$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a661fb2f-f710-3e83-bb07-8814a903af84.roa File: a661fb2f-f710-3e83-bb07-8814a903af84.roa (raw, json) Hash identifier: nGeoeyBYJ7f0YrI4xmFwUNcv/Zf0Cq9FS3jOClOKJUc= Subject key identifier: BC:29:1D:1C:1B:C3:A0:D4:CB:07:33:4C:B5:41:72:71:45:89:A3:2E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D5243C7E074EFAE3DE95A3B40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a661fb2f-f710-3e83-bb07-8814a903af84.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16591 IP address blocks: 136.39.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c7:e0:74:ef:ae:3d:e9:5a:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=7f5ba68c-c17a-4c52-b65b-e2ef6059ce4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:5f:f1:6a:b6:b8:16:5e:af:ab:55:d2:f0: d4:99:96:a7:cd:c6:47:c6:a7:70:6e:3d:c3:0d:3a: 2f:c4:17:f3:6e:cd:ec:ad:69:b1:41:af:b3:70:e6: c4:0e:5a:a7:c5:9f:e5:26:f9:94:cd:eb:07:c6:5c: 46:89:a1:03:58:81:27:97:96:7e:ac:e4:af:c0:4a: 4a:9d:10:1a:90:f4:47:13:fe:d1:7a:9f:2c:17:2d: 85:9a:fe:94:9a:4c:aa:11:2c:71:c3:39:37:e2:7b: c5:d6:ea:71:2d:b4:0f:ab:57:a0:cb:dd:1d:f7:d5: 6e:b3:3e:42:f6:2d:bd:76:b2:3d:71:fd:bd:d4:4b: e5:95:15:ed:0d:a0:2b:48:c5:93:86:49:ae:8e:9d: 89:e5:a6:fb:6f:8a:72:db:ab:1f:cf:c8:38:b8:dc: 23:7b:ae:dd:cb:4d:bf:1b:0e:f8:67:d6:29:48:b6: 10:aa:b8:64:db:4c:10:a6:90:06:32:88:89:be:c4: ee:1f:24:e1:e0:84:f6:25:cc:1b:8c:d8:2a:65:ea: 25:a6:3e:d7:7c:a6:37:82:d2:a0:cd:d6:bc:df:a0: 5f:fa:90:31:26:dd:38:69:fa:53:7a:c4:17:df:b3: be:8e:10:6d:76:0c:79:27:af:fe:b5:75:d8:e2:f3: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:1D:1C:1B:C3:A0:D4:CB:07:33:4C:B5:41:72:71:45:89:A3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a661fb2f-f710-3e83-bb07-8814a903af84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.39.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2c:f5:b3:8b:83:49:b5:4e:7f:09:1c:dd:16:12:ba:75:c8: bd:35:5f:cb:35:71:cd:d3:20:01:f8:d6:be:86:4f:8d:cb:7e: 81:c9:7b:3d:25:0c:43:0e:8d:a5:89:c0:a3:a6:2a:be:71:bc: e7:0f:13:b8:10:10:02:28:89:7b:98:17:eb:ab:5a:c8:60:9c: 0f:bd:05:9b:18:8b:97:40:9b:db:fe:0a:33:aa:2d:41:6a:c3: d7:38:73:52:70:17:ac:c8:d5:d9:13:07:c3:46:2d:c6:f7:ca: ac:c3:75:58:09:db:8f:ff:57:07:49:7a:11:9a:0b:33:ff:51: 1d:c6:10:53:bc:6a:63:15:b3:f0:b6:cd:d8:cb:c6:87:7b:88: 93:8f:63:58:70:f9:33:d7:f0:8c:14:4d:92:b5:c5:89:18:af: 2c:65:b5:7c:7f:e1:3f:8a:00:41:18:c0:ef:1c:5a:ea:12:1c: 6b:39:2d:87:03:5e:31:78:c8:98:0b:d0:d2:b6:1a:00:17:e4: 34:98:57:e4:e4:7e:10:6e:06:21:f2:55:02:41:dc:87:b4:ac: 64:d4:a0:6d:ce:8d:c0:d0:09:85:75:a0:02:ac:41:1c:f2:62: f3:0d:d5:25:8e:6c:9e:90:dc:e0:46:29:d8:1f:4b:98:d5:8c: 0b:c9:06:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8fgdO+uPelaO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk N2Y1YmE2OGMtYzE3YS00YzUyLWI2NWItZTJlZjYwNTljZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsFf8Wq2uBZer6tV0vDUmZanzcZHxqdwbj3D DTovxBfzbs3srWmxQa+zcObEDlqnxZ/lJvmUzesHxlxGiaEDWIEnl5Z+rOSvwEpK nRAakPRHE/7Rep8sFy2Fmv6UmkyqESxxwzk34nvF1upxLbQPq1egy90d99Vusz5C 9i29drI9cf291EvllRXtDaArSMWThkmujp2J5ab7b4py26sfz8g4uNwje67dy02/ Gw74Z9YpSLYQqrhk20wQppAGMoiJvsTuHyTh4IT2JcwbjNgqZeolpj7XfKY3gtKg zda836Bf+pAxJt04afpTesQX37O+jhBtdgx5J6/+tXXY4vOe2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwpHRwbw6DUywczTLVBcnFFiaMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTY2MWZiMmYtZjcxMC0z ZTgzLWJiMDctODgxNGE5MDNhZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYs9bOLg0m1Tn8JHN0WErp1yL01X8s1cc3TIAH41r6GT43LfoHJez0l DEMOjaWJwKOmKr5xvOcPE7gQEAIoiXuYF+urWshgnA+9BZsYi5dAm9v+CjOqLUFq w9c4c1JwF6zI1dkTB8NGLcb3yqzDdVgJ24//VwdJehGaCzP/UR3GEFO8amMVs/C2 zdjLxod7iJOPY1hw+TPX8IwUTZK1xYkYryxltXx/4T+KAEEYwO8cWuoSHGs5LYcD XjF4yJgL0NK2GgAX5DSYV+TkfhBuBiHyVQJB3Ie0rGTUoG3OjcDQCYV1oAKsQRzy YvMN1SWObJ6Q3OBGKdgfS5jVjAvJBq0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:31 2026 by rpki-client