$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa File: 2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa (raw, json) Hash identifier: No3ZKFAvjb/G1zGWlDcgCOtDcvVMR9h8N1393IgdCC4= Subject key identifier: BC:CE:BF:AE:36:C5:B7:09:36:5D:BF:29:65:0C:6B:B3:50:A3:8B:E3 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584E54B4901DCBF6E0A2B1CA8A00 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 199.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:90:1d:cb:f6:e0:a2:b1:ca:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=0c7edc67-9340-455f-9bbb-96396cae84c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e8:c0:bf:88:9a:d4:46:ff:be:79:52:03:c9: fa:4e:56:0c:dd:19:25:f3:48:bc:99:11:66:96:74: ce:37:1c:e8:c2:67:4b:92:ce:9e:82:19:f4:5d:87: 42:50:f3:12:3c:91:d9:fc:fb:d9:8e:4c:1f:4c:5e: d4:98:fe:b5:50:54:25:76:51:d9:f9:fd:a9:d7:8f: 25:a4:0b:ca:4b:5c:ff:8c:bb:f4:db:82:e2:9c:57: 6e:d2:82:d1:c7:03:61:60:68:ea:eb:92:e4:62:ec: ec:c3:68:78:f4:aa:36:91:e0:11:52:db:4f:e5:23: 31:8b:10:e1:bf:0f:69:5c:4a:9f:b5:4c:0e:04:4a: 2d:66:59:c4:c1:37:3b:69:68:72:b0:81:4e:85:36: 3b:b9:3a:15:2b:0c:91:27:7e:c3:71:9a:fe:d8:1c: 44:20:27:09:95:83:11:f9:3b:62:0c:7c:fd:48:22: f0:ed:82:59:96:0a:23:03:0b:33:6e:aa:1a:31:85: 42:83:ff:51:99:60:25:b5:6c:08:5c:04:27:e4:03: ca:b9:84:59:ec:ba:ae:7a:8d:5f:00:13:60:3d:d4: c3:31:96:b9:e0:54:00:cd:33:9a:ca:e1:22:da:35: 36:e2:fc:2f:55:e9:cc:f6:b5:45:7e:91:97:1e:e8: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:BF:AE:36:C5:B7:09:36:5D:BF:29:65:0C:6B:B3:50:A3:8B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 199.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:12:f3:1e:b0:fb:ba:4d:b9:37:06:16:22:43:16:75:8b:4c: e6:aa:99:ba:4a:2b:48:49:80:2e:b3:bf:06:d0:a9:78:8f:b9: 20:26:9c:a1:8e:ff:2f:35:75:20:f4:77:f0:9e:20:a8:27:23: a2:cf:96:d6:c9:0e:bf:d6:81:dc:96:3c:98:42:8a:be:96:dd: 6e:7c:71:cf:bd:46:0f:4e:1a:69:7b:2c:4f:8f:0b:81:24:ac: f4:40:ef:b1:f1:0c:f2:ba:33:59:c8:50:7e:0b:15:61:5f:00: 47:26:f2:fe:98:ce:1f:4f:bc:70:bb:4e:fd:b1:13:92:73:04: 0f:de:3b:b2:21:69:a3:25:8d:54:13:65:a6:9f:46:27:94:ea: 62:cc:1a:39:2c:cb:c9:64:68:97:a0:ed:ad:fe:23:a2:fd:98: 69:2e:b3:e1:84:25:37:6d:a1:f2:20:dd:d6:12:4c:22:e5:96: 79:f9:4f:9a:9d:e7:66:53:07:ad:e3:13:05:ca:40:2b:74:53: 0f:0f:6d:89:c2:6f:b9:8e:8b:79:ed:9a:a0:31:0e:ec:49:d2: ca:6c:bb:9b:b9:6c:9e:0e:c9:71:d1:07:1a:d0:56:de:03:9d: f2:fb:76:de:52:4e:2d:f2:7a:00:21:e0:19:98:21:38:98:02: 20:29:2a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJAdy/bgorHKigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MGM3ZWRjNjctOTM0MC00NTVmLTliYmItOTYzOTZjYWU4NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ujAv4ia1Eb/vnlSA8n6TlYM3Rkl80i8mRFm lnTONxzowmdLks6eghn0XYdCUPMSPJHZ/PvZjkwfTF7UmP61UFQldlHZ+f2p148l pAvKS1z/jLv024LinFdu0oLRxwNhYGjq65LkYuzsw2h49Ko2keARUttP5SMxixDh vw9pXEqftUwOBEotZlnEwTc7aWhysIFOhTY7uToVKwyRJ37DcZr+2BxEICcJlYMR +TtiDHz9SCLw7YJZlgojAwszbqoaMYVCg/9RmWAltWwIXAQn5APKuYRZ7Lqueo1f ABNgPdTDMZa54FQAzTOayuEi2jU24vwvVenM9rVFfpGXHugZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzOv642xbcJNl2/KWUMa7NQo4vjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvMjY1NmRhOGItZGI4Zi0z M2UxLWEwMDEtYWE4ZTI0ZjhkNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYS8x6w+7pNuTcGFiJDFnWLTOaqmbpKK0hJgC6zvwbQqXiPuSAmnKGO /y81dSD0d/CeIKgnI6LPltbJDr/WgdyWPJhCir6W3W58cc+9Rg9OGml7LE+PC4Ek rPRA77HxDPK6M1nIUH4LFWFfAEcm8v6Yzh9PvHC7Tv2xE5JzBA/eO7IhaaMljVQT ZaafRieU6mLMGjksy8lkaJeg7a3+I6L9mGkus+GEJTdtofIg3dYSTCLllnn5T5qd 52ZTB63jEwXKQCt0Uw8PbYnCb7mOi3ntmqAxDuxJ0spsu5u5bJ4OyXHRBxrQVt4D nfL7dt5STi3yegAh4BmYITiYAiApKgQ= -----END CERTIFICATE-----Generated at Mon Jul 6 20:10:01 2026 by rpki-client