$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa File: 3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa (raw, json) Hash identifier: GKjYVvcUXbW2UDweshu1/F72UT8sQHxNNoO//s6Di+4= Subject key identifier: D5:76:1F:E8:A1:6A:F5:D1:65:11:15:0B:F2:FB:C9:8A:45:0C:2D:34 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA790A78662C3438CDB94B4C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.60.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:a7:86:62:c3:43:8c:db:94:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9d5be31d-37dd-4442-8bc9-1fa457bd8f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:2a:77:f5:12:5c:55:cf:be:d1:04:36:4a: dc:d3:4d:ad:8a:3a:c6:8a:ff:af:9c:97:79:cd:ab: e6:26:23:9e:c9:b1:9f:79:a6:9e:59:95:e6:60:15: b3:47:6f:63:57:87:68:8b:ec:a3:76:76:2a:75:87: 39:2c:90:1f:81:60:13:40:d0:92:dd:b9:ab:44:d2: c0:9d:52:b5:cf:04:f4:13:91:b3:70:90:3f:80:82: 68:84:d9:0e:34:93:22:c4:3f:2b:1f:2c:49:e3:a4: d6:f7:91:21:59:38:73:bc:5e:05:6f:fb:bc:a8:be: 21:a2:0d:f2:56:8e:8a:28:f8:05:27:9d:49:df:e3: c2:ce:c3:8f:0d:d4:08:ab:91:9b:58:a7:1e:cd:82: 92:fc:ba:b5:e5:66:a2:e0:4d:86:6b:af:64:c4:f9: dd:bb:62:94:f2:38:16:62:5a:e3:85:3d:4d:d8:77: 56:8e:bb:4d:53:eb:0d:f1:3a:e8:dd:17:6d:f1:24: a2:37:33:d2:d6:82:83:64:f1:a7:eb:43:be:29:e6: 21:ca:f3:ce:3f:f1:10:8c:4a:39:c1:57:df:8c:5f: 7a:e7:c8:57:47:02:a0:2c:99:f0:89:05:7e:99:80: f1:67:6d:66:ec:c6:18:a7:86:07:e1:10:77:b1:76: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:76:1F:E8:A1:6A:F5:D1:65:11:15:0B:F2:FB:C9:8A:45:0C:2D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:62:3c:cc:bd:ef:fc:0f:b9:bc:ba:42:2f:5b:66:4c:ff:ed: 5a:ad:e3:9b:04:a4:48:36:8c:a5:8f:a1:59:c6:07:55:d1:e3: 5d:8f:3b:d5:c0:73:58:65:13:ce:51:90:f4:53:84:d1:7b:47: 99:21:d3:66:09:20:88:a3:76:1f:3c:ec:2e:52:19:ee:f4:b1: b5:cd:cb:20:57:ba:d8:f1:a7:25:c7:bd:31:0e:be:5f:dd:07: d6:ca:0e:e2:49:81:5a:2a:9e:b1:c4:f5:8c:65:b6:8f:05:68: 31:86:30:11:8b:df:ec:51:05:84:c3:7f:18:0c:a0:4b:e0:07: fe:5e:ea:de:cb:34:7f:b3:0b:b0:1e:66:1f:25:82:ba:18:8a: 19:a9:7c:06:23:91:f1:3c:e2:9a:58:34:85:ad:c3:24:47:52: 90:21:a0:48:ff:83:8b:ce:87:cd:86:03:a6:25:9f:0e:fc:e3: 56:71:8e:8b:29:87:c5:3f:ce:79:66:9e:93:18:de:dd:2a:65: 96:49:2b:62:c1:bf:cf:3c:a8:87:11:aa:4a:9f:77:bc:42:7a: ce:0c:df:16:ac:5f:b3:6d:b1:94:2e:31:58:9e:e6:ff:58:61: d4:9a:01:20:c4:42:81:2b:0e:2f:63:f9:ae:70:5c:db:44:a0: e2:b1:77:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkKeGYsNDjNuUtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWQ1YmUzMWQtMzdkZC00NDQyLThiYzktMWZhNDU3YmQ4ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Iqd/USXFXPvtEENkrc002tijrGiv+vnJd5 zavmJiOeybGfeaaeWZXmYBWzR29jV4doi+yjdnYqdYc5LJAfgWATQNCS3bmrRNLA nVK1zwT0E5GzcJA/gIJohNkONJMixD8rHyxJ46TW95EhWThzvF4Fb/u8qL4hog3y Vo6KKPgFJ51J3+PCzsOPDdQIq5GbWKcezYKS/Lq15Wai4E2Ga69kxPndu2KU8jgW YlrjhT1N2HdWjrtNU+sN8Tro3Rdt8SSiNzPS1oKDZPGn60O+KeYhyvPOP/EQjEo5 wVffjF9658hXRwKgLJnwiQV+mYDxZ21m7MYYp4YH4RB3sXYhdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV2H+ihavXRZREVC/L7yYpFDC00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2FlZDllN2EtMjRiMS0z M2I1LTg2NzMtOWM4NGI4Y2ZhMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhiPMy97/wPuby6Qi9bZkz/7Vqt45sEpEg2jKWPoVnGB1XR412PO9XA c1hlE85RkPRThNF7R5kh02YJIIijdh887C5SGe70sbXNyyBXutjxpyXHvTEOvl/d B9bKDuJJgVoqnrHE9Yxlto8FaDGGMBGL3+xRBYTDfxgMoEvgB/5e6t7LNH+zC7Ae Zh8lgroYihmpfAYjkfE84ppYNIWtwyRHUpAhoEj/g4vOh82GA6Ylnw7841Zxjosp h8U/znlmnpMY3t0qZZZJK2LBv888qIcRqkqfd7xCes4M3xasX7NtsZQuMVie5v9Y YdSaASDEQoErDi9j+a5wXNtEoOKxdz0= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:32 2026 by rpki-client