$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7f20be13-f47d-3a6b-ab74-af606ae9d1fa.roa File: 7f20be13-f47d-3a6b-ab74-af606ae9d1fa.roa (raw, json) Hash identifier: VTLg0J9lZ8fTmkbueobuRRWytFOLr7lvPAn/rBjaAP8= Subject key identifier: 2B:04:B8:FF:10:DF:E6:03:B5:1C:E8:F0:5F:9C:AE:AF:76:E6:E8:8A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D4720D8FCBABF2EDBB27C5300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7f20be13-f47d-3a6b-ab74-af606ae9d1fa.roa Signing time: Tue 24 Mar 2026 19:30:09 +0000 ROA not before: Tue 24 Mar 2026 19:30:09 +0000 ROA not after: Mon 22 Jun 2026 19:30:09 +0000 asID: 16591 IP address blocks: 136.39.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:20:d8:fc:ba:bf:2e:db:b2:7c:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Mar 24 19:30:09 2026 GMT Not After : Jun 22 19:30:09 2026 GMT Subject: CN=c078e13a-a43d-4900-8fd2-47c044c2fb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:4e:ab:b5:1e:b7:c9:f1:0e:41:77:4b:0d: 4f:9b:67:10:20:ec:d5:34:5b:50:ab:f9:e2:98:f1: 8c:a3:a2:2e:88:d1:1f:be:f2:6a:18:3a:89:4e:ba: b1:84:a5:c0:99:0f:7f:18:4d:9c:45:e1:83:82:5a: 4e:2e:be:e0:0f:0c:3d:f3:0c:a6:d3:f6:12:68:dd: 42:88:b0:fa:62:88:a3:c0:76:7e:d8:4f:40:97:47: c7:db:29:50:59:e6:b9:98:ad:05:6e:44:51:5b:87: 5c:35:ec:f7:77:4f:dd:21:60:fd:30:e4:96:7f:58: 9c:95:b8:49:e5:a8:9a:4b:89:8e:de:11:4e:16:01: 5e:ec:80:5e:37:5d:56:ce:b5:17:1d:88:c3:9f:22: b9:79:e6:53:7b:93:3b:a4:74:c1:23:1e:6c:f6:e4: 07:20:11:8d:60:58:c2:9e:5a:c2:f2:a8:73:3b:4b: cd:71:0c:3c:80:02:c0:46:81:56:df:56:66:cd:6a: 4c:4b:86:f8:d5:02:60:05:7d:05:f3:8d:77:ca:3c: 66:15:00:3d:e1:99:89:2b:82:59:7c:b4:2e:7c:2c: 1b:b7:dd:71:2d:62:ca:81:47:e8:0a:6b:be:0e:08: 97:76:39:3c:89:46:fc:96:1b:e3:59:61:e8:ff:ca: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:B8:FF:10:DF:E6:03:B5:1C:E8:F0:5F:9C:AE:AF:76:E6:E8:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7f20be13-f47d-3a6b-ab74-af606ae9d1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.39.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e1:0e:d0:b6:f9:3c:7e:44:23:98:bc:70:a1:3f:45:94:f8: 10:78:63:65:b7:11:a6:7d:7d:8d:fa:47:7b:99:6d:d7:8f:73: 5b:e5:2e:65:09:72:14:86:70:97:07:b2:b4:6b:a1:62:06:12: d4:0c:6b:1b:76:45:b9:df:ee:ec:f5:51:9b:41:9a:13:47:9c: 0f:2a:13:19:40:f1:55:56:0e:a3:2a:e5:c9:fe:15:5c:2d:d7: cb:81:90:ad:bc:d1:6e:4f:25:f1:cf:c8:9e:2b:7e:07:37:6f: ce:3d:a7:71:f4:75:eb:68:9b:8a:b5:62:a0:10:25:8e:0d:0c: 9f:21:68:61:16:c6:e7:87:81:06:ee:37:75:0c:e0:c5:6b:fd: 4b:b0:ba:3c:02:90:66:58:9c:60:d6:15:ad:15:11:05:35:d4: 82:7f:bf:94:ab:e8:e1:70:a4:94:59:ca:ef:1f:8e:84:19:43: fe:eb:ca:11:88:54:2c:3a:09:d1:ab:6b:17:88:7b:63:3c:9b: 8b:01:ca:8a:10:e5:fd:5b:78:34:c7:5c:ab:14:84:d0:8c:a1: b0:af:47:3b:b3:9c:11:29:f1:53:d6:56:b9:f2:9a:18:a9:6f: 82:ef:ba:24:36:b2:d4:b0:5c:0f:98:ec:2a:82:d5:cc:dc:d2: d7:3c:6d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HINj8ur8u27J8UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDMyNDE5MzAwOVoXDTI2MDYyMjE5MzAwOVowLzEtMCsGA1UEAxMk YzA3OGUxM2EtYTQzZC00OTAwLThmZDItNDdjMDQ0YzJmYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkdOq7Uet8nxDkF3Sw1Pm2cQIOzVNFtQq/ni mPGMo6IuiNEfvvJqGDqJTrqxhKXAmQ9/GE2cReGDglpOLr7gDww98wym0/YSaN1C iLD6YoijwHZ+2E9Al0fH2ylQWea5mK0FbkRRW4dcNez3d0/dIWD9MOSWf1iclbhJ 5aiaS4mO3hFOFgFe7IBeN11WzrUXHYjDnyK5eeZTe5M7pHTBIx5s9uQHIBGNYFjC nlrC8qhzO0vNcQw8gALARoFW31ZmzWpMS4b41QJgBX0F8413yjxmFQA94ZmJK4JZ fLQufCwbt91xLWLKgUfoCmu+DgiXdjk8iUb8lhvjWWHo/8oz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsEuP8Q3+YDtRzo8F+crq925uiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvN2YyMGJlMTMtZjQ3ZC0z YTZiLWFiNzQtYWY2MDZhZTlkMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDhDtC2+Tx+RCOYvHChP0WU+BB4Y2W3EaZ9fY36R3uZbdePc1vlLmUJ chSGcJcHsrRroWIGEtQMaxt2Rbnf7uz1UZtBmhNHnA8qExlA8VVWDqMq5cn+FVwt 18uBkK280W5PJfHPyJ4rfgc3b849p3H0detom4q1YqAQJY4NDJ8haGEWxueHgQbu N3UM4MVr/UuwujwCkGZYnGDWFa0VEQU11IJ/v5Sr6OFwpJRZyu8fjoQZQ/7ryhGI VCw6CdGraxeIe2M8m4sByooQ5f1beDTHXKsUhNCMobCvRzuznBEp8VPWVrnymhip b4LvuiQ2stSwXA+Y7CqC1czc0tc8bXI= -----END CERTIFICATE-----Generated at Thu Mar 26 06:24:51 2026 by rpki-client