$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa File: 3b17455d-ed9b-356b-93a3-021986d9b8c9.roa (raw, json) Hash identifier: Q8Yow2ZJOqZ6RCK1lLU2FCbH+syD7UO1tIXRkkKvaSI= Subject key identifier: D3:E2:C0:6B:C5:DD:B7:40:BF:84:AA:47:D1:2B:52:22:85:18:FC:72 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA79115FC0231EE816B9EBE00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.32.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:15:fc:02:31:ee:81:6b:9e:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=354de6b8-8e24-406a-a4c6-57e9e079e7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:8e:7a:a3:2b:78:29:1b:85:56:3e:95:e6: 6a:f1:52:24:0a:55:3e:6b:47:fc:c1:5a:23:c3:1a: e0:2b:48:ee:76:66:70:68:59:5b:b7:91:0c:46:ba: e6:d6:63:16:fc:81:24:a1:e7:4e:1b:af:59:1d:b1: a9:d6:65:8f:50:47:ec:51:2e:ef:71:07:8b:fc:bf: 63:53:82:c9:07:b2:cd:2a:55:96:f4:52:eb:cf:30: ec:79:e9:5d:7c:80:03:fc:26:fa:ea:b3:ce:f7:8e: b4:2c:d1:68:40:d2:89:1b:83:49:6a:f2:ab:2f:56: 38:1f:40:16:da:2d:d7:35:7a:9a:96:95:09:37:f7: 3b:75:5e:b6:39:6e:a4:9d:4b:0d:f5:4b:27:cc:00: a3:46:c6:65:9b:d7:0e:3b:c9:f8:5f:d0:4c:dc:3b: 32:65:a6:7c:1a:82:1b:57:d6:19:e5:01:d2:36:a0: c4:1d:89:b4:74:4a:f1:37:7e:39:24:e7:9d:bd:66: e9:78:29:26:9a:c3:b6:6e:61:2d:2b:77:9b:98:3c: 8d:5f:db:1e:28:03:19:7e:e1:61:43:36:d7:ac:64: 3a:17:73:a0:b7:be:c1:2a:bd:5e:4f:70:9b:58:0f: cb:ca:c2:4a:8e:94:12:1a:91:f9:8a:94:f3:53:4a: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:C0:6B:C5:DD:B7:40:BF:84:AA:47:D1:2B:52:22:85:18:FC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:28:10:43:2a:3d:ef:73:6e:6b:05:fc:5f:e1:55:ca:c1:b8: 69:52:ef:91:75:88:69:cc:fd:95:29:e2:d7:71:e3:fa:0e:c2: 51:b9:66:aa:09:f8:d3:14:4f:c8:7b:46:87:e4:42:f9:a4:3d: 06:2f:92:5e:e5:b4:27:1d:18:a0:7b:d8:93:e9:fb:85:d3:d4: 47:ac:66:90:4c:79:1e:86:89:7a:a5:9e:1f:30:d6:ec:b5:08: 86:9f:76:c8:64:3e:7d:74:bd:1a:60:43:c8:02:17:88:85:02: 72:2c:f9:9b:4d:5a:a6:fd:42:51:4f:c2:c6:0d:6a:b9:0d:00: a7:67:ee:16:53:8c:44:bd:d0:d2:7f:09:af:eb:6b:d4:3b:0a: 19:7c:35:ed:08:85:84:84:c3:e4:ed:e5:db:16:75:44:d7:94: 62:aa:89:c7:53:12:cf:6d:94:2a:41:4c:60:60:82:b5:3b:6e: 78:ff:95:22:d5:9d:4f:48:8d:72:b7:54:ea:ca:dd:d9:17:49: 95:24:bb:31:6f:c4:97:12:4e:65:be:3b:f0:97:ff:47:e5:b8: 29:73:40:bc:fb:de:14:eb:f9:10:52:22:95:a5:ef:e2:3f:32: 56:f3:c8:fd:2a:9b:ee:41:41:dd:4d:18:76:a4:d5:f3:dc:e2: aa:33:b8:e9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nkRX8AjHugWuevgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzU0ZGU2YjgtOGUyNC00MDZhLWE0YzYtNTdlOWUwNzllN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjguOeqMreCkbhVY+leZq8VIkClU+a0f8wVoj wxrgK0judmZwaFlbt5EMRrrm1mMW/IEkoedOG69ZHbGp1mWPUEfsUS7vcQeL/L9j U4LJB7LNKlWW9FLrzzDseeldfIAD/Cb66rPO9460LNFoQNKJG4NJavKrL1Y4H0AW 2i3XNXqalpUJN/c7dV62OW6knUsN9UsnzACjRsZlm9cOO8n4X9BM3DsyZaZ8GoIb V9YZ5QHSNqDEHYm0dErxN345JOedvWbpeCkmmsO2bmEtK3ebmDyNX9seKAMZfuFh QzbXrGQ6F3Ogt77BKr1eT3CbWA/LysJKjpQSGpH5ipTzU0oEHQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNPiwGvF3bdAv4SqR9ErUiKFGPxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2IxNzQ1NWQtZWQ5Yi0z NTZiLTkzYTMtMDIxOTg2ZDliOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFiCAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcSgQQyo973NuawX8X+FVysG4aVLvkXWIacz9lSni13Hj+g7CUblmqgn4 0xRPyHtGh+RC+aQ9Bi+SXuW0Jx0YoHvYk+n7hdPUR6xmkEx5HoaJeqWeHzDW7LUI hp92yGQ+fXS9GmBDyAIXiIUCciz5m01apv1CUU/Cxg1quQ0Ap2fuFlOMRL3Q0n8J r+tr1DsKGXw17QiFhITD5O3l2xZ1RNeUYqqJx1MSz22UKkFMYGCCtTtueP+VItWd T0iNcrdU6srd2RdJlSS7MW/ElxJOZb478Jf/R+W4KXNAvPveFOv5EFIilaXv4j8y VvPI/Sqb7kFB3U0YdqTV89ziqjO46Q== -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:51 2026 by rpki-client