$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa File: f8c8223c-bd4f-350e-af6b-a0e241edab57.roa (raw, json) Hash identifier: jVuQPA8NUhH4iat6CD6n+5cuVgSeo6vbL7AOmrCloPU= Subject key identifier: C4:1A:3B:07:22:BF:88:0E:E2:FE:B8:AB:A7:B2:E0:91:FD:CC:76:73 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584EA7913C1F46B6780D11F7DA80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16591 IP address blocks: 136.50.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:3c:1f:46:b6:78:0d:11:f7:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4b9409c0-de71-45b5-a940-b071a8bc02a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:d0:65:43:77:5d:d6:94:4f:d9:d3:cc:92: 6f:a1:1c:69:d4:f3:1d:3c:02:6e:68:d4:aa:97:fb: c9:4b:c9:98:35:a0:b0:1a:f4:a6:15:01:fc:2b:de: 8b:be:0f:f5:70:d5:db:e1:eb:2d:aa:35:e0:3a:15: e2:75:9a:13:d4:57:b6:3d:d0:b7:b7:8a:ba:db:1d: bf:d1:7c:95:82:44:c1:05:23:c8:48:61:d7:5a:ab: 7a:3d:70:d9:1f:d7:08:67:53:f5:d4:bc:fc:6e:49: 40:d6:4c:a7:a7:ac:63:bd:e1:8b:84:69:72:d3:19: 9d:c3:2a:28:94:2b:07:be:31:59:b7:ab:a1:6c:7a: 99:54:db:33:30:da:03:90:ce:0b:83:e4:fb:68:75: 57:75:c8:7c:91:bf:63:77:19:e8:ba:50:fd:32:c5: 39:50:0d:15:3e:f6:ef:e6:36:af:2c:2f:18:d7:2d: 5b:09:79:12:62:42:14:da:96:63:6f:be:a3:02:67: f6:09:8f:41:18:9d:d2:02:30:88:06:ca:a6:34:da: 15:42:05:b3:0d:94:22:85:be:f9:ec:63:88:12:fc: b0:0d:4d:02:f3:d1:dd:81:1d:b3:b2:e3:5d:55:78: ea:d5:8b:3f:f1:06:14:a1:aa:54:ba:f0:2d:88:12: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:3B:07:22:BF:88:0E:E2:FE:B8:AB:A7:B2:E0:91:FD:CC:76:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0d:3c:15:69:89:c9:18:27:9f:d1:20:98:1a:18:92:94:cb: fd:3e:78:fa:99:92:7f:d1:af:c4:0b:08:42:89:aa:49:f9:a5: 19:1b:d6:04:3f:cd:c3:dd:0f:a6:85:d5:9b:6a:e9:2d:45:cc: 29:45:f4:8b:e8:55:e1:28:eb:48:dd:22:15:30:3c:fe:49:bf: f3:6f:8c:22:dc:85:9f:25:b3:80:61:9f:63:2b:64:5f:bf:02: 1e:db:37:1c:ec:a0:75:5b:43:0d:7c:c3:38:a0:73:df:90:35: 2c:dd:74:79:bd:be:c2:0e:b9:c9:87:15:e7:88:19:34:4a:76: a6:54:50:77:6a:15:c1:3b:2f:fb:af:cd:da:44:92:9d:45:d3: c8:b7:1e:a0:d7:61:6c:a1:61:8a:8f:af:6f:ed:7d:ed:79:8d: ac:83:62:53:e4:5e:a2:5a:e4:4d:40:5a:c5:d3:6b:5e:b9:28: 19:41:90:65:c0:0f:1a:f7:36:91:2d:b2:00:9a:7a:f3:8c:93: fa:38:31:63:7e:c4:3b:0e:5c:d1:2f:fe:71:ce:26:8a:cc:35: 53:9f:3c:17:70:ff:4c:8a:ca:fe:c4:36:87:1a:56:61:7c:28: e9:f6:7b:f5:99:0c:0b:f2:e4:c9:98:64:4c:45:cb:5d:7f:0b: bd:e7:4f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkTwfRrZ4DRH32oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGI5NDA5YzAtZGU3MS00NWI1LWE5NDAtYjA3MWE4YmMwMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk63QZUN3XdaUT9nTzJJvoRxp1PMdPAJuaNSq l/vJS8mYNaCwGvSmFQH8K96Lvg/1cNXb4estqjXgOhXidZoT1Fe2PdC3t4q62x2/ 0XyVgkTBBSPISGHXWqt6PXDZH9cIZ1P11Lz8bklA1kynp6xjveGLhGly0xmdwyoo lCsHvjFZt6uhbHqZVNszMNoDkM4Lg+T7aHVXdch8kb9jdxnoulD9MsU5UA0VPvbv 5javLC8Y1y1bCXkSYkIU2pZjb76jAmf2CY9BGJ3SAjCIBsqmNNoVQgWzDZQihb75 7GOIEvywDU0C89HdgR2zsuNdVXjq1Ys/8QYUoapUuvAtiBJ+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQaOwciv4gO4v64q6ey4JH9zHZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjhjODIyM2MtYmQ0Zi0z NTBlLWFmNmItYTBlMjQxZWRhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYNPBVpickYJ5/RIJgaGJKUy/0+ePqZkn/Rr8QLCEKJqkn5pRkb1gQ/ zcPdD6aF1Ztq6S1FzClF9IvoVeEo60jdIhUwPP5Jv/NvjCLchZ8ls4Bhn2MrZF+/ Ah7bNxzsoHVbQw18wzigc9+QNSzddHm9vsIOucmHFeeIGTRKdqZUUHdqFcE7L/uv zdpEkp1F08i3HqDXYWyhYYqPr2/tfe15jayDYlPkXqJa5E1AWsXTa165KBlBkGXA Dxr3NpEtsgCaevOMk/o4MWN+xDsOXNEv/nHOJorMNVOfPBdw/0yKyv7ENocaVmF8 KOn2e/WZDAvy5MmYZExFy11/C73nT0M= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:00 2026 by rpki-client