$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa File: 559275c7-d502-32c7-83b9-37204f3e27b2.roa (raw, json) Hash identifier: /3chQODyUWukWTXmflYtQaNwswWVffZClsIthgCqS6k= Subject key identifier: 20:97:44:DE:14:BC:66:B7:64:0D:56:C1:05:E6:3F:FB:86:B4:A1:FB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7913DB5429A133A53339A20 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.46.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:3d:b5:42:9a:13:3a:53:33:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ebc1a2c9-2bca-49af-b475-8815846a1b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:a8:89:00:81:dc:84:eb:78:5a:d5:d2:53: 90:ab:29:13:f0:cc:7c:f7:94:83:d3:75:62:27:e7: 44:a0:d2:fb:a2:91:5b:5e:82:43:4c:53:26:eb:29: 06:3b:62:10:73:44:c3:29:c0:f9:a1:ee:ad:c3:0c: 38:d8:09:66:d6:83:42:86:ad:fe:ca:35:df:55:5b: 0b:58:bb:c4:e3:33:67:b1:43:a0:3f:66:2d:b1:26: db:39:7a:b9:fe:f6:a9:82:ee:35:b6:0c:96:05:70: e4:2b:48:02:ad:fd:2a:1e:a5:94:d1:b2:ba:ef:4a: 8c:36:99:b5:ac:04:aa:63:80:1d:b2:b8:65:c8:03: 52:67:b9:c0:6b:e6:eb:0e:51:a1:14:a7:99:80:2c: 4f:19:67:a9:c9:00:aa:70:7c:ad:ab:e8:03:59:3b: 3a:dd:b6:0c:6d:c5:51:df:2a:fe:67:75:ff:a2:3a: a5:b0:80:b5:e7:2f:a1:4a:c5:ae:92:3c:94:33:c5: 8b:7f:34:0a:a5:c4:57:68:09:16:5c:ba:86:80:19: 69:03:ca:0d:08:24:1b:02:79:55:64:6d:9e:50:d1: 5c:46:e1:b4:23:18:51:ce:d3:46:46:58:cd:59:27: 8f:65:fc:aa:a7:c9:b0:2b:29:15:09:87:82:69:a6: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:97:44:DE:14:BC:66:B7:64:0D:56:C1:05:E6:3F:FB:86:B4:A1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:10:7b:c7:81:06:99:fd:4b:27:d1:13:f7:f3:61:46:65:c8: c2:50:54:f5:4c:46:f7:df:a4:dc:83:0f:a0:61:41:7c:49:01: 13:80:7e:b5:01:51:5f:6d:a1:07:43:db:e4:c1:8e:eb:61:b2: 36:7d:da:63:09:c4:8f:5f:70:21:90:d4:a8:0a:8c:13:7f:7f: 64:24:94:26:c6:20:1e:b2:a9:da:f1:6e:2d:04:b1:96:ab:3a: f2:57:e3:54:8a:b2:6b:c8:55:aa:a7:e8:1d:1d:a8:29:da:a4: ee:79:ac:f3:9d:7a:5a:6b:9b:6f:e3:0f:64:aa:9e:b3:2d:fd: ea:ae:87:30:71:8a:f8:79:70:34:bc:f6:9c:3a:43:25:50:cc: 44:4f:e0:32:1e:2f:08:df:1d:00:84:15:cd:69:fe:74:ec:aa: a6:86:27:1b:18:53:ad:ed:95:b2:8e:73:c7:1c:36:6a:48:11: d5:a3:13:ec:31:1f:e0:1f:ca:c4:fa:c7:b8:43:c2:84:31:4e: 4a:1c:f6:de:1a:a9:6c:9f:33:00:ee:26:56:3d:e5:01:3b:24: 19:f4:97:09:29:a4:68:0f:f5:db:8c:28:da:28:15:50:55:95: e8:23:1c:1c:4f:8c:32:40:81:e2:62:62:62:64:2b:27:6c:45: 0c:10:d6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkT21QpoTOlMzmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWJjMWEyYzktMmJjYS00OWFmLWI0NzUtODgxNTg0NmExYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioyoiQCB3ITreFrV0lOQqykT8Mx895SD03Vi J+dEoNL7opFbXoJDTFMm6ykGO2IQc0TDKcD5oe6twww42Alm1oNChq3+yjXfVVsL WLvE4zNnsUOgP2YtsSbbOXq5/vapgu41tgyWBXDkK0gCrf0qHqWU0bK670qMNpm1 rASqY4AdsrhlyANSZ7nAa+brDlGhFKeZgCxPGWepyQCqcHytq+gDWTs63bYMbcVR 3yr+Z3X/ojqlsIC15y+hSsWukjyUM8WLfzQKpcRXaAkWXLqGgBlpA8oNCCQbAnlV ZG2eUNFcRuG0IxhRztNGRljNWSePZfyqp8mwKykVCYeCaaZaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCXRN4UvGa3ZA1WwQXmP/uGtKH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTU5Mjc1YzctZDUwMi0z MmM3LTgzYjktMzcyMDRmM2UyN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0Qe8eBBpn9SyfRE/fzYUZlyMJQVPVMRvffpNyDD6BhQXxJAROAfrUB UV9toQdD2+TBjuthsjZ92mMJxI9fcCGQ1KgKjBN/f2QklCbGIB6yqdrxbi0EsZar OvJX41SKsmvIVaqn6B0dqCnapO55rPOdelprm2/jD2SqnrMt/equhzBxivh5cDS8 9pw6QyVQzERP4DIeLwjfHQCEFc1p/nTsqqaGJxsYU63tlbKOc8ccNmpIEdWjE+wx H+AfysT6x7hDwoQxTkoc9t4aqWyfMwDuJlY95QE7JBn0lwkppGgP9duMKNooFVBV legjHBxPjDJAgeJiYmJkKydsRQwQ1o4= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:48 2026 by rpki-client