$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa File: 3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa (raw, json) Hash identifier: aBvT/jwUwj9KfvelLjvsjsKHhmX2WH7AUuMuNYvue5E= Subject key identifier: AE:ED:36:02:E3:5B:69:30:7F:58:EC:EF:A8:77:EF:2D:82:91:C2:F6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA790A9E7BBBB061F1E0FA780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.38.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:a9:e7:bb:bb:06:1f:1e:0f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=91bc8947-2300-45dc-8239-b16e86327cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:56:01:6c:0a:8d:9a:d6:ff:d2:ac:ca:73: 10:db:4a:6e:c1:0c:b0:f8:60:7b:28:e8:69:05:32: 34:aa:f3:da:5a:c2:d9:2e:de:8d:23:bf:59:64:27: df:0f:cc:55:ff:3b:a6:1c:07:47:ee:c1:75:d6:17: f7:55:24:0d:9d:65:96:e3:48:2c:fc:f3:72:42:16: 10:14:0b:7a:06:37:0d:0f:25:c4:33:76:a9:2c:aa: a7:3f:af:c5:66:ed:a6:08:43:fd:62:57:7c:a4:96: f0:ae:93:fd:e6:f2:22:7a:08:5e:4c:23:b3:42:64: da:03:3b:cc:3b:06:52:04:b5:aa:a5:a1:e6:4b:67: 10:63:96:01:84:fc:a1:14:ff:c0:0f:21:4a:05:be: d6:e9:82:cc:71:ba:d9:2f:e1:fe:ba:05:ef:ba:69: 9b:af:13:f8:f9:59:78:a1:ed:a6:40:a2:65:98:fa: 19:2b:5c:68:1d:e2:d7:73:87:5d:5f:00:7b:d2:0b: 5f:9a:47:a8:02:bd:3b:81:c8:5e:c8:11:c2:4c:11: e2:98:c9:c0:5f:a5:00:c8:8a:41:b7:d3:5c:68:b9: 09:20:21:45:a0:8f:38:cb:05:77:b7:2d:3d:88:48: cf:92:58:54:05:a7:50:20:01:8f:a1:c7:4b:39:97: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:ED:36:02:E3:5B:69:30:7F:58:EC:EF:A8:77:EF:2D:82:91:C2:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8e:d6:23:80:a3:28:48:20:b4:66:79:21:23:e9:93:2b:9d: 09:71:d8:7e:36:6c:03:23:b6:63:2f:65:cb:6f:02:a6:0c:c4: 7e:13:8b:e2:b9:59:4d:d6:93:14:59:0b:ea:cb:fc:b6:2d:92: 61:4b:b0:fd:60:0b:c0:a7:92:68:3a:f3:76:cf:f4:8d:4a:00: af:3c:65:3e:5b:0e:9e:98:e6:ca:bc:a2:12:5e:80:05:fc:7d: 5b:fd:23:16:9c:c8:fb:c1:02:4d:a3:ac:71:8e:d4:d7:0c:4a: bb:44:ad:00:a4:24:e5:4a:90:df:6d:2f:a9:37:d4:ac:ff:7c: 21:26:ca:e2:bb:86:c8:8b:ea:6b:e2:77:88:bc:d1:5d:19:ec: 85:85:28:15:a2:bb:f5:a5:04:02:c6:e8:68:21:ce:64:07:3d: 54:a0:c2:7d:81:eb:6b:3c:02:96:db:cb:14:cb:e1:85:45:22: 92:6c:a3:4a:54:3b:9f:6a:07:56:92:75:ac:13:54:f5:ed:74: 02:af:03:51:ab:ef:60:12:55:c0:16:b0:f5:2e:78:a3:f7:12: 8a:75:ae:90:c2:bf:72:96:92:2e:6b:82:09:4f:b9:46:5e:94: 17:1d:b7:80:80:e3:44:7a:c1:da:ba:b9:6d:49:81:f7:36:e4: 6a:16:a6:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkKnnu7sGHx4Pp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTFiYzg5NDctMjMwMC00NWRjLTgyMzktYjE2ZTg2MzI3Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqFWAWwKjZrW/9KsynMQ20puwQyw+GB7KOhp BTI0qvPaWsLZLt6NI79ZZCffD8xV/zumHAdH7sF11hf3VSQNnWWW40gs/PNyQhYQ FAt6BjcNDyXEM3apLKqnP6/FZu2mCEP9Yld8pJbwrpP95vIiegheTCOzQmTaAzvM OwZSBLWqpaHmS2cQY5YBhPyhFP/ADyFKBb7W6YLMcbrZL+H+ugXvummbrxP4+Vl4 oe2mQKJlmPoZK1xoHeLXc4ddXwB70gtfmkeoAr07gcheyBHCTBHimMnAX6UAyIpB t9NcaLkJICFFoI84ywV3ty09iEjPklhUBadQIAGPocdLOZcYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7tNgLjW2kwf1js76h37y2CkcL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2VmMTg5NjQtMGIzZi0z ZmY2LTg0NjMtOGZkYTQ0NDYzZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2O1iOAoyhIILRmeSEj6ZMrnQlx2H42bAMjtmMvZctvAqYMxH4Ti+K5 WU3WkxRZC+rL/LYtkmFLsP1gC8Cnkmg683bP9I1KAK88ZT5bDp6Y5sq8ohJegAX8 fVv9IxacyPvBAk2jrHGO1NcMSrtErQCkJOVKkN9tL6k31Kz/fCEmyuK7hsiL6mvi d4i80V0Z7IWFKBWiu/WlBALG6GghzmQHPVSgwn2B62s8ApbbyxTL4YVFIpJso0pU O59qB1aSdawTVPXtdAKvA1Gr72ASVcAWsPUueKP3Eop1rpDCv3KWki5rgglPuUZe lBcdt4CA40R6wdq6uW1Jgfc25GoWpus= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:51 2026 by rpki-client