$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa File: a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa (raw, json) Hash identifier: NAH/7RW9Q5qz9ohmC7QsfUq4/5oy15LygzAD9euSa5I= Subject key identifier: 6D:32:EA:07:0C:46:FE:85:DD:ED:74:63:72:E7:13:70:38:86:0C:0E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7909DB3099E53EF93BDB740 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.49.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:9d:b3:09:9e:53:ef:93:bd:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=84967234-adb2-4f4c-b5f1-8e6f21546ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:dc:ee:a5:de:a4:f0:99:92:dd:ec:a7:f7: 1c:ef:68:4d:f2:c8:a0:f6:3e:a4:d2:1a:da:1a:db: 4e:8f:3e:0b:48:3e:74:86:55:b4:ea:ab:12:b5:01: dd:45:a6:94:0e:01:9c:32:cd:c4:b7:f3:b0:69:c9: 8a:04:18:61:61:4d:fc:3f:05:09:b1:03:37:ae:b4: e2:39:f2:b9:30:d1:27:f8:0a:68:4c:27:45:e3:90: d3:40:87:15:9e:c0:96:f2:be:55:34:21:b4:31:07: c1:37:cd:4f:2d:03:1f:61:b7:17:04:79:f1:05:be: 33:34:8c:4d:48:75:d0:68:06:f0:e6:c0:36:42:ae: 54:98:38:43:b5:2b:93:e7:74:96:e0:64:59:02:8d: 2d:7b:17:66:0f:53:44:22:64:81:a7:ae:62:2a:14: 3d:aa:7a:96:ef:fd:cc:67:45:6c:72:e4:fd:8e:50: c0:35:ad:89:0d:94:a0:d6:3a:22:8c:3d:12:3e:b1: 63:ef:5a:02:90:ec:9f:cf:40:c3:26:c8:9c:0b:6e: 56:50:75:2b:e3:d8:b2:12:18:ca:be:ec:c5:90:05: aa:4a:f1:c3:2c:4b:8d:2d:c5:db:01:21:27:28:83: d2:80:8b:d4:9a:42:e6:b7:d2:a5:5f:bf:b4:63:14: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:32:EA:07:0C:46:FE:85:DD:ED:74:63:72:E7:13:70:38:86:0C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f8:92:9d:03:a9:c9:18:b5:cc:d9:e2:48:7e:bf:da:5f:58: 85:f8:63:02:c6:3c:d7:93:0c:29:ed:54:44:cf:46:56:6b:f4: 4f:fd:33:92:35:1e:f8:c0:19:cd:ee:7a:33:58:28:f5:04:0f: 7c:ca:98:87:7b:09:69:e4:f5:f7:81:2e:ad:e0:c2:55:05:9b: eb:09:da:1f:0d:2b:08:e9:45:9e:b6:b2:63:21:00:17:53:4d: 87:81:9f:4e:fb:40:2a:05:6a:06:3d:67:42:16:53:df:94:81: 74:ce:11:fb:c7:94:92:57:64:51:9f:1e:9b:16:aa:46:5c:90: 62:d2:09:31:34:3a:69:71:d4:09:35:d5:6c:04:13:3f:d5:6f: f4:cf:31:bd:a7:50:cb:99:23:03:ad:7b:89:e4:fb:10:ab:fe: 6d:3d:e8:14:78:26:42:25:02:c3:db:f0:eb:44:bc:b4:f3:b8: 79:5b:76:70:b9:95:1e:85:c9:10:5a:7f:a4:ff:28:d0:f9:c0: 71:2d:64:2c:8f:0f:5d:5f:a7:00:60:f3:31:4e:b2:6c:db:7a: 10:81:c5:a8:1a:ed:12:8a:ce:27:af:d4:6e:93:39:cf:17:12: 91:36:cd:01:08:e0:48:49:68:c9:b2:66:e2:75:d2:20:d6:c0: 54:2a:32:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkJ2zCZ5T75O9t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODQ5NjcyMzQtYWRiMi00ZjRjLWI1ZjEtOGU2ZjIxNTQ2Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf3c7qXepPCZkt3sp/cc72hN8sig9j6k0hra GttOjz4LSD50hlW06qsStQHdRaaUDgGcMs3Et/OwacmKBBhhYU38PwUJsQM3rrTi OfK5MNEn+ApoTCdF45DTQIcVnsCW8r5VNCG0MQfBN81PLQMfYbcXBHnxBb4zNIxN SHXQaAbw5sA2Qq5UmDhDtSuT53SW4GRZAo0texdmD1NEImSBp65iKhQ9qnqW7/3M Z0VscuT9jlDANa2JDZSg1joijD0SPrFj71oCkOyfz0DDJsicC25WUHUr49iyEhjK vuzFkAWqSvHDLEuNLcXbASEnKIPSgIvUmkLmt9KlX7+0YxSovwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0y6gcMRv6F3e10Y3LnE3A4hgwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTNmNTM2YjItZjQ1NS0z NWMyLWJhMzctNTRhOGVlOWQ2NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH4kp0DqckYtczZ4kh+v9pfWIX4YwLGPNeTDCntVETPRlZr9E/9M5I1 HvjAGc3uejNYKPUED3zKmId7CWnk9feBLq3gwlUFm+sJ2h8NKwjpRZ62smMhABdT TYeBn077QCoFagY9Z0IWU9+UgXTOEfvHlJJXZFGfHpsWqkZckGLSCTE0Omlx1Ak1 1WwEEz/Vb/TPMb2nUMuZIwOte4nk+xCr/m096BR4JkIlAsPb8OtEvLTzuHlbdnC5 lR6FyRBaf6T/KND5wHEtZCyPD11fpwBg8zFOsmzbehCBxaga7RKKziev1G6TOc8X EpE2zQEI4EhJaMmyZuJ10iDWwFQqMhk= -----END CERTIFICATE-----Generated at Thu Jul 30 00:34:09 2026 by rpki-client