$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa File: d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa (raw, json) Hash identifier: r/q7XbQnDlwFhr3gIzfzKA6KTdDJQMx1QdauU8X2THQ= Subject key identifier: E0:68:F0:62:4F:23:B3:D2:D6:D0:86:0B:5B:DD:E3:E8:7A:92:EF:52 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA79097B45CB37E8495E68100 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.53.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:97:b4:5c:b3:7e:84:95:e6:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e30b46f2-a679-4a7f-9802-69a5b8b73c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:a9:f3:e9:32:4a:c5:09:2a:be:5c:95:f9: 87:f4:83:d9:dd:59:5c:46:23:ba:11:c3:1c:8e:91: 78:85:ca:02:a0:14:d6:34:09:f6:b9:49:ea:aa:98: 61:22:82:0f:80:16:6f:08:97:05:01:46:f1:a8:82: 4b:ef:20:91:c8:dc:7a:9f:91:6b:0a:bc:e3:93:f9: 2f:f5:98:1e:43:1a:91:47:17:51:af:42:e1:19:29: 10:f0:f6:98:b9:fb:1d:ba:0b:e7:09:d3:97:d2:76: e4:e1:ca:8b:02:3c:4b:6d:c8:f6:90:ba:ea:a4:b3: 2b:6a:20:03:a3:dc:8e:ca:5a:24:7a:f1:66:67:52: c8:a3:19:43:2b:b2:31:6e:fc:50:6d:5a:ee:65:54: ca:f2:95:bb:35:b6:c9:9d:0f:71:2a:01:07:25:17: 73:26:9b:4d:9a:bd:e4:ca:ff:8d:94:13:a7:ba:c2: b9:a9:d7:d2:81:15:ad:65:4b:ca:ff:bc:05:11:e2: 22:43:28:8b:ad:4d:d3:1d:ae:11:c3:f1:58:ea:4c: c2:59:1f:8b:ed:bc:93:82:bb:45:2d:8d:80:7e:c2: 7f:74:47:64:41:83:bd:92:b3:e6:61:1d:6a:73:f9: 54:14:b8:aa:24:b6:58:61:ca:84:e9:bc:3b:0d:f2: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:F0:62:4F:23:B3:D2:D6:D0:86:0B:5B:DD:E3:E8:7A:92:EF:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9c:3f:0d:af:06:68:35:8f:37:e1:ec:0b:2f:af:ba:63:05: 2a:24:a6:d8:f3:6d:0b:64:36:c7:67:93:41:44:54:95:d9:ec: fc:c7:94:ad:f5:37:69:54:c4:c5:f8:ea:68:8c:df:f6:00:0f: 3f:11:3f:a1:fe:be:64:5e:ec:21:25:e8:ec:c0:79:39:c3:20: 2c:b5:98:b4:07:bf:4a:1d:b3:87:65:65:f9:d9:a1:c2:a7:56: 30:32:ff:bf:0c:26:14:1a:f9:cb:6d:13:fc:a3:55:69:9d:17: 83:33:78:28:e9:6c:dd:a7:3a:c8:98:c4:6d:d5:36:25:3b:03: 02:a8:c5:0f:31:33:1f:80:ca:9b:f3:3f:6a:5e:53:76:77:46: 52:73:9f:56:24:3e:f1:43:42:39:fd:ed:fe:65:a3:ca:d2:fe: f2:f1:e5:fe:8c:ef:6d:0b:c8:b7:8e:44:24:20:04:bd:52:f0: eb:75:bc:8c:82:6a:e6:c9:a8:9e:0e:96:bd:ce:22:31:84:28: 5b:06:68:29:2b:64:63:4e:66:9b:b6:10:af:18:be:b9:27:b5: 19:ad:d5:b3:ff:e5:20:28:1b:5d:01:02:f1:3f:59:ab:bf:9c: 14:84:e9:d7:9d:56:c3:f4:5f:f7:10:f8:a3:0b:db:dd:bb:01: 1e:34:be:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkJe0XLN+hJXmgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTMwYjQ2ZjItYTY3OS00YTdmLTk4MDItNjlhNWI4YjczYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLep8+kySsUJKr5clfmH9IPZ3VlcRiO6EcMc jpF4hcoCoBTWNAn2uUnqqphhIoIPgBZvCJcFAUbxqIJL7yCRyNx6n5FrCrzjk/kv 9ZgeQxqRRxdRr0LhGSkQ8PaYufsdugvnCdOX0nbk4cqLAjxLbcj2kLrqpLMraiAD o9yOylokevFmZ1LIoxlDK7IxbvxQbVruZVTK8pW7NbbJnQ9xKgEHJRdzJptNmr3k yv+NlBOnusK5qdfSgRWtZUvK/7wFEeIiQyiLrU3THa4Rw/FY6kzCWR+L7byTgrtF LY2AfsJ/dEdkQYO9krPmYR1qc/lUFLiqJLZYYcqE6bw7DfItJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBo8GJPI7PS1tCGC1vd4+h6ku9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDczNGE4YWEtZDkwMC0z OWNkLTgyMzctNThhYzBkMjhlM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOcPw2vBmg1jzfh7Asvr7pjBSokptjzbQtkNsdnk0FEVJXZ7PzHlK31 N2lUxMX46miM3/YADz8RP6H+vmRe7CEl6OzAeTnDICy1mLQHv0ods4dlZfnZocKn VjAy/78MJhQa+cttE/yjVWmdF4MzeCjpbN2nOsiYxG3VNiU7AwKoxQ8xMx+Aypvz P2peU3Z3RlJzn1YkPvFDQjn97f5lo8rS/vLx5f6M720LyLeORCQgBL1S8Ot1vIyC aubJqJ4Olr3OIjGEKFsGaCkrZGNOZpu2EK8YvrkntRmt1bP/5SAoG10BAvE/Wau/ nBSE6dedVsP0X/cQ+KML2927AR40voE= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:46 2026 by rpki-client