$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa File: cec7a1a6-72a6-3535-b74e-3962d0df9425.roa (raw, json) Hash identifier: szC5ox5Fzj+RhFKPQo6mfSqp8X32fcF/LnaR/1wb96w= Subject key identifier: D4:94:12:D4:29:C3:86:79:F6:80:1A:79:40:63:E7:30:DB:52:D0:C1 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA790979EA64B2EF89741DE30 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.62.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:97:9e:a6:4b:2e:f8:97:41:de:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6ad5b587-3297-41a2-8802-137cb8bcd926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:b7:08:6a:29:8e:cf:ce:da:50:70:c3:71: 86:8c:60:05:53:07:46:a9:0a:5e:b2:ba:3a:8a:39: a0:95:68:1d:8b:b6:4d:aa:8a:34:df:43:0c:31:b2: 46:c8:12:f7:f4:b9:15:fa:f8:bb:1d:e0:9f:f7:46: 3a:83:5c:a6:23:6b:75:46:50:9a:5d:ac:95:2c:15: 23:40:a4:ef:d0:26:f4:0f:07:42:32:83:6e:f9:57: 1b:46:92:fe:e5:45:37:3f:d0:23:a2:77:22:36:5a: d5:b8:f3:8e:19:ac:6e:bc:ee:c9:8f:70:26:cf:35: 3c:01:9c:5d:f5:52:50:e7:7f:07:7a:6f:7c:e5:3d: f3:1b:6d:73:fd:cd:41:d6:3c:de:f2:4d:86:8d:e8: 09:3a:4f:0e:9d:b8:cf:7b:e6:26:50:db:7a:12:4e: df:10:31:88:33:6b:4b:54:72:29:86:c2:36:f1:7a: c4:20:89:69:1f:f3:2c:1b:02:71:be:a4:d2:52:cb: 16:c0:89:56:a1:a6:ed:3f:36:9c:fe:31:ed:ad:bc: 33:27:eb:3d:92:05:c3:55:00:1d:ad:af:62:ba:46: 50:d8:45:4b:24:8e:21:2f:a0:1e:83:a5:d8:6c:c6: 6e:43:1b:ae:4e:9f:d0:43:22:89:6d:9b:f6:56:90: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:12:D4:29:C3:86:79:F6:80:1A:79:40:63:E7:30:DB:52:D0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ee:af:86:7b:93:dc:de:4e:57:01:46:2c:84:0e:81:a7:ea: 4f:7a:19:c8:9a:1a:71:3a:a5:1d:e8:06:e9:98:77:76:5d:82: 33:d9:4d:7c:84:18:b8:65:88:ab:4f:61:44:a5:cc:2a:fb:9a: f5:b5:42:18:4b:0a:ca:5f:b2:03:67:38:75:2d:98:1a:27:1a: 95:64:ba:34:31:16:90:73:22:af:2a:df:a2:82:bd:ca:95:66: 44:ce:25:32:0e:35:fa:6e:e0:95:6b:94:0c:51:33:1e:d0:aa: 7e:f1:3a:b7:b1:f7:9c:2d:a8:e0:90:d6:93:5a:90:12:ed:07: 2f:26:bf:e6:24:be:4a:37:1b:41:f2:bb:3b:10:0c:8d:31:85: 9e:18:97:71:0d:9a:c2:5a:21:9a:f2:c1:e8:87:47:2c:fd:8e: 46:a6:f1:5f:24:64:8c:43:37:5b:65:fb:31:2c:ab:23:04:67: d5:18:52:c3:79:47:16:c9:31:bf:9a:a4:82:4f:40:94:7c:b2: 07:82:fa:b2:87:74:de:19:dc:11:1e:ea:46:92:57:bb:ed:c2: 7d:ec:76:cc:e5:79:d6:55:98:8d:61:73:1c:e0:b5:8a:2a:ff: bc:79:d4:ff:fe:da:38:dd:79:0e:b3:77:12:fe:42:3d:5f:b4: ba:ac:11:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkJeepksu+JdB3jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmFkNWI1ODctMzI5Ny00MWEyLTg4MDItMTM3Y2I4YmNkOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriu3CGopjs/O2lBww3GGjGAFUwdGqQpesro6 ijmglWgdi7ZNqoo030MMMbJGyBL39LkV+vi7HeCf90Y6g1ymI2t1RlCaXayVLBUj QKTv0Cb0DwdCMoNu+VcbRpL+5UU3P9AjonciNlrVuPOOGaxuvO7Jj3AmzzU8AZxd 9VJQ538Hem985T3zG21z/c1B1jze8k2GjegJOk8OnbjPe+YmUNt6Ek7fEDGIM2tL VHIphsI28XrEIIlpH/MsGwJxvqTSUssWwIlWoabtPzac/jHtrbwzJ+s9kgXDVQAd ra9iukZQ2EVLJI4hL6Aeg6XYbMZuQxuuTp/QQyKJbZv2VpAbrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSUEtQpw4Z59oAaeUBj5zDbUtDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjN2ExYTYtNzJhNi0z NTM1LWI3NGUtMzk2MmQwZGY5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbur4Z7k9zeTlcBRiyEDoGn6k96GciaGnE6pR3oBumYd3ZdgjPZTXyE GLhliKtPYUSlzCr7mvW1QhhLCspfsgNnOHUtmBonGpVkujQxFpBzIq8q36KCvcqV ZkTOJTIONfpu4JVrlAxRMx7Qqn7xOrex95wtqOCQ1pNakBLtBy8mv+Ykvko3G0Hy uzsQDI0xhZ4Yl3ENmsJaIZryweiHRyz9jkam8V8kZIxDN1tl+zEsqyMEZ9UYUsN5 RxbJMb+apIJPQJR8sgeC+rKHdN4Z3BEe6kaSV7vtwn3sdszledZVmI1hcxzgtYoq /7x51P/+2jjdeQ6zdxL+Qj1ftLqsEZc= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:46 2026 by rpki-client