$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa File: f4032855-3999-3acc-a472-e0f6cd12161b.roa (raw, json) Hash identifier: ZKWoLuwFzSRFL1p3L86z3fuin2UZ1YVLOzi8+YJj8tQ= Subject key identifier: 58:7C:83:0C:74:3F:BB:4A:64:F9:D0:11:A7:76:82:C8:94:FE:A9:30 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D905A977CBC83EA36E0FC9460 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 16591 IP address blocks: 136.53.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:97:7c:bc:83:ea:36:e0:fc:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=8ab8603e-97dd-4f3b-890e-32c2d8545aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:68:2e:57:f9:d5:14:41:f7:2d:f4:83:a7: f6:98:40:d3:da:71:7f:95:24:d1:52:f2:06:01:18: 75:20:d8:4e:93:cd:b3:18:5a:d6:e5:86:1c:a4:dc: e6:fa:13:25:8f:5e:58:f8:5f:37:73:ad:b6:e3:90: 9e:0f:12:f9:6d:b5:e7:39:6e:be:37:69:10:74:d1: 81:a7:cf:ac:99:e6:76:01:d7:28:12:db:68:9c:d9: fe:e0:e2:ef:85:7d:de:64:ad:bc:df:90:3f:b0:ad: 11:13:45:99:99:a3:c2:a3:7c:f4:2f:c8:de:13:6a: 3a:79:a8:4c:f2:03:33:f7:45:eb:d4:0a:35:eb:20: ba:7b:47:27:0e:58:73:7c:8c:61:86:59:1e:6f:cd: 7c:97:93:f8:de:2a:d8:86:c9:8a:01:10:1a:79:aa: 2e:d9:8f:bc:e0:d4:5e:39:f3:61:05:64:f2:e0:7f: 80:0c:f4:63:5f:7c:c1:d6:ab:ba:77:98:3a:fd:8b: ce:47:bd:41:36:51:88:27:a4:da:20:93:ad:22:0f: 92:9d:82:3d:cf:7b:28:4d:0b:1e:73:30:ca:9b:ce: 9b:7b:14:68:95:ee:5a:c3:be:c2:b4:88:a7:1b:22: 7f:35:03:f4:31:7a:2b:c9:11:c9:19:92:09:c0:f4: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:83:0C:74:3F:BB:4A:64:F9:D0:11:A7:76:82:C8:94:FE:A9:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a1:45:75:3f:87:94:be:3d:8c:e6:31:eb:dc:1a:d6:fe:48: 71:79:c6:a6:f4:e8:a2:72:6a:10:a5:d9:01:bd:fe:ae:ee:7e: cb:30:0e:ad:9f:7d:a3:f3:6b:72:99:f8:1e:c3:d1:5e:50:12: d2:dc:92:70:55:66:06:ab:0c:ee:56:8d:9a:ec:40:b7:8c:3a: 2a:d5:b4:8a:ee:19:ca:cb:e7:27:93:40:3a:f2:d6:e1:f5:21: 1e:68:98:ef:55:d9:3a:54:d1:2c:b9:c7:aa:7f:b5:21:aa:98: c3:dd:0a:25:7e:a6:aa:b5:e1:8f:63:c1:93:59:6f:a7:e8:8a: aa:e0:35:06:40:b0:d4:2e:f8:b0:b0:89:d0:14:74:ad:b2:59: 80:a9:58:a4:c1:22:6d:e7:b2:21:16:1d:de:d7:3c:b3:52:c2: 42:4d:f8:25:40:7b:f5:f6:57:28:5e:ee:af:a4:2e:88:7b:c7: fb:c3:a3:69:32:a8:7c:69:e7:ef:3d:64:db:64:b2:96:92:a8: d2:21:c5:3c:b7:9e:b6:fe:af:4c:99:7c:4a:7e:63:30:ec:f3: ef:68:a5:43:8b:fa:6d:42:42:47:f4:fa:09:25:d6:05:ae:a6: c7:6b:3d:02:ed:a8:28:02:7c:e5:a0:ed:89:cb:0d:eb:67:5b: a6:02:ef:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpd8vIPqNuD8lGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk OGFiODYwM2UtOTdkZC00ZjNiLTg5MGUtMzJjMmQ4NTQ1YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUBoLlf51RRB9y30g6f2mEDT2nF/lSTRUvIG ARh1INhOk82zGFrW5YYcpNzm+hMlj15Y+F83c62245CeDxL5bbXnOW6+N2kQdNGB p8+smeZ2AdcoEttonNn+4OLvhX3eZK2835A/sK0RE0WZmaPCo3z0L8jeE2o6eahM 8gMz90Xr1Ao16yC6e0cnDlhzfIxhhlkeb818l5P43irYhsmKARAaeaou2Y+84NRe OfNhBWTy4H+ADPRjX3zB1qu6d5g6/YvOR71BNlGIJ6TaIJOtIg+SnYI9z3soTQse czDKm86bexRole5aw77CtIinGyJ/NQP0MXoryRHJGZIJwPRUHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh8gwx0P7tKZPnQEad2gsiU/qkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjQwMzI4NTUtMzk5OS0z YWNjLWE0NzItZTBmNmNkMTIxNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqhRXU/h5S+PYzmMevcGtb+SHF5xqb06KJyahCl2QG9/q7ufsswDq2f faPza3KZ+B7D0V5QEtLcknBVZgarDO5WjZrsQLeMOirVtIruGcrL5yeTQDry1uH1 IR5omO9V2TpU0Sy5x6p/tSGqmMPdCiV+pqq14Y9jwZNZb6foiqrgNQZAsNQu+LCw idAUdK2yWYCpWKTBIm3nsiEWHd7XPLNSwkJN+CVAe/X2Vyhe7q+kLoh7x/vDo2ky qHxp5+89ZNtkspaSqNIhxTy3nrb+r0yZfEp+YzDs8+9opUOL+m1CQkf0+gkl1gWu psdrPQLtqCgCfOWg7YnLDetnW6YC7xE= -----END CERTIFICATE-----Generated at Wed May 13 09:58:24 2026 by rpki-client