$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa File: 1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa (raw, json) Hash identifier: xLOqBDN1cD9K69j/dT1y8yQV5PqCilgP78Rs49FdvwI= Subject key identifier: 8F:C1:C9:6A:06:FC:AB:03:94:E9:B8:DF:E1:D5:1B:D7:C1:20:FE:D7 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7912EEB3BC7E6692502F280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:2e:eb:3b:c7:e6:69:25:02:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3d09023b-48e6-435a-89db-b17df59c1ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:15:ef:fb:ad:3f:1e:76:6b:48:67:b4:e8: 6e:16:fd:11:20:46:3a:fe:82:00:74:92:fe:53:94: d3:92:dc:f8:fa:5a:e8:9f:74:37:43:78:93:98:ea: e3:72:f0:cf:64:87:f8:36:ea:39:a1:f9:48:07:05: df:a1:00:c2:b4:31:7e:0f:26:09:06:9a:0f:cb:d1: cb:e9:bf:18:e1:6f:7a:81:67:36:54:69:a8:3a:24: 0a:a9:c9:18:ac:56:18:71:0b:16:61:0e:c5:c0:5a: 5e:32:1e:2e:38:a5:55:e9:e3:e7:57:9d:cc:a7:83: 6e:e1:98:06:92:ec:8c:cb:ba:23:4f:db:be:59:76: 2c:6d:53:4d:68:93:22:7c:ff:e2:ed:ed:df:6c:c1: 2c:35:2c:06:30:29:9c:a0:ff:9d:99:4b:db:a5:5a: b6:f7:2b:e8:2c:3f:b2:e9:cc:ce:ab:38:1b:d9:6a: 04:dc:20:dc:bc:17:da:98:8b:4d:0d:3d:d7:e3:7b: 46:0a:b2:1f:c5:d4:90:fb:1a:32:e9:fd:b1:71:b9: 2b:da:6d:04:2b:19:38:9d:42:a4:3f:41:15:31:b5: c3:2d:fd:47:03:11:4f:b2:cb:6c:16:ba:21:f0:05: 43:88:64:f9:5c:7c:b4:98:ea:5c:99:76:7e:cd:74: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:C9:6A:06:FC:AB:03:94:E9:B8:DF:E1:D5:1B:D7:C1:20:FE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:71:d3:84:64:04:56:c9:78:22:79:49:ba:68:8d:35:f6:e6: 79:6f:87:3b:cc:27:53:44:b7:4f:43:d3:00:21:5f:97:02:fc: 40:1a:d0:7d:8a:47:e7:fc:48:c1:0b:17:35:61:26:08:c7:e1: 30:21:67:8b:45:39:ba:4a:4c:ba:dd:b8:32:7e:66:cf:ca:3d: 70:a4:e4:b4:07:fa:82:f2:8e:35:28:a7:cb:21:3e:40:be:d2: 3b:42:e6:9a:45:ff:d2:d5:fa:4d:96:2b:d2:f4:ac:37:62:7a: 24:d2:e8:c7:55:36:22:5e:c5:3b:70:9e:1f:1d:18:12:90:13: a3:fb:05:7e:ff:0e:1c:56:aa:8a:3a:b0:e1:26:5f:57:d5:6f: a4:8b:4d:1a:d2:25:e5:33:a3:cc:d2:1b:c9:75:e3:cc:1e:25: 35:ce:99:37:6f:b2:89:13:32:ce:f6:5a:4e:b6:79:89:d0:5d: 3f:10:a1:83:0c:9f:7a:0c:b4:47:ed:1f:05:c7:f9:cb:57:2f: e6:03:40:a7:27:61:bd:ff:1b:91:b0:42:17:1f:b4:27:7f:2f: 20:37:a4:98:46:f7:6b:a8:fe:d0:9a:95:f6:c4:97:13:45:70: f6:fc:f7:a9:2e:bb:6b:a2:a8:21:28:3b:8d:37:8c:ce:c0:d5: e1:cb:85:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkS7rO8fmaSUC8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2QwOTAyM2ItNDhlNi00MzVhLTg5ZGItYjE3ZGY1OWMxZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8V7/utPx52a0hntOhuFv0RIEY6/oIAdJL+ U5TTktz4+lron3Q3Q3iTmOrjcvDPZIf4Nuo5oflIBwXfoQDCtDF+DyYJBpoPy9HL 6b8Y4W96gWc2VGmoOiQKqckYrFYYcQsWYQ7FwFpeMh4uOKVV6ePnV53Mp4Nu4ZgG kuyMy7ojT9u+WXYsbVNNaJMifP/i7e3fbMEsNSwGMCmcoP+dmUvbpVq29yvoLD+y 6czOqzgb2WoE3CDcvBfamItNDT3X43tGCrIfxdSQ+xoy6f2xcbkr2m0EKxk4nUKk P0EVMbXDLf1HAxFPsstsFroh8AVDiGT5XHy0mOpcmXZ+zXRuTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/ByWoG/KsDlOm43+HVG9fBIP7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWM1NmVkNWUtMjJkNy0z NDNmLTg4YzctMWQ2ZDZkZTBmNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpx04RkBFbJeCJ5SbpojTX25nlvhzvMJ1NEt09D0wAhX5cC/EAa0H2K R+f8SMELFzVhJgjH4TAhZ4tFObpKTLrduDJ+Zs/KPXCk5LQH+oLyjjUop8shPkC+ 0jtC5ppF/9LV+k2WK9L0rDdieiTS6MdVNiJexTtwnh8dGBKQE6P7BX7/DhxWqoo6 sOEmX1fVb6SLTRrSJeUzo8zSG8l148weJTXOmTdvsokTMs72Wk62eYnQXT8QoYMM n3oMtEftHwXH+ctXL+YDQKcnYb3/G5GwQhcftCd/LyA3pJhG92uo/tCalfbElxNF cPb896kuu2uiqCEoO403jM7A1eHLhTk= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:49 2026 by rpki-client