$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa File: 1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa (raw, json) Hash identifier: rrKoJibmHjSmInjwUJf3PRfGDbRd7wwS6nAoPcqNPfA= Subject key identifier: 67:6B:4C:2F:F2:D1:27:DD:5F:9D:33:C3:B7:26:97:0B:F2:77:DC:C0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA791104FB262B79D84CE1C8C Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.37.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:10:4f:b2:62:b7:9d:84:ce:1c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=54c0475a-46bd-4ad9-a854-05f38a6205de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:d7:60:93:a2:31:ab:84:4e:59:a0:27:82: 42:fa:d3:c0:37:54:17:b4:10:6e:98:9b:1f:7c:33: f3:2b:98:8b:be:94:14:af:b5:ec:c2:98:f3:d3:93: 00:c0:31:47:af:35:6f:e2:de:5b:38:75:52:63:c3: bf:3e:bc:75:b2:f9:80:53:de:09:f8:20:af:dd:46: ab:24:71:55:a8:21:2f:c4:94:9e:4e:1e:1c:a4:73: cd:bc:cb:13:c3:1f:96:5f:51:7d:4a:6a:bd:cb:0f: f5:11:4d:33:91:98:81:a4:8f:04:73:f1:55:b8:cb: 14:ba:ce:07:cd:cc:03:69:56:e0:cd:77:d8:4a:d2: 24:1b:5f:8a:55:e8:8e:52:5a:e7:21:57:82:85:4b: 7b:a1:10:5b:47:aa:6e:d7:e4:b9:e5:41:26:af:1e: 73:64:97:8f:63:7d:3d:b0:46:40:31:19:76:61:c9: f1:54:ac:0d:5a:5c:69:25:3a:97:92:e1:7b:4a:f7: 45:b2:68:47:a3:f6:15:ca:3d:c6:3d:3c:db:2a:46: 4b:13:b7:1d:aa:22:1f:8b:6a:e7:2d:08:28:9c:6d: 21:f6:71:01:b4:d1:3b:9a:1b:e7:16:19:dc:21:e2: 94:9e:eb:e7:7c:c7:51:0d:28:c2:14:08:0e:8a:b0: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:4C:2F:F2:D1:27:DD:5F:9D:33:C3:B7:26:97:0B:F2:77:DC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:23:db:e3:22:d9:1b:84:1d:fa:b2:87:cb:b5:44:4a:f9:9e: 26:3d:26:75:84:32:c2:db:70:9e:b2:7f:31:7d:2a:25:a3:5f: 5c:24:1a:02:d8:3f:95:54:22:3a:5e:a9:13:12:0e:ed:4e:56: d2:ce:49:a8:32:bf:c1:8b:8f:ad:31:28:54:95:0d:36:be:6c: df:dd:60:f2:7a:db:70:ce:13:06:10:1d:ed:4a:39:1e:c6:20: 57:eb:fb:57:aa:48:2a:3f:a4:41:c1:0e:5b:73:8a:53:d5:8e: 91:11:cf:2e:26:1e:2e:17:f5:f5:d5:78:4d:a7:6a:17:70:99: bc:2f:f9:78:1c:78:c9:8a:4a:95:96:27:05:92:b9:17:8d:18: ea:0e:0f:fe:51:73:98:73:3e:32:56:46:c8:35:99:48:91:df: d8:32:cf:09:84:f3:74:62:d3:88:c5:31:a9:90:8b:fd:ea:61: 69:d1:2b:ee:b2:ae:85:52:b4:b9:1e:11:dc:d3:30:93:bd:63: 6c:12:ba:7b:b5:79:e7:1d:01:dd:76:db:87:99:a4:6f:82:e5: 19:46:f5:0a:d8:a8:7a:e2:8f:27:a9:6a:fb:f3:be:02:dc:7d: f4:4b:7d:c1:e2:33:10:a7:cc:ff:25:05:f9:c0:7a:b6:40:10: c9:b0:59:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkRBPsmK3nYTOHIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTRjMDQ3NWEtNDZiZC00YWQ5LWE4NTQtMDVmMzhhNjIwNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4rXYJOiMauETlmgJ4JC+tPAN1QXtBBumJsf fDPzK5iLvpQUr7Xswpjz05MAwDFHrzVv4t5bOHVSY8O/Prx1svmAU94J+CCv3Uar JHFVqCEvxJSeTh4cpHPNvMsTwx+WX1F9Smq9yw/1EU0zkZiBpI8Ec/FVuMsUus4H zcwDaVbgzXfYStIkG1+KVeiOUlrnIVeChUt7oRBbR6pu1+S55UEmrx5zZJePY309 sEZAMRl2YcnxVKwNWlxpJTqXkuF7SvdFsmhHo/YVyj3GPTzbKkZLE7cdqiIfi2rn LQgonG0h9nEBtNE7mhvnFhncIeKUnuvnfMdRDSjCFAgOirCJwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdrTC/y0SfdX50zw7cmlwvyd9zAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWEwOGU4Y2QtNGY2ZS0z MTkwLThlMTEtMTdlNGQ5OGU5YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8j2+Mi2RuEHfqyh8u1REr5niY9JnWEMsLbcJ6yfzF9KiWjX1wkGgLY P5VUIjpeqRMSDu1OVtLOSagyv8GLj60xKFSVDTa+bN/dYPJ623DOEwYQHe1KOR7G IFfr+1eqSCo/pEHBDltzilPVjpERzy4mHi4X9fXVeE2nahdwmbwv+XgceMmKSpWW JwWSuReNGOoOD/5Rc5hzPjJWRsg1mUiR39gyzwmE83Ri04jFMamQi/3qYWnRK+6y roVStLkeEdzTMJO9Y2wSunu1eecdAd1224eZpG+C5RlG9QrYqHrijyepavvzvgLc ffRLfcHiMxCnzP8lBfnAerZAEMmwWeI= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:15 2026 by rpki-client