$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa File: 1c3859cd-a379-3805-b0c7-cf92685a3438.roa (raw, json) Hash identifier: 1OGoUqf1O5QLbgioGYvsYe3MURDWPbeClDctDgjSKKg= Subject key identifier: 8A:14:9B:C7:2E:3C:73:38:C1:AF:A7:00:94:E1:90:CB:C7:AB:18:E7 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7911C739250DF51D2C250C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:1c:73:92:50:df:51:d2:c2:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b7e765b9-48ae-4a4c-a84a-f72b7987349f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:1f:a1:09:2b:1b:8c:3b:14:19:0a:3d:cf: 47:1d:c0:96:c6:cc:72:d9:f8:da:2c:d3:9a:f4:2e: 4a:0e:b7:0c:42:15:af:35:8f:76:5a:94:1c:6e:b6: c4:76:f9:82:d7:9b:d5:31:9a:2b:be:8a:a7:fa:21: a5:0a:d8:84:4a:5f:57:ce:3f:b3:7d:e5:55:68:78: fe:da:fa:a3:cc:5a:19:67:3a:46:eb:d0:98:d9:4b: 92:08:f3:01:b8:db:76:55:97:f8:4d:7e:d7:17:38: be:62:ee:92:14:c1:fb:9b:32:ab:7e:94:53:2c:86: 55:b8:06:c0:34:38:53:80:7a:ee:10:3f:de:7a:94: bf:c8:82:1b:6e:91:d6:01:90:85:3e:bb:a0:17:f3: 1d:13:71:d1:ba:f2:f1:3d:88:77:d9:4c:78:74:a0: 52:6c:d9:c7:73:21:2f:fe:a3:8d:0d:af:8b:33:ff: e3:53:e7:10:93:04:93:b8:e0:7d:c7:05:eb:6e:63: 64:4b:3e:a7:ca:e1:21:f5:b9:10:48:4b:83:f3:3a: 8a:f7:44:c2:cc:89:89:9c:79:a9:72:9a:b5:2c:91: fb:5e:2e:aa:57:3c:1c:b9:43:86:2b:11:19:8e:a6: 31:1b:a4:c9:2d:fb:3d:42:0e:a2:f6:21:9e:55:0e: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:14:9B:C7:2E:3C:73:38:C1:AF:A7:00:94:E1:90:CB:C7:AB:18:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d7:cf:3c:a7:64:50:56:04:74:e1:67:88:48:2d:c1:37:7d: 09:d3:e5:a8:3f:15:f4:ea:66:97:35:4a:52:4c:61:b5:be:9f: 60:05:3c:1f:77:ea:0a:3b:79:a6:f7:82:87:57:07:46:48:ae: f2:1d:c7:3e:3f:2f:e9:c7:a7:d8:e6:7b:f7:2e:b7:1a:87:22: c5:59:78:1e:3d:bf:1f:c2:2f:ad:57:70:8e:f5:42:92:b7:6c: a0:66:b7:46:63:e5:68:06:ae:f7:46:72:96:9b:43:e8:3d:d8: d5:ec:8b:50:a1:a1:9c:b1:8a:a0:72:e3:88:39:e6:a1:18:25: 43:86:d2:bf:49:02:a7:f8:47:c2:fc:0c:9e:66:ca:03:45:1b: 2c:44:7c:ad:48:40:2f:25:54:e0:a7:d9:7e:a0:13:17:48:52: dc:e4:50:e9:38:2c:b5:53:08:7b:66:ba:40:09:03:0c:66:13: f8:1b:2d:df:b1:e7:96:2f:1e:7d:44:02:8f:23:19:59:30:88: cd:6d:57:8c:f5:2a:ff:83:a4:a6:8e:5b:00:17:84:16:d3:e0: 21:89:c3:b9:1d:0a:18:18:96:92:f3:01:a6:68:65:94:ca:bb: 6d:e1:77:1b:0c:60:05:4e:3c:a3:ab:12:72:6b:ea:b7:3d:9d: f6:42:88:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkRxzklDfUdLCUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjdlNzY1YjktNDhhZS00YTRjLWE4NGEtZjcyYjc5ODczNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d0foQkrG4w7FBkKPc9HHcCWxsxy2fjaLNOa 9C5KDrcMQhWvNY92WpQcbrbEdvmC15vVMZorvoqn+iGlCtiESl9Xzj+zfeVVaHj+ 2vqjzFoZZzpG69CY2UuSCPMBuNt2VZf4TX7XFzi+Yu6SFMH7mzKrfpRTLIZVuAbA NDhTgHruED/eepS/yIIbbpHWAZCFPrugF/MdE3HRuvLxPYh32Ux4dKBSbNnHcyEv /qONDa+LM//jU+cQkwSTuOB9xwXrbmNkSz6nyuEh9bkQSEuD8zqK90TCzImJnHmp cpq1LJH7Xi6qVzwcuUOGKxEZjqYxG6TJLfs9Qg6i9iGeVQ60fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoUm8cuPHM4wa+nAJThkMvHqxjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWMzODU5Y2QtYTM3OS0z ODA1LWIwYzctY2Y5MjY4NWEzNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPXzzynZFBWBHThZ4hILcE3fQnT5ag/FfTqZpc1SlJMYbW+n2AFPB93 6go7eab3godXB0ZIrvIdxz4/L+nHp9jme/cutxqHIsVZeB49vx/CL61XcI71QpK3 bKBmt0Zj5WgGrvdGcpabQ+g92NXsi1ChoZyxiqBy44g55qEYJUOG0r9JAqf4R8L8 DJ5mygNFGyxEfK1IQC8lVOCn2X6gExdIUtzkUOk4LLVTCHtmukAJAwxmE/gbLd+x 55YvHn1EAo8jGVkwiM1tV4z1Kv+DpKaOWwAXhBbT4CGJw7kdChgYlpLzAaZoZZTK u23hdxsMYAVOPKOrEnJr6rc9nfZCiCk= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:32 2026 by rpki-client