$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa File: 20d71fc6-63e2-35b5-8642-c8020055e79b.roa (raw, json) Hash identifier: aZYm+KNBNX10hYMOYpaDVCDq52egvUzTVQyjUSx27Ps= Subject key identifier: F5:D4:D6:DF:A7:9A:44:4C:02:99:E8:EC:2E:B4:01:05:54:A6:F6:4D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA79115151912AA261775FE80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.36.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:15:15:19:12:aa:26:17:75:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9625d698-a7ed-4463-8369-32293244841a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:be:4c:97:30:fb:3a:ea:00:09:db:38:12: 8d:e9:55:f1:e6:7b:9f:e4:62:05:34:62:2b:2e:48: e7:06:26:9a:20:a8:7f:fa:de:a3:b6:f7:3b:b3:a0: a1:40:f2:43:89:8e:51:a2:5c:95:1c:e4:ec:ee:4b: c9:57:69:f1:1b:b2:0c:be:a2:db:84:97:fa:12:39: a7:dd:d3:17:05:8c:cc:b1:14:81:55:63:c3:94:7e: 59:51:da:e4:9a:9b:e0:b9:1d:ac:ae:eb:22:0d:ee: 3b:f3:51:34:44:a2:a4:34:e9:4f:3b:dc:ff:40:05: 29:e6:1a:53:52:2d:95:a7:ff:9d:5b:02:df:2b:0d: 99:f9:ee:9a:3d:2f:85:ff:b0:89:9e:b4:a4:21:38: 2f:ce:91:ca:08:2c:d5:d4:ac:5d:20:b0:cb:8c:fa: a0:2a:0e:81:36:f5:05:86:48:54:16:5f:46:30:33: 74:5d:19:9c:d0:cf:27:73:62:bb:c4:58:03:77:9b: 96:b1:02:7c:68:a9:c3:19:ab:e8:ca:94:14:19:b5: bf:01:9b:5f:06:c5:e9:bc:8d:96:d4:45:e7:77:a6: 03:27:1a:36:b2:68:8d:51:27:5c:0a:43:8d:79:5b: a2:44:a0:4b:fd:2f:98:df:93:12:93:0c:4a:b4:68: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D4:D6:DF:A7:9A:44:4C:02:99:E8:EC:2E:B4:01:05:54:A6:F6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b8:be:d3:8e:72:5c:c4:6a:9d:a2:1b:b8:fb:bb:6c:a5:a6: dd:b5:c1:0e:bd:71:7f:8d:f8:c0:6a:de:f6:5e:44:5d:b6:4e: f5:7a:7d:11:19:f9:2c:e0:ec:92:08:3c:99:08:da:1d:93:78: 39:6e:19:68:e0:d1:9d:ef:96:04:d5:56:a5:c9:c6:9c:d7:71: 41:4d:3d:b1:95:74:a7:d6:81:b4:05:1d:2b:90:cb:86:e2:14: 19:b1:40:7e:7d:52:8e:8c:b0:7e:dc:9e:48:15:d1:74:f6:ff: bf:86:61:3c:40:fb:d9:01:f4:63:4d:2d:c9:fb:e8:d1:1e:73: a7:c6:17:b7:08:c6:31:c8:97:97:3c:e3:f4:93:71:e6:01:dc: b2:93:4f:d8:80:01:02:5a:08:16:42:4b:36:fd:23:ec:ee:f2: 90:e0:eb:a7:14:0d:b8:2f:2b:1a:2d:13:6f:0b:db:43:70:98: db:e0:38:af:ed:c8:75:d5:b8:a5:d5:d5:21:35:7d:67:fc:c1: 96:a5:d3:a1:97:b4:97:75:82:62:50:92:0e:d3:f7:0e:1e:0e: 28:72:e1:e8:3d:82:ac:52:fe:bf:3e:73:72:71:12:a3:7d:d2: 3d:d7:ca:7c:f8:c5:b5:63:df:da:3a:92:16:8c:6a:05:f2:af: 5f:98:71:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkRUVGRKqJhd1/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTYyNWQ2OTgtYTdlZC00NDYzLTgzNjktMzIyOTMyNDQ4NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaK+TJcw+zrqAAnbOBKN6VXx5nuf5GIFNGIr LkjnBiaaIKh/+t6jtvc7s6ChQPJDiY5RolyVHOTs7kvJV2nxG7IMvqLbhJf6Ejmn 3dMXBYzMsRSBVWPDlH5ZUdrkmpvguR2srusiDe4781E0RKKkNOlPO9z/QAUp5hpT Ui2Vp/+dWwLfKw2Z+e6aPS+F/7CJnrSkITgvzpHKCCzV1KxdILDLjPqgKg6BNvUF hkhUFl9GMDN0XRmc0M8nc2K7xFgDd5uWsQJ8aKnDGavoypQUGbW/AZtfBsXpvI2W 1EXnd6YDJxo2smiNUSdcCkONeVuiRKBL/S+Y35MSkwxKtGgRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXU1t+nmkRMApno7C60AQVUpvZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjBkNzFmYzYtNjNlMi0z NWI1LTg2NDItYzgwMjAwNTVlNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA64vtOOclzEap2iG7j7u2ylpt21wQ69cX+N+MBq3vZeRF22TvV6fREZ +Szg7JIIPJkI2h2TeDluGWjg0Z3vlgTVVqXJxpzXcUFNPbGVdKfWgbQFHSuQy4bi FBmxQH59Uo6MsH7cnkgV0XT2/7+GYTxA+9kB9GNNLcn76NEec6fGF7cIxjHIl5c8 4/STceYB3LKTT9iAAQJaCBZCSzb9I+zu8pDg66cUDbgvKxotE28L20NwmNvgOK/t yHXVuKXV1SE1fWf8wZal06GXtJd1gmJQkg7T9w4eDihy4eg9gqxS/r8+c3JxEqN9 0j3Xynz4xbVj39o6khaMagXyr1+YcVQ= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:31 2026 by rpki-client