$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa File: f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa (raw, json) Hash identifier: ci7O2c33WedlxE5FTdzpFxyR8M+DyJ7Nd48BY6eEC1g= Subject key identifier: 07:76:05:6A:97:05:C1:E9:A5:E9:4B:42:BB:F4:FB:D1:60:E2:4A:E7 Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Certificate serial: 010D0C9F4328584E66DA19C34CB683F44EF45AA0 Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 3855 IP address blocks: 162.255.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:19:c3:4c:b6:83:f4:4e:f4:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=29302cad-38b3-432d-bb79-486f7b0e4396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:3b:ea:12:74:5e:5d:b5:44:57:08:03:23: 26:57:a9:77:92:96:e1:df:28:3a:cf:44:97:c7:bc: 7d:dd:9c:b2:4d:72:51:bf:77:18:a2:f6:b5:14:09: cb:01:ff:91:be:1e:a3:1c:61:15:bf:1e:3f:e8:b8: 33:96:0d:5e:5f:c2:7d:88:a0:70:87:dd:7c:a0:2a: 7c:0d:4e:01:a6:3b:c9:aa:8c:3b:b6:1e:60:77:d7: 47:8e:a2:40:8d:bc:fc:58:7c:78:49:5d:2c:72:2b: 01:10:45:fc:11:13:4c:de:e3:52:ca:0e:05:46:ca: 1a:c7:45:98:f2:36:ad:8b:42:cd:f8:d5:25:62:c9: aa:86:91:e5:ba:09:40:7e:49:64:84:9d:de:2d:5e: ec:d5:9b:ac:af:80:47:5a:98:61:02:b6:db:d7:c0: 90:29:96:79:a8:67:d9:b5:65:f0:5a:31:b6:2b:89: a2:9b:46:a7:e3:a1:d9:05:8e:60:de:44:0d:a7:08: 79:b3:0d:5a:cd:56:36:3f:44:ac:4b:ad:32:38:56: e5:c2:21:ca:4b:83:05:73:8c:61:8e:06:73:ec:d1: 90:13:c6:d6:c6:9b:7c:e4:98:1a:86:1a:00:c5:e7: e0:a1:a1:dc:68:01:99:45:c4:cf:52:48:92:6f:49: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:05:6A:97:05:C1:E9:A5:E9:4B:42:BB:F4:FB:D1:60:E2:4A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl X509v3 Authority Key Identifier: keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer sbgp-ipAddrBlock: critical IPv4: 162.255.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bf:15:b5:4b:02:ae:27:7e:c1:2f:27:45:4b:ff:e0:16:06: 19:82:f7:03:e0:60:09:d2:7a:75:a1:61:d9:d3:f3:c0:92:2b: e8:9d:b9:5d:6b:9e:fd:98:97:3a:90:7e:09:a4:76:bd:f2:ca: fb:ce:22:d2:15:7f:94:94:6c:55:36:9b:ae:a3:ac:bb:e6:0c: 43:9a:8b:75:1c:62:28:58:2e:dc:76:22:fc:26:9d:87:db:5a: d1:d3:30:d0:16:c8:de:e5:32:09:62:fd:7f:df:28:cd:7e:86: a5:9d:8e:b2:70:ea:2b:bf:da:b9:b6:32:31:6b:a1:06:7f:54: 88:69:1a:07:6e:0c:a2:00:97:66:cb:72:8b:16:3c:85:be:3d: e6:df:6f:4e:ba:93:1d:18:42:63:e6:da:13:39:f6:b5:36:33: e5:56:07:c0:67:b7:b2:b3:5f:8d:ba:81:2a:cc:6f:ba:73:f2: 08:da:7b:3f:5c:72:ed:a5:63:c7:a3:ce:73:02:27:30:8d:30: 36:89:72:de:5b:7b:e7:e2:ff:da:d9:69:67:a1:3d:45:d0:75: 40:5d:b6:a2:3c:f1:49:ae:17:30:dd:35:b0:bc:9b:f8:82:49: 92:e6:48:ed:b5:06:30:27:68:37:3d:03:ee:e0:74:2d:4f:5e: 0b:0e:37:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hnDTLaD9E70WqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5 ZGIxMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MjkzMDJjYWQtMzhiMy00MzJkLWJiNzktNDg2ZjdiMGU0Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyo76hJ0Xl21RFcIAyMmV6l3kpbh3yg6z0SX x7x93ZyyTXJRv3cYova1FAnLAf+Rvh6jHGEVvx4/6Lgzlg1eX8J9iKBwh918oCp8 DU4BpjvJqow7th5gd9dHjqJAjbz8WHx4SV0scisBEEX8ERNM3uNSyg4FRsoax0WY 8jati0LN+NUlYsmqhpHluglAfklkhJ3eLV7s1Zusr4BHWphhArbb18CQKZZ5qGfZ tWXwWjG2K4mim0an46HZBY5g3kQNpwh5sw1azVY2P0SsS60yOFblwiHKS4MFc4xh jgZz7NGQE8bWxpt85JgahhoAxefgoaHcaAGZRcTPUkiSb0m9HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAd2BWqXBcHppelLQrv0+9Fg4krnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvZjM2Y2JhZTgtMzgxYS0z MTg3LWJhNzctN2EyZWY1ZjdmYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG/FbVLAq4nfsEvJ0VL/+AWBhmC9wPgYAnSenWhYdnT88CSK+iduV1r nv2YlzqQfgmkdr3yyvvOItIVf5SUbFU2m66jrLvmDEOai3UcYihYLtx2IvwmnYfb WtHTMNAWyN7lMgli/X/fKM1+hqWdjrJw6iu/2rm2MjFroQZ/VIhpGgduDKIAl2bL cosWPIW+Pebfb066kx0YQmPm2hM59rU2M+VWB8Bnt7KzX426gSrMb7pz8gjaez9c cu2lY8ejznMCJzCNMDaJct5be+fi/9rZaWehPUXQdUBdtqI88UmuFzDdNbC8m/iC SZLmSO21BjAnaDc9A+7gdC1PXgsONxk= -----END CERTIFICATE-----Generated at Mon Jul 13 12:51:26 2026 by rpki-client