$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json) Hash identifier: EpNA7+WndPBzQ5wy+TqiucvFJpDhXuWo8cJKtgbnJ14= Subject key identifier: 39:34:75:D7:C6:1A:F7:BE:70:E1:83:69:06:4A:E3:EB:1C:0A:22:93 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7908388488395624E980D40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.35.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:83:88:48:83:95:62:4e:98:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0a4b2b78-2c33-48c2-9d06-593f4d993c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:8c:61:56:9e:55:30:44:c0:20:84:50:eb: ed:eb:a6:0a:13:cc:94:c8:8a:26:87:fa:53:89:a4: 90:60:af:fa:41:45:ae:81:c6:3d:31:48:bd:b9:7f: ed:b1:72:37:9b:ab:71:51:6d:b3:46:63:bc:f3:44: 8f:e2:a3:ea:8f:de:ff:45:80:04:60:00:69:7c:62: ae:3f:43:4a:9f:e4:c7:82:78:a2:77:41:fa:dc:04: 7c:c1:f7:ed:12:fe:2d:4f:f4:75:c1:dc:37:e3:c6: e5:dd:f4:19:12:26:bc:a7:4d:7a:4c:b1:b7:08:fd: 52:98:e7:61:ab:79:8b:da:cb:15:6a:7d:0a:cc:5d: 9a:48:6a:de:c2:4b:15:55:55:90:75:38:3b:5b:4a: e8:3b:bc:a1:e0:3b:c8:59:b5:f4:a2:f9:91:4f:b0: 05:b6:f2:5b:84:a8:4d:a0:34:58:3e:86:14:32:7b: 3e:54:94:d2:b1:7f:fc:da:4a:07:ea:51:0a:be:94: ae:6a:5e:2c:22:bc:7f:ee:53:63:56:80:b5:b3:e8: 05:d2:83:6f:60:eb:a2:68:b7:ea:59:d4:4d:cb:82: 37:3a:44:98:56:b2:04:5c:5e:45:0c:76:af:50:14: 9c:82:b4:a9:c9:47:4e:9d:4f:19:55:9a:af:2b:3b: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:34:75:D7:C6:1A:F7:BE:70:E1:83:69:06:4A:E3:EB:1C:0A:22:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d7:3a:3d:b2:c9:d0:43:cd:06:5d:f0:5d:04:95:4c:f7:11: a2:fd:91:82:9f:4b:41:a4:3b:48:46:1f:66:d2:92:81:36:2e: 68:c0:a5:c2:c3:a5:9d:f3:ff:44:d0:fb:df:bf:8e:de:b9:70: da:d6:fb:04:23:0b:e5:5f:c7:45:32:a8:c8:19:e6:49:47:50: d2:9a:7e:78:5d:ee:da:bc:80:55:8c:3d:1c:2d:51:2d:56:3b: f7:06:00:3b:0a:04:fe:c3:7d:b3:76:4d:c0:c0:43:8e:ce:ef: be:fb:7b:24:f8:29:39:2c:94:d0:6f:85:77:96:18:27:ab:4e: be:d6:e0:3c:bd:c1:1e:2f:3b:6d:db:43:38:d9:3e:83:4b:fd: 7b:b4:50:0c:18:72:6b:e5:2c:0c:09:8d:6e:d5:e2:0c:87:fa: 8a:41:c4:f1:e5:b1:2b:5a:88:d7:ef:a4:f0:b7:e7:1b:ac:79: ad:d9:90:76:2d:ba:34:d0:c6:7f:6d:cb:22:6f:1b:d8:f5:50: 2d:c9:1a:30:3f:c0:82:e4:26:61:0a:b6:3d:27:60:7f:4d:15: 76:87:89:d7:86:e9:74:ad:4d:91:a7:d2:25:4c:23:4d:ce:3b: ab:6e:4a:74:47:d4:53:86:f4:25:4c:5d:9c:79:47:88:d7:a9: 46:c2:da:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkIOISIOVYk6YDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGE0YjJiNzgtMmMzMy00OGMyLTlkMDYtNTkzZjRkOTkzYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqueMYVaeVTBEwCCEUOvt66YKE8yUyIomh/pT iaSQYK/6QUWugcY9MUi9uX/tsXI3m6txUW2zRmO880SP4qPqj97/RYAEYABpfGKu P0NKn+THgniid0H63AR8wfftEv4tT/R1wdw348bl3fQZEia8p016TLG3CP1SmOdh q3mL2ssVan0KzF2aSGrewksVVVWQdTg7W0roO7yh4DvIWbX0ovmRT7AFtvJbhKhN oDRYPoYUMns+VJTSsX/82koH6lEKvpSual4sIrx/7lNjVoC1s+gF0oNvYOuiaLfq WdRNy4I3OkSYVrIEXF5FDHavUBScgrSpyUdOnU8ZVZqvKztsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk0ddfGGve+cOGDaQZK4+scCiKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJhZjA1ODktNTA2MC0z YTk4LTliNTMtZWE3YmUyNmYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvXOj2yydBDzQZd8F0ElUz3EaL9kYKfS0GkO0hGH2bSkoE2LmjApcLD pZ3z/0TQ+9+/jt65cNrW+wQjC+Vfx0UyqMgZ5klHUNKafnhd7tq8gFWMPRwtUS1W O/cGADsKBP7DfbN2TcDAQ47O7777eyT4KTkslNBvhXeWGCerTr7W4Dy9wR4vO23b QzjZPoNL/Xu0UAwYcmvlLAwJjW7V4gyH+opBxPHlsStaiNfvpPC35xusea3ZkHYt ujTQxn9tyyJvG9j1UC3JGjA/wILkJmEKtj0nYH9NFXaHideG6XStTZGn0iVMI03O O6tuSnRH1FOG9CVMXZx5R4jXqUbC2vI= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:46 2026 by rpki-client