$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa File: a436ac52-91aa-3c41-8e92-858df4f15e6d.roa (raw, json) Hash identifier: sxfAYojGZcplXiAKboQNUQFHhEUMh8cEU4elYl50Xws= Subject key identifier: A5:8D:99:FE:54:4B:6B:C0:E9:4A:82:A0:27:7F:E3:46:B1:E7:24:8F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA790A1EFC4D7AA87508F67E0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.32.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:a1:ef:c4:d7:aa:87:50:8f:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a50be4da-8f69-4cbe-b9a6-efaef0e59af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:e9:22:b9:be:8f:e9:d1:6f:9f:24:12:48: 24:e0:9a:1b:31:ca:fb:58:37:fd:ab:9c:c1:cb:a9: dd:12:83:ad:84:c2:b2:ae:9d:67:e1:e8:42:63:11: 5f:39:7a:f0:6a:7d:d6:5c:d0:92:9e:b4:99:6b:bb: 2f:b7:95:80:8c:dd:eb:ab:19:da:d1:dc:33:dc:a3: dd:e5:a2:a5:b2:37:46:45:41:75:14:70:71:06:09: 52:52:ef:0c:cc:c7:d6:4e:28:94:be:8d:7b:e5:54: d2:45:20:13:ae:e5:07:3e:bd:55:f5:b6:01:3e:39: 2f:f2:53:4a:37:93:9a:2a:23:25:c7:5c:e0:52:cf: d7:fe:51:6a:a4:ee:ca:94:6e:0c:b6:4d:02:dd:8f: 53:10:b1:4c:c6:2b:87:02:35:98:9b:5c:3f:03:94: 67:ef:37:36:cd:89:40:bc:0c:ad:91:98:2c:dc:18: a9:f8:ac:9c:14:8d:f2:f3:13:b1:7d:02:39:dc:cd: 76:48:3e:88:a4:c9:83:45:71:51:66:40:fe:5b:f4: cc:93:b5:02:3b:40:cc:dc:ca:fe:dd:51:e8:00:aa: ac:5c:6e:45:8f:64:f0:29:bb:80:90:d9:f8:e6:4b: 68:36:d1:ab:ee:38:3e:2a:32:ad:6a:7b:27:87:3f: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:99:FE:54:4B:6B:C0:E9:4A:82:A0:27:7F:E3:46:B1:E7:24:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:47:f3:d2:86:a1:21:65:eb:7c:1e:61:bd:63:72:a3:52:8e: 8b:11:aa:5c:82:1f:9a:bd:53:98:2f:2f:f5:c8:9a:37:3d:53: a8:2a:4e:d2:a8:e0:b9:7e:d8:3e:7e:f7:20:11:0b:24:fb:3a: 76:32:da:1d:9e:75:11:08:da:08:36:03:e5:6e:04:1a:76:c1: 35:b7:7b:de:98:49:1f:76:3c:2e:a2:65:e7:eb:72:c8:10:44: 31:80:c4:c7:5d:bf:50:37:b0:e3:cc:fe:c4:9d:51:90:91:8c: 31:21:f2:2a:58:8f:4f:a5:a8:96:52:41:be:af:47:fa:24:8f: 33:53:de:d4:cd:da:d4:e5:ce:36:7d:5d:ea:f5:13:31:7e:35: f0:c8:45:36:83:c8:b3:44:3d:e3:53:a9:f5:fd:cf:5a:06:c1: b4:96:87:25:cc:bb:15:44:4b:3c:f1:e4:93:c5:30:5a:2e:2f: a5:ae:3a:33:a9:e3:22:26:50:62:44:59:2b:b1:1a:85:58:ed: 92:0b:b1:15:78:95:77:bf:aa:3e:84:70:8e:92:44:5e:83:a2: 5d:91:b5:a2:d1:50:b2:ee:84:4b:c5:2b:05:1f:63:78:13:bb: 98:2a:43:7e:5a:dc:24:0c:d0:60:ad:c6:ff:de:7a:04:cb:79: e3:51:b8:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkKHvxNeqh1CPZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTUwYmU0ZGEtOGY2OS00Y2JlLWI5YTYtZWZhZWYwZTU5YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjLpIrm+j+nRb58kEkgk4JobMcr7WDf9q5zB y6ndEoOthMKyrp1n4ehCYxFfOXrwan3WXNCSnrSZa7svt5WAjN3rqxna0dwz3KPd 5aKlsjdGRUF1FHBxBglSUu8MzMfWTiiUvo175VTSRSATruUHPr1V9bYBPjkv8lNK N5OaKiMlx1zgUs/X/lFqpO7KlG4Mtk0C3Y9TELFMxiuHAjWYm1w/A5Rn7zc2zYlA vAytkZgs3Bip+KycFI3y8xOxfQI53M12SD6IpMmDRXFRZkD+W/TMk7UCO0DM3Mr+ 3VHoAKqsXG5Fj2TwKbuAkNn45ktoNtGr7jg+KjKtansnhz8bVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWNmf5US2vA6UqCoCd/40ax5ySPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTQzNmFjNTItOTFhYS0z YzQxLThlOTItODU4ZGY0ZjE1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZH89KGoSFl63weYb1jcqNSjosRqlyCH5q9U5gvL/XImjc9U6gqTtKo 4Ll+2D5+9yARCyT7OnYy2h2edREI2gg2A+VuBBp2wTW3e96YSR92PC6iZefrcsgQ RDGAxMddv1A3sOPM/sSdUZCRjDEh8ipYj0+lqJZSQb6vR/okjzNT3tTN2tTlzjZ9 Xer1EzF+NfDIRTaDyLNEPeNTqfX9z1oGwbSWhyXMuxVESzzx5JPFMFouL6WuOjOp 4yImUGJEWSuxGoVY7ZILsRV4lXe/qj6EcI6SRF6Dol2RtaLRULLuhEvFKwUfY3gT u5gqQ35a3CQM0GCtxv/eegTLeeNRuE0= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:45 2026 by rpki-client