$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/23d14435-ccb8-3d0a-9176-fd2283896863.roa File: 23d14435-ccb8-3d0a-9176-fd2283896863.roa (raw, json) Hash identifier: ltAlBqGfhafapNjLfXo/fCRp1KGYHthfA1hF069IgsU= Subject key identifier: 19:07:8C:03:22:68:24:FA:DA:46:B2:A2:4E:EE:52:73:DE:B8:E4:7E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7908524D203DE34154432E0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/23d14435-ccb8-3d0a-9176-fd2283896863.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.47.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:85:24:d2:03:de:34:15:44:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d72d5e95-338a-4760-815e-d12da6bb25df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:a4:11:1c:e1:69:72:e9:24:20:8d:5f:c1: 1e:44:af:bf:e7:2e:99:76:6d:99:f8:5c:9f:74:c2: 48:af:71:2f:87:a2:b3:e1:29:0b:eb:a3:7d:60:1b: 26:b6:be:fa:2f:e1:1a:90:43:69:e1:a5:39:36:bb: 1b:03:2a:49:dd:39:2a:ca:25:35:bc:bd:25:62:ae: cc:a6:56:9c:d6:1b:0c:6e:2c:bb:ff:97:a5:75:84: fc:ab:81:5e:cb:91:a5:4b:36:c9:56:71:c3:7d:cd: 09:6b:0b:90:c3:2f:d3:9f:76:42:6e:79:27:08:d2: 86:e5:b0:64:e5:24:63:e2:2a:b6:1f:b2:98:63:04: 76:89:7f:f9:3d:14:71:28:d5:90:5d:3b:47:df:bf: 17:d8:ef:22:e5:b3:93:f8:2f:6e:4b:43:51:42:d3: 26:7b:72:78:0f:57:d6:6e:07:55:08:a6:3f:11:a1: 79:10:9e:d2:e5:cb:89:1f:4b:97:ff:8c:9a:93:7d: 61:cc:33:c1:d3:83:70:7b:f3:76:0a:38:a1:94:32: 62:5b:d3:8a:b3:f4:ad:84:d2:02:b5:e9:60:fe:0d: 30:d6:fe:7a:c9:d6:b1:49:44:fd:b9:3c:6a:15:63: 52:29:70:9d:06:cb:77:1a:b4:f0:e2:20:e0:9c:59: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:8C:03:22:68:24:FA:DA:46:B2:A2:4E:EE:52:73:DE:B8:E4:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/23d14435-ccb8-3d0a-9176-fd2283896863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b2:e4:fc:76:aa:4e:84:7a:79:8d:b0:45:9c:07:3f:fd:d8: fa:ed:9d:c0:f0:b9:07:27:03:2b:c6:12:26:80:67:29:99:4c: 22:0e:68:56:46:b9:b7:38:77:3f:7b:75:2f:29:89:ed:d3:b4: a1:62:e0:7a:b2:16:a3:93:d7:01:16:3d:fa:57:f7:c0:7a:5d: 8c:88:90:6d:0e:cd:fe:85:78:65:6f:9e:6a:bc:d3:92:27:5c: 5d:3d:95:82:42:56:b0:66:d6:cf:71:b0:ef:08:9e:43:ba:cf: af:31:03:9a:59:e8:b5:64:23:c1:66:ff:06:03:78:23:fd:f9: 2a:8e:69:f1:95:cc:45:ef:9c:ab:d5:84:b4:45:af:7a:26:f5: 35:34:df:17:08:15:06:1f:2b:7c:74:ab:bd:72:58:7c:cc:26: 79:08:f7:82:6b:d5:92:6f:0f:66:20:45:07:56:98:26:40:e8: 89:ba:b8:22:e8:39:dc:94:ee:02:2b:95:5a:51:80:ee:ea:60: b3:b9:09:69:d0:84:cd:c6:1a:78:b6:29:9a:17:21:4c:cc:0a: b3:64:84:c5:88:6e:cf:cf:a3:13:7a:71:e0:14:c0:c4:23:5d: 53:bd:50:2b:25:dc:06:de:e9:8e:dc:03:d1:50:6b:f7:f9:79: eb:66:d7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkIUk0gPeNBVEMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDcyZDVlOTUtMzM4YS00NzYwLTgxNWUtZDEyZGE2YmIyNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglWkERzhaXLpJCCNX8EeRK+/5y6Zdm2Z+Fyf dMJIr3Evh6Kz4SkL66N9YBsmtr76L+EakENp4aU5NrsbAypJ3TkqyiU1vL0lYq7M plac1hsMbiy7/5eldYT8q4Fey5GlSzbJVnHDfc0JawuQwy/Tn3ZCbnknCNKG5bBk 5SRj4iq2H7KYYwR2iX/5PRRxKNWQXTtH378X2O8i5bOT+C9uS0NRQtMme3J4D1fW bgdVCKY/EaF5EJ7S5cuJH0uX/4yak31hzDPB04Nwe/N2CjihlDJiW9OKs/SthNIC telg/g0w1v56ydaxSUT9uTxqFWNSKXCdBst3GrTw4iDgnFlQDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkHjAMiaCT62kayok7uUnPeuOR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjNkMTQ0MzUtY2NiOC0z ZDBhLTkxNzYtZmQyMjgzODk2ODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+y5Px2qk6EenmNsEWcBz/92PrtncDwuQcnAyvGEiaAZymZTCIOaFZG ubc4dz97dS8pie3TtKFi4HqyFqOT1wEWPfpX98B6XYyIkG0Ozf6FeGVvnmq805In XF09lYJCVrBm1s9xsO8InkO6z68xA5pZ6LVkI8Fm/wYDeCP9+SqOafGVzEXvnKvV hLRFr3om9TU03xcIFQYfK3x0q71yWHzMJnkI94Jr1ZJvD2YgRQdWmCZA6Im6uCLo OdyU7gIrlVpRgO7qYLO5CWnQhM3GGni2KZoXIUzMCrNkhMWIbs/PoxN6ceAUwMQj XVO9UCsl3Abe6Y7cA9FQa/f5eetm10k= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:52 2026 by rpki-client