$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa File: f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa (raw, json) Hash identifier: rYSNnOf9J2CgTK/04zRiP9vmWNQIvOdqVsnMv9DdrnU= Subject key identifier: 45:33:5D:BA:92:ED:26:71:99:61:C8:F7:B9:6F:8D:86:58:C2:DB:6B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7911D3CB692C8F6BFEAD700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.52.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:1d:3c:b6:92:c8:f6:bf:ea:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6680b090-8754-4b96-b0e2-a07906bafe29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:47:5a:63:59:e6:80:1f:c8:a1:79:b5:95: 12:ff:12:2f:a1:f6:fd:c1:ab:a3:fc:61:2d:39:12: 77:4b:8a:e4:e6:57:fe:a5:56:e0:16:fd:a5:1c:14: 00:f1:43:fc:61:f4:c9:b7:eb:78:4b:31:33:ad:99: ca:f3:8b:15:68:30:1e:e5:b5:16:4e:54:1d:db:65: 84:9f:5d:8b:8e:d6:5b:c9:07:cb:c2:85:f2:f7:9a: 05:d5:d6:1f:79:c7:c2:8d:03:08:9c:b6:16:17:ce: 24:0e:e6:c3:29:21:a1:c2:21:7e:c3:78:7c:d7:6e: 45:56:18:96:63:ef:6d:8b:ad:f1:d8:e8:5a:76:77: 9b:85:e8:d5:41:32:80:93:fa:b5:65:56:2d:6e:a7: 20:76:b5:b6:3b:77:2b:5c:7d:c2:9d:55:b7:89:98: 7b:25:d8:c7:ce:4d:a5:37:85:56:3e:c4:3c:f7:5f: 0e:46:99:49:9b:3d:da:90:60:61:2c:77:c0:17:8a: 58:5d:74:85:fd:a4:5f:5a:d2:6d:35:c8:62:05:86: 0e:2d:c1:34:d8:8a:49:76:a1:46:28:e6:b2:30:b2: 9d:02:ac:28:49:8c:17:df:f8:54:f4:6f:4f:75:d6: b1:75:0c:3f:d6:d1:0c:2e:25:7a:a7:3b:31:94:7c: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:33:5D:BA:92:ED:26:71:99:61:C8:F7:B9:6F:8D:86:58:C2:DB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:07:f1:0e:64:5f:61:17:ac:a3:fc:17:7a:c0:bf:82:ab:47: 25:89:a4:91:92:89:53:c6:c7:91:9b:b4:da:1c:7e:01:e1:6c: 8f:e2:db:55:27:8e:fd:9a:17:a7:4c:92:a8:fe:3a:ec:a5:95: 10:9d:b5:05:65:63:0a:41:f6:a2:4c:e9:3a:a0:3c:5b:57:f0: 52:75:9b:7c:c9:a6:a7:7d:ab:7e:c1:0e:b1:37:42:c0:48:39: d2:a6:38:c1:46:dd:d1:eb:da:45:ff:37:72:8e:fb:96:c6:48: 71:d1:0e:15:09:4d:e6:5e:80:9c:c3:64:5e:9d:89:81:50:f6: 11:93:1b:a8:ee:a1:3b:76:ac:a4:17:76:a1:22:c6:f1:5b:ba: 0a:2a:63:d1:e6:a7:da:94:c7:c6:9e:53:c1:66:72:3e:f8:a8: e9:80:ef:fe:de:bb:8b:1d:79:1b:43:0c:80:9c:96:5a:29:6e: 1d:8c:36:18:68:e0:04:10:10:e1:2d:36:72:6e:b8:df:19:5e: b0:9f:44:a7:7f:97:0d:8d:83:69:8a:93:36:2b:4a:72:75:fb: 7c:a1:36:1b:92:3a:45:d8:98:b4:72:6e:f3:de:08:d8:cb:8e: 85:c1:6b:f6:f4:fd:1f:a8:19:58:95:71:e8:f5:0e:4e:b7:7b: 86:bf:b3:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkR08tpLI9r/q1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjY4MGIwOTAtODc1NC00Yjk2LWIwZTItYTA3OTA2YmFmZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif9HWmNZ5oAfyKF5tZUS/xIvofb9wauj/GEt ORJ3S4rk5lf+pVbgFv2lHBQA8UP8YfTJt+t4SzEzrZnK84sVaDAe5bUWTlQd22WE n12LjtZbyQfLwoXy95oF1dYfecfCjQMInLYWF84kDubDKSGhwiF+w3h8125FVhiW Y+9ti63x2OhadnebhejVQTKAk/q1ZVYtbqcgdrW2O3crXH3CnVW3iZh7JdjHzk2l N4VWPsQ8918ORplJmz3akGBhLHfAF4pYXXSF/aRfWtJtNchiBYYOLcE02IpJdqFG KOayMLKdAqwoSYwX3/hU9G9PddaxdQw/1tEMLiV6pzsxlHxH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUzXbqS7SZxmWHI97lvjYZYwttrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjM5NGQ4YmYtYzZjNy0z ZTZkLWEyMzQtNWExYjBhMjU4ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMH8Q5kX2EXrKP8F3rAv4KrRyWJpJGSiVPGx5GbtNocfgHhbI/i21Un jv2aF6dMkqj+OuyllRCdtQVlYwpB9qJM6TqgPFtX8FJ1m3zJpqd9q37BDrE3QsBI OdKmOMFG3dHr2kX/N3KO+5bGSHHRDhUJTeZegJzDZF6diYFQ9hGTG6juoTt2rKQX dqEixvFbugoqY9Hmp9qUx8aeU8Fmcj74qOmA7/7eu4sdeRtDDICcllopbh2MNhho 4AQQEOEtNnJuuN8ZXrCfRKd/lw2Ng2mKkzYrSnJ1+3yhNhuSOkXYmLRybvPeCNjL joXBa/b0/R+oGViVcej1Dk63e4a/s+o= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:33 2026 by rpki-client