$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/a9137e1e-edee-3a46-973f-b0e109ea4bf3.roa File: a9137e1e-edee-3a46-973f-b0e109ea4bf3.roa (raw, json) Hash identifier: 4cIeQ5yFdGeA6D5oDIPoMesS86pplh5sXaSwpXol7gM= Subject key identifier: 5B:AD:28:56:92:D6:9C:C8:84:64:CC:99:E6:1A:1F:61:7E:A1:73:61 Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584E82C232A5CAC7758568A6D600 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/a9137e1e-edee-3a46-973f-b0e109ea4bf3.roa Signing time: Wed 15 Jul 2026 20:54:53 +0000 ROA not before: Wed 15 Jul 2026 20:54:53 +0000 ROA not after: Tue 13 Oct 2026 20:54:53 +0000 asID: 7352 IP address blocks: 198.54.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:c2:32:a5:ca:c7:75:85:68:a6:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Jul 15 20:54:53 2026 GMT Not After : Oct 13 20:54:53 2026 GMT Subject: CN=a1f8195b-c756-452d-9bf8-c994e78d21a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:f0:ba:f1:a5:b6:27:2e:0d:61:41:7a:e4: 9e:90:66:a2:d3:ee:7a:96:a0:66:73:e3:f7:4f:eb: 8c:86:9f:2b:7e:02:b6:2d:da:0e:9c:32:5b:17:7f: d2:9a:a0:10:52:0d:64:ae:cb:ed:3c:5a:24:9f:73: af:8c:3a:e4:f0:85:41:64:cc:c8:43:00:c8:8b:47: ce:4e:07:07:37:ff:85:16:ef:d8:a4:98:e5:58:23: 9c:7b:dd:6a:7b:56:0f:d6:14:ee:51:d6:c4:b1:e0: 9e:e4:1b:cb:c5:a7:88:a6:bc:96:22:9c:16:14:ab: ea:88:45:56:81:47:95:05:e2:ce:55:b4:c2:89:21: c5:ae:44:75:73:4b:eb:fa:03:86:98:29:87:2f:02: 64:e6:18:a6:19:60:73:a6:98:a1:23:81:73:94:3b: f7:f8:3c:db:12:e0:7c:81:3b:62:ba:bb:f4:56:27: c9:78:31:50:4f:5c:d0:1d:db:66:b0:82:d2:03:7d: be:10:a3:4a:2b:ef:4e:58:49:a8:4a:57:bf:6e:d6: db:3f:d1:e3:75:01:71:21:3b:cd:1f:a4:f5:cd:9e: 1d:ba:9a:82:04:62:45:ff:60:7a:d3:a0:89:48:8b: 84:cb:44:d6:88:d9:e2:ab:32:c7:5c:01:90:28:4c: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AD:28:56:92:D6:9C:C8:84:64:CC:99:E6:1A:1F:61:7E:A1:73:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/a9137e1e-edee-3a46-973f-b0e109ea4bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv4: 198.54.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f5:7e:00:c8:1c:34:1f:c0:8e:d7:3e:e7:26:4b:89:46:2b: 05:6b:54:69:2b:a4:49:12:ac:74:c6:b3:f5:10:32:f1:ac:3e: f3:69:3e:7e:10:ad:13:12:b4:5a:84:d0:f6:03:d8:a8:3f:18: 2f:95:80:e4:64:05:c3:8d:67:51:2d:c8:a1:64:13:70:4b:79: 72:b9:36:2d:51:d4:95:39:c3:b6:cd:ee:c4:56:47:f4:3d:21: 34:7d:db:1b:df:33:a3:ab:a4:dc:86:35:b7:cb:b8:03:91:17: 3a:95:52:fa:23:b7:70:41:0c:d4:65:12:50:b9:6a:d8:b2:95: 19:40:5f:c4:eb:0c:73:ed:3b:a6:4b:85:93:d7:68:c3:37:75: fc:d0:e8:a8:19:ac:ce:83:c3:e3:73:79:0c:d8:53:44:f3:58: 74:60:8c:e4:19:d0:56:56:7c:bd:4e:46:ab:33:c6:81:74:66: b3:c4:fd:d5:9f:99:65:4f:c4:2a:cf:c2:f2:17:af:ef:ce:83: 7c:e0:71:bb:33:63:43:af:3b:2e:8d:13:be:96:24:a2:d9:55: de:20:e1:71:01:08:f7:44:b6:03:cd:2e:bd:d1:1a:f7:de:0e: 48:81:16:85:f8:e4:b2:3a:b4:22:d6:d3:60:8f:05:bc:15:45: e4:58:ae:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CwjKlysd1hWim1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDcxNTIwNTQ1M1oXDTI2MTAxMzIwNTQ1M1owLzEtMCsGA1UEAxMk YTFmODE5NWItYzc1Ni00NTJkLTliZjgtYzk5NGU3OGQyMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcjwuvGlticuDWFBeuSekGai0+56lqBmc+P3 T+uMhp8rfgK2LdoOnDJbF3/SmqAQUg1krsvtPFokn3OvjDrk8IVBZMzIQwDIi0fO TgcHN/+FFu/YpJjlWCOce91qe1YP1hTuUdbEseCe5BvLxaeIpryWIpwWFKvqiEVW gUeVBeLOVbTCiSHFrkR1c0vr+gOGmCmHLwJk5himGWBzppihI4FzlDv3+DzbEuB8 gTtiurv0VifJeDFQT1zQHdtmsILSA32+EKNKK+9OWEmoSle/btbbP9HjdQFxITvN H6T1zZ4dupqCBGJF/2B606CJSIuEy0TWiNniqzLHXAGQKEwbIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFutKFaS1pzIhGTMmeYaH2F+oXNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvYTkxMzdlMWUtZWRlZS0z YTQ2LTk3M2YtYjBlMTA5ZWE0YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD1fgDIHDQfwI7XPucmS4lGKwVrVGkrpEkSrHTGs/UQMvGsPvNpPn4Q rRMStFqE0PYD2Kg/GC+VgORkBcONZ1EtyKFkE3BLeXK5Ni1R1JU5w7bN7sRWR/Q9 ITR92xvfM6OrpNyGNbfLuAORFzqVUvojt3BBDNRlElC5atiylRlAX8TrDHPtO6ZL hZPXaMM3dfzQ6KgZrM6Dw+NzeQzYU0TzWHRgjOQZ0FZWfL1ORqszxoF0ZrPE/dWf mWVPxCrPwvIXr+/Og3zgcbszY0OvOy6NE76WJKLZVd4g4XEBCPdEtgPNLr3RGvfe DkiBFoX45LI6tCLW02CPBbwVReRYrpc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:35 2026 by rpki-client