$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa File: eab971f4-114c-3798-a9f4-6c0ad419f866.roa (raw, json) Hash identifier: NCSVSUhVDLhykTr9icUkfq+FrN8HC2aTv9evvIseuN8= Subject key identifier: 09:CD:57:96:6E:30:67:05:59:AD:00:C7:84:94:0C:10:6F:C3:C3:CE Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7911EE1F21B9AC70B9FCF80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.61.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:1e:e1:f2:1b:9a:c7:0b:9f:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a0ae0764-fa28-4b22-994c-9bb39c1e7cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:53:c2:ab:8e:da:25:53:68:4b:92:2a:dc: dd:00:cf:9f:81:27:d8:29:98:34:d3:e1:1c:b7:26: 47:cb:bf:ac:9c:3a:e5:4e:37:ef:68:db:24:92:b6: c2:b3:ea:32:d9:64:6d:d3:d2:4d:be:fd:47:aa:7a: 10:f5:24:ff:f8:bc:d8:f9:c5:74:47:f3:ba:66:21: 41:8c:9e:77:4f:b0:81:f8:8a:0d:c7:c0:bf:eb:56: dd:8d:b4:f6:c3:90:45:f7:36:9c:1a:76:4c:37:8b: 63:ef:54:cb:c2:4b:9b:1f:7d:9c:09:54:ab:e7:7e: e2:6f:30:80:16:e1:ec:8e:15:d2:43:0a:90:74:b6: 16:eb:ad:de:4a:44:06:b4:e9:43:b4:53:ed:e8:95: 56:4f:08:02:2e:34:6e:b2:82:69:78:ae:01:98:cf: eb:68:da:ff:31:a9:5c:0b:9f:96:44:3f:c3:f8:82: da:2d:09:3f:88:88:5a:0e:b4:78:ac:c4:64:e3:b8: b6:32:7d:f8:fa:1b:fa:25:f4:74:44:c5:c5:ec:84: 0b:34:57:11:78:8f:d0:69:10:ca:a2:b5:c9:61:0f: 06:6f:95:ea:41:5e:da:2b:27:fe:00:de:06:37:94: 41:4c:bb:47:59:5b:ef:33:d1:cc:d8:50:a4:67:4d: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:57:96:6E:30:67:05:59:AD:00:C7:84:94:0C:10:6F:C3:C3:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:27:5b:36:9f:95:97:3a:c7:d9:4f:6e:a5:c2:aa:ba:b0:f0: 12:b1:cc:f3:c3:53:36:f4:80:66:a2:3f:b2:80:27:ba:c2:db: ab:c3:7f:16:ab:bc:07:2a:9e:10:08:7c:ff:c7:72:00:8f:f6: f2:e4:62:27:d1:5b:ff:fa:ea:da:2f:4b:91:2e:69:bc:6e:3d: 52:53:9f:21:0b:e9:da:de:9f:3c:4c:96:2e:b8:bd:b8:18:6f: f2:1c:bc:83:f3:cf:8e:33:6b:67:47:7c:6f:5a:48:d0:8b:3c: f2:70:f3:18:c4:4e:e3:cf:0f:4b:6b:1a:32:80:d8:bf:7d:d7: 34:6a:4e:c7:76:5d:88:e6:3e:27:72:52:fa:00:ab:c0:42:4d: 1a:b7:1a:7a:b1:34:d9:eb:be:e0:a6:d4:6d:9b:36:ce:74:7b: e8:d1:1a:f9:f7:a4:c0:7e:b1:76:3b:67:14:4f:fa:34:07:ee: 49:b1:e6:98:4b:4d:30:a1:12:f1:f3:ae:8d:0a:76:97:22:ff: d6:2e:1a:52:20:b8:d0:b4:ef:ea:19:04:3a:f7:04:e7:1d:33: 63:cd:a8:36:db:fd:2f:6f:40:b5:4b:4a:e7:d5:e6:40:6c:e5: 3e:c5:d6:df:c5:dc:2d:59:37:d2:d0:ae:44:42:48:86:f4:a4: d0:10:91:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkR7h8huaxwufz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTBhZTA3NjQtZmEyOC00YjIyLTk5NGMtOWJiMzljMWU3Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5TwquO2iVTaEuSKtzdAM+fgSfYKZg00+Ec tyZHy7+snDrlTjfvaNskkrbCs+oy2WRt09JNvv1HqnoQ9ST/+LzY+cV0R/O6ZiFB jJ53T7CB+IoNx8C/61bdjbT2w5BF9zacGnZMN4tj71TLwkubH32cCVSr537ibzCA FuHsjhXSQwqQdLYW663eSkQGtOlDtFPt6JVWTwgCLjRusoJpeK4BmM/raNr/Malc C5+WRD/D+ILaLQk/iIhaDrR4rMRk47i2Mn34+hv6JfR0RMXF7IQLNFcReI/QaRDK orXJYQ8Gb5XqQV7aKyf+AN4GN5RBTLtHWVvvM9HM2FCkZ03YnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnNV5ZuMGcFWa0Ax4SUDBBvw8POMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWFiOTcxZjQtMTE0Yy0z Nzk4LWE5ZjQtNmMwYWQ0MTlmODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8nWzaflZc6x9lPbqXCqrqw8BKxzPPDUzb0gGaiP7KAJ7rC26vDfxar vAcqnhAIfP/HcgCP9vLkYifRW//66tovS5EuabxuPVJTnyEL6drenzxMli64vbgY b/IcvIPzz44za2dHfG9aSNCLPPJw8xjETuPPD0trGjKA2L991zRqTsd2XYjmPidy UvoAq8BCTRq3GnqxNNnrvuCm1G2bNs50e+jRGvn3pMB+sXY7ZxRP+jQH7kmx5phL TTChEvHzro0Kdpci/9YuGlIguNC07+oZBDr3BOcdM2PNqDbb/S9vQLVLSufV5kBs 5T7F1t/F3C1ZN9LQrkRCSIb0pNAQkeA= -----END CERTIFICATE-----Generated at Thu Jul 30 00:34:05 2026 by rpki-client