$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/9e7e3a00-365b-357e-a3b1-e9b70e25f136.roa File: 9e7e3a00-365b-357e-a3b1-e9b70e25f136.roa (raw, json) Hash identifier: Bc3y+Q94HlOs3ubPpPV+EOh8eN3cvGehqW3nLR7iWEQ= Subject key identifier: A4:2B:7C:67:7F:3A:E4:57:03:D9:87:43:A7:7C:7F:F0:D9:2D:02:2E Certificate issuer: /CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Certificate serial: 010D0C9F4328584E059C8650B37B77470FAC4680 Authority key identifier: AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/9e7e3a00-365b-357e-a3b1-e9b70e25f136.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 1657 IP address blocks: 136.165.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:86:50:b3:7b:77:47:0f:ac:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2bb74158-1861-45f0-b153-ea2a586344dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:c1:79:7b:58:df:0e:f4:d2:1b:30:42:f6: 9d:5f:11:9d:57:9a:b4:b8:20:a8:9a:d7:b0:9e:a3: 87:25:02:6d:2b:11:61:5a:27:08:69:6d:ec:fd:4a: 5e:3f:25:f2:47:21:ce:e5:39:46:c3:41:e1:a0:b5: 1d:36:29:83:13:74:51:91:50:0e:3e:9f:f2:f8:b6: 53:08:df:f5:bb:84:f4:8c:13:be:71:3b:52:9c:75: 3e:29:6c:26:28:af:01:a9:82:8e:50:32:a6:0e:08: 23:ad:78:95:61:32:10:33:e1:32:b9:ff:0b:dd:07: 0b:1d:ae:a9:97:bf:02:fd:ad:05:d3:8a:a8:2d:af: 3a:0d:f6:d7:3c:96:1a:8e:23:13:2d:d9:8f:42:58: 5a:85:0d:64:f3:4f:b2:c0:ae:d0:96:d5:12:d4:02: 17:0d:87:01:2e:f8:e4:2e:b7:64:39:40:03:b7:97: 88:30:b8:2a:ce:ff:ea:90:bc:e8:a6:1c:46:e7:6b: 6c:84:8b:d8:b1:cb:0c:c0:19:45:c4:37:1b:0c:8e: 70:4f:c8:5c:ce:15:b8:97:a4:45:84:db:18:b1:4b: 61:63:b4:8d:f0:1b:d6:9d:2f:08:17:9b:c1:e1:d7: 3c:fb:00:aa:95:3c:4b:73:4b:5e:47:59:ee:de:ad: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:7C:67:7F:3A:E4:57:03:D9:87:43:A7:7C:7F:F0:D9:2D:02:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/9e7e3a00-365b-357e-a3b1-e9b70e25f136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.crl X509v3 Authority Key Identifier: keyid:AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer sbgp-ipAddrBlock: critical IPv4: 136.165.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ba:d0:8a:de:61:44:3a:26:e6:f9:8c:68:c1:66:12:7c:1f: c7:cf:1a:72:7e:e1:45:09:d0:30:46:50:f2:d5:5f:7b:64:5f: 65:92:75:ef:5d:de:2b:64:c8:5f:c2:28:13:25:b3:1d:65:52: 5d:6e:41:06:27:49:a4:28:86:91:43:25:9f:1d:c1:1c:05:60: e7:e7:8e:b7:35:22:23:2f:88:02:94:70:6b:75:9f:95:4a:e6: 56:ac:2b:50:01:95:c9:f2:1e:d3:ca:11:7c:4f:88:f9:68:9c: 79:15:80:eb:9e:7a:6f:77:d7:38:e4:01:da:0e:47:d8:d6:ef: 70:3a:9b:f3:5d:1d:ba:57:d2:af:fd:7e:7f:f5:b3:38:cc:b8: b5:4f:be:7c:f2:91:a7:55:08:fb:0c:68:36:30:f9:20:a8:35: a0:16:b2:5a:ff:47:4f:f3:ba:2e:11:5b:1d:7b:8b:67:5f:2b: 40:9f:7a:61:1f:8e:b3:68:e7:8c:2a:01:80:bd:a6:e8:7b:ca: 8b:84:06:39:d1:22:c9:d2:83:4d:18:36:f5:48:d1:cb:b1:4e: 66:49:ed:0c:8f:cd:89:d4:ef:79:a3:23:34:df:59:83:27:5a: 5f:cb:7c:23:c1:09:94:e3:28:c1:d2:10:8d:b3:4c:0d:42:b8: 86:4f:78:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnIZQs3t3Rw+sRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNkMmYxOGMtMWQxMy00NjFhLWEwM2MtYjk5MTIyMGJi NTVhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmJiNzQxNTgtMTg2MS00NWYwLWIxNTMtZWEyYTU4NjM0NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNPBeXtY3w700hswQvadXxGdV5q0uCComtew nqOHJQJtKxFhWicIaW3s/UpePyXyRyHO5TlGw0HhoLUdNimDE3RRkVAOPp/y+LZT CN/1u4T0jBO+cTtSnHU+KWwmKK8BqYKOUDKmDggjrXiVYTIQM+Eyuf8L3QcLHa6p l78C/a0F04qoLa86DfbXPJYajiMTLdmPQlhahQ1k80+ywK7QltUS1AIXDYcBLvjk LrdkOUADt5eIMLgqzv/qkLzophxG52tshIvYscsMwBlFxDcbDI5wT8hczhW4l6RF hNsYsUthY7SN8BvWnS8IF5vB4dc8+wCqlTxLc0teR1nu3q0uEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQrfGd/OuRXA9mHQ6d8f/DZLQIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Y2Qy ZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkxMjIwYmI1NWEvOWU3ZTNhMDAtMzY1Yi0z NTdlLWEzYjEtZTliNzBlMjVmMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmNkMmYxOGMtMWQxMy00NjFhLWEw M2MtYjk5MTIyMGJiNTVhLzZjZDJmMThjLTFkMTMtNDYxYS1hMDNjLWI5OTEyMjBi YjU1YS5jcmwwHwYDVR0jBBgwFoAUqhwJKxgDjkJAsDVy4InOB01jXtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Y2QyZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkx MjIwYmI1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiKX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq60IreYUQ6Jub5jGjBZhJ8H8fPGnJ+4UUJ0DBGUPLVX3tkX2WSde9d 3itkyF/CKBMlsx1lUl1uQQYnSaQohpFDJZ8dwRwFYOfnjrc1IiMviAKUcGt1n5VK 5lasK1ABlcnyHtPKEXxPiPlonHkVgOueem931zjkAdoOR9jW73A6m/NdHbpX0q/9 fn/1szjMuLVPvnzykadVCPsMaDYw+SCoNaAWslr/R0/zui4RWx17i2dfK0CfemEf jrNo54wqAYC9puh7youEBjnRIsnSg00YNvVI0cuxTmZJ7QyPzYnU73mjIzTfWYMn Wl/LfCPBCZTjKMHSEI2zTA1CuIZPeKk= -----END CERTIFICATE-----Generated at Fri Jun 12 05:54:47 2026 by rpki-client