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3c:0e:e8:57:c1:fe:95:1c:90:cd:2f:a8:a9:db:2c:85:ec: 34:d4:df:79:d4:42:40:56:b6:f5:2e:6f:73:f6:10:db:d3:2f: 14:37:9d:79:a0:0d:62:c3:54:20:02:bf:49:7e:d1:03:08:a2: 2e:ef:a5:ff:35:41:ee:57:be:32:ba:d7:37:09:be:53:e2:48: b4:3b:e6:ee:36:ac:a6:f8:27:4b:58:ea:dd:c4:39:cc:6c:37: e5:9b:a4:22:a9:d2:4b:4c:d3:6a:58:60:b9:f0:14:3c:19:b2: 7a:0e:00:d4:bd:7e:e2:f3:c7:85:4c:26:71:25:79:85:a8:52: 45:3c:7e:b3:fa:39:00:7e:cd:4a:b0:20:03:fc:fc:b5:c0:8f: 3f:cf:73:ea:6c:d5:34:dc:8c:c6:33:4e:8f:06:4e:74:32:17: ec:11:39:65:16:a1:09:49:29:30:50:df:6c:9a:ef:a7:ca:df: 44:39:0e:09:c8:ac:3c:9f:1c:9a:59:b1:46:c8:69:db:0b:6c: e9:45:04:c1:60:26:a6:89:b9:8a:84:2e:ec:f1:67:8d:59:4e: da:c3:8b:11:b3:b5:b5:fe:97:00:9e:db:d1:75:eb:be:c5:f9: ad:2e:7f:6d:fc:ba:8d:8f:20:9e:fc:44:ac:ef:22:ea:17:a5: a5:df:a0:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4EyDYwaCL7mJq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YTQ4MzkyZmUtMTNmZi00NjcwLThmYWQtNDc1ZDZiNmNhMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp74hTN6g4wY8sp5zHNjN3/t3vi4FwYB3C8k2 r/ggxld5QKEB9SHQLCKdQVERPOAO1j7Lj48q/fPhxmV8zyTl3ZNvJgXw4HA3S7XW Sz6ABtPGdHx7dMGCHWbUG47f3w0w0MLbwhQOIdA++ey9u75RGjIwXql73pvgwcS2 nWDi/tFkgtvFOYkXBshmnEbYHy7UAf4mfn9QtjX7M4tyFRU0peylsrTI22At8nlo KgrgG17nMZjWrHxVD+Dq3Y9tDoUmnwXocP9jgtHhuT6jeeGEFhF+r5arEyLfejok alONNmeCMED3KNsK8mmW7XCmfiBYY5rxxZWKP2XM9kiBLKiOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2nizTCT5z5nA9NjDPfwdeplUozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGEzMWJhNmItYjA3Ny0z ZTAzLThmNTAtYzQ4OGZkOWUyZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo8DuhXwf6VHJDNL6ip2yyF7DTU33nUQkBWtvUub3P2ENvTLxQ3nXmg DWLDVCACv0l+0QMIoi7vpf81Qe5XvjK61zcJvlPiSLQ75u42rKb4J0tY6t3EOcxs N+WbpCKp0ktM02pYYLnwFDwZsnoOANS9fuLzx4VMJnEleYWoUkU8frP6OQB+zUqw IAP8/LXAjz/Pc+ps1TTcjMYzTo8GTnQyF+wROWUWoQlJKTBQ32ya76fK30Q5DgnI rDyfHJpZsUbIadsLbOlFBMFgJqaJuYqELuzxZ41ZTtrDixGztbX+lwCe29F1677F +a0uf238uo2PIJ78RKzvIuoXpaXfoB0= -----END CERTIFICATE-----Generated at Wed May 13 10:15:01 2026 by rpki-client