$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa File: 068d604b-d85c-3d51-9045-97b9c36167a9.roa (raw, json) Hash identifier: klzucHDnnNlfGZWI9UYIuxeLVk5mvqljtGeWJ02LF3E= Subject key identifier: 0F:7F:B6:CE:E7:0B:AF:05:84:40:32:DC:91:17:8A:CE:32:69:F5:69 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA79137A65C7C04284CD3DC80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.35.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:37:a6:5c:7c:04:28:4c:d3:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3b073acd-c236-4915-b367-0eb1433b8c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:d7:e7:1f:3b:01:24:49:03:a0:c1:8c:28: 8a:93:5f:87:dc:4c:46:b2:1f:68:88:c8:be:ed:ef: 97:ae:1d:00:27:b8:d2:0d:e7:1d:f1:93:0e:e6:17: 17:24:82:7b:eb:4e:00:95:12:58:a5:ce:35:3a:ba: 02:84:c6:a6:cb:76:9a:55:b3:f2:fb:d0:e4:3c:fb: b6:41:23:89:48:7f:4e:f8:7b:97:78:0e:10:8e:19: bf:2a:ba:2e:35:bb:f7:4f:1f:a2:ea:e7:46:c8:d2: 42:7a:fc:59:50:5a:f0:2e:4e:04:70:57:4c:e1:c1: fe:05:90:64:e1:cf:a1:e2:6c:f9:32:9a:91:5a:9c: dd:bd:c7:af:c5:40:29:3f:60:70:f2:dc:a3:82:88: 46:fc:24:70:4f:b8:f1:3b:10:e5:38:ca:51:bb:63: 7e:ff:3c:0b:bd:ec:c5:0f:2c:7b:d6:0c:23:04:cb: f0:18:90:26:e8:c6:9a:46:2b:7f:67:63:f4:b7:a2: 4e:ab:27:41:0f:63:b4:ca:1d:43:33:57:2c:64:dc: fc:bd:e9:9f:ae:77:f0:69:3c:70:ba:84:33:84:bf: 62:6a:6f:8f:9d:61:7a:97:d4:b4:4b:4b:2a:00:11: 42:fe:03:b6:bd:00:61:fb:d7:4d:fb:6d:eb:0f:a1: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7F:B6:CE:E7:0B:AF:05:84:40:32:DC:91:17:8A:CE:32:69:F5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c4:17:4c:bc:07:04:3f:37:31:66:fe:eb:82:8b:a2:4c:3d: 5e:c0:d5:de:91:7f:a7:61:ea:c9:ec:12:11:df:3c:e7:1b:52: 0a:5f:ab:0a:f8:b9:48:e7:1d:b2:b6:70:ca:a1:ce:1c:cf:57: 5c:f6:cb:27:fa:71:05:9d:aa:9f:96:07:47:13:95:f0:64:36: 31:33:ed:04:18:5e:fe:39:95:cf:b6:d1:45:74:3d:46:4c:82: 4d:8c:19:d6:51:cb:10:f7:d9:8e:32:af:e7:f5:8b:e6:a2:90: 42:da:00:c2:7b:94:89:5e:1f:27:6d:04:4a:13:9b:3f:6b:d0: db:e0:89:87:3a:cd:bc:d5:68:c5:c4:c0:c3:d0:ba:3c:89:c1: 7f:7f:e0:68:f2:09:98:10:dc:3a:3f:b6:02:3a:c3:13:81:83: 1d:95:54:0c:fc:cf:d3:e7:20:a4:70:67:fc:a5:f6:ba:41:fe: e3:7f:30:e0:07:18:33:01:a7:0e:21:6e:1f:35:74:86:4c:48: 27:e1:66:ea:32:fd:be:0b:87:ef:af:de:dc:08:61:b4:87:f2: 30:9a:9f:24:4a:84:83:d3:fb:bb:17:f5:dc:fd:96:2d:5c:20: de:a4:39:6c:b1:85:b9:d3:fd:0d:33:a0:a8:eb:5b:c6:93:fc: 23:ec:7e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkTemXHwEKEzT3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2IwNzNhY2QtYzIzNi00OTE1LWIzNjctMGViMTQzM2I4YzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0zX5x87ASRJA6DBjCiKk1+H3ExGsh9oiMi+ 7e+Xrh0AJ7jSDecd8ZMO5hcXJIJ7604AlRJYpc41OroChMamy3aaVbPy+9DkPPu2 QSOJSH9O+HuXeA4Qjhm/KrouNbv3Tx+i6udGyNJCevxZUFrwLk4EcFdM4cH+BZBk 4c+h4mz5MpqRWpzdvcevxUApP2Bw8tyjgohG/CRwT7jxOxDlOMpRu2N+/zwLvezF Dyx71gwjBMvwGJAm6MaaRit/Z2P0t6JOqydBD2O0yh1DM1csZNz8vemfrnfwaTxw uoQzhL9iam+PnWF6l9S0S0sqABFC/gO2vQBh+9dN+23rD6HnswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9/ts7nC68FhEAy3JEXis4yafVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDY4ZDYwNGItZDg1Yy0z ZDUxLTkwNDUtOTdiOWMzNjE2N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfEF0y8BwQ/NzFm/uuCi6JMPV7A1d6Rf6dh6snsEhHfPOcbUgpfqwr4 uUjnHbK2cMqhzhzPV1z2yyf6cQWdqp+WB0cTlfBkNjEz7QQYXv45lc+20UV0PUZM gk2MGdZRyxD32Y4yr+f1i+aikELaAMJ7lIleHydtBEoTmz9r0NvgiYc6zbzVaMXE wMPQujyJwX9/4GjyCZgQ3Do/tgI6wxOBgx2VVAz8z9PnIKRwZ/yl9rpB/uN/MOAH GDMBpw4hbh81dIZMSCfhZuoy/b4Lh++v3twIYbSH8jCanyRKhIPT+7sX9dz9li1c IN6kOWyxhbnT/Q0zoKjrW8aT/CPsfmc= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:02 2026 by rpki-client