$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91b04ad5-a3b1-371f-9c97-ece4da211d20.roa File: 91b04ad5-a3b1-371f-9c97-ece4da211d20.roa (raw, json) Hash identifier: pfHfO7/xQzmOgH5TJAll8c2VGmpsOrOuUHiojXs+m5A= Subject key identifier: B0:7A:9B:01:42:C2:92:88:BC:A2:C6:C1:45:41:1A:3E:2C:8B:9E:E5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA794E21FC121C6326C7B77A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91b04ad5-a3b1-371f-9c97-ece4da211d20.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.59.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:e2:1f:c1:21:c6:32:6c:7b:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2f334723-2762-4f79-896b-24b1ed5e7566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:06:42:2e:13:72:7d:10:f7:1e:11:de:60: b1:db:8c:7e:cc:58:00:6b:d0:d6:da:37:ce:7e:07: 7f:74:20:5b:2c:71:84:b4:a9:d3:a8:cb:2f:9f:68: a0:dd:16:ad:8d:c7:05:bf:c7:b8:14:b8:80:da:1d: 96:7c:44:19:75:6a:71:9e:73:93:4a:f6:f1:6e:9d: 6b:63:23:16:2b:1e:54:de:7f:8d:7d:dd:6b:7c:35: 8e:51:1d:4b:d0:dc:51:38:94:d2:01:0f:a9:cf:b4: 31:27:0b:fb:51:7f:91:0b:5e:f8:41:60:20:66:36: ca:9b:e2:d5:1d:80:dc:b3:85:60:8f:b2:80:93:a1: c2:2c:f4:b1:00:c0:f5:aa:a7:0a:9d:61:21:9c:df: 07:d7:37:47:e8:fa:22:98:27:c6:fa:5c:73:a4:06: df:91:b1:4b:c6:f8:5d:91:c9:8a:fb:78:0c:64:3f: 2d:80:a1:ca:24:bf:4c:36:ab:6d:89:a0:98:70:d8: 6a:35:25:8d:d8:79:f4:58:77:47:86:ab:f9:48:de: 28:6f:96:3f:d9:89:6a:67:aa:16:a8:91:1a:0e:29: 90:d2:c3:18:7d:07:b0:16:b4:4b:59:36:f0:20:3a: 21:aa:85:01:89:44:4e:6c:8b:62:e5:d1:39:88:e5: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:9B:01:42:C2:92:88:BC:A2:C6:C1:45:41:1A:3E:2C:8B:9E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91b04ad5-a3b1-371f-9c97-ece4da211d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.59.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:82:2e:0d:25:15:f8:24:d5:ba:13:5f:8c:4d:12:a6:15:4c: 9f:51:d3:be:ee:4e:be:56:69:bf:5f:50:9d:90:a7:83:64:1c: d3:34:53:49:dd:67:a3:d1:69:24:e3:b4:4c:c5:35:d8:38:89: c7:be:5e:67:74:50:fb:ee:cf:b8:30:64:61:1f:76:a6:62:00: 83:57:e6:c1:a7:27:ad:5b:34:60:4b:17:57:89:c5:95:8c:ae: 08:2d:ac:55:17:33:99:65:87:bb:2d:0a:06:e4:77:dc:f9:0a: 0b:37:3e:19:d8:c1:cf:bd:45:f9:64:8b:71:e1:30:b7:11:19: 42:1c:35:45:c9:48:21:c8:a1:c2:d7:21:3d:55:85:25:06:f0: 15:4f:0c:48:39:c2:af:b1:c3:af:82:98:0e:e2:c4:f4:e9:7c: a9:08:15:f0:e9:ba:58:46:45:4a:e2:28:0c:bb:00:85:21:ad: 84:83:68:67:71:45:e9:12:45:06:da:40:65:ab:c8:e1:0d:0c: bc:4b:44:ab:b3:4e:c3:53:e4:72:dc:79:3f:4d:9b:2a:7f:96: 5a:96:7b:1d:07:e0:62:e3:e6:60:f3:06:9b:d1:58:eb:00:26: 2e:99:f6:33:f8:5b:ef:88:5f:9c:38:5b:74:9f:b9:a3:73:de: ee:d6:7c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlOIfwSHGMmx7d6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmYzMzQ3MjMtMjc2Mi00Zjc5LTg5NmItMjRiMWVkNWU3NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApewGQi4Tcn0Q9x4R3mCx24x+zFgAa9DW2jfO fgd/dCBbLHGEtKnTqMsvn2ig3RatjccFv8e4FLiA2h2WfEQZdWpxnnOTSvbxbp1r YyMWKx5U3n+Nfd1rfDWOUR1L0NxROJTSAQ+pz7QxJwv7UX+RC174QWAgZjbKm+LV HYDcs4Vgj7KAk6HCLPSxAMD1qqcKnWEhnN8H1zdH6PoimCfG+lxzpAbfkbFLxvhd kcmK+3gMZD8tgKHKJL9MNqttiaCYcNhqNSWN2Hn0WHdHhqv5SN4ob5Y/2YlqZ6oW qJEaDimQ0sMYfQewFrRLWTbwIDohqoUBiURObIti5dE5iOWGnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLB6mwFCwpKIvKLGwUVBGj4si57lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTFiMDRhZDUtYTNiMS0z NzFmLTljOTctZWNlNGRhMjExZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6CLg0lFfgk1boTX4xNEqYVTJ9R077uTr5Wab9fUJ2Qp4NkHNM0U0nd Z6PRaSTjtEzFNdg4ice+Xmd0UPvuz7gwZGEfdqZiAINX5sGnJ61bNGBLF1eJxZWM rggtrFUXM5llh7stCgbkd9z5Cgs3PhnYwc+9Rflki3HhMLcRGUIcNUXJSCHIocLX IT1VhSUG8BVPDEg5wq+xw6+CmA7ixPTpfKkIFfDpulhGRUriKAy7AIUhrYSDaGdx RekSRQbaQGWryOENDLxLRKuzTsNT5HLceT9Nmyp/llqWex0H4GLj5mDzBpvRWOsA Ji6Z9jP4W++IX5w4W3SfuaNz3u7WfLI= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:14 2026 by rpki-client