$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: fI05l8fN52iaf+DwhgjKESGub1+i/LagnsmDFXghHpE= Subject key identifier: A3:49:D0:7F:7E:87:DD:88:CC:56:BB:21:EE:BE:95:95:DB:E4:B4:26 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584E00060E25A4FBB4BEA82BB8C0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:0e:25:a4:fb:b4:be:a8:2b:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=a1e890a1-7e06-46d4-9879-6bb16e4359fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:67:19:c2:19:f9:54:b9:cb:7a:f2:73:e1:5c: 08:f7:2e:2b:fd:76:70:27:5c:e7:43:4c:1d:55:ad: f4:63:a5:b2:80:db:6f:b0:9e:ae:28:9a:0a:d0:f3: a1:00:fe:dd:c8:af:05:57:52:75:e8:a9:15:25:63: 95:1e:b2:0c:46:3d:1d:40:d9:fd:18:e8:93:b3:09: fb:da:24:96:68:d5:1f:bd:e7:85:c0:f5:d6:8b:a8: 57:2c:08:87:b2:7e:7a:65:5d:1a:42:48:bb:27:1e: 8c:3e:29:6c:0d:ca:03:05:a1:03:cc:0c:fc:f9:1f: 8c:08:b5:b8:aa:d7:0b:97:1b:6b:0f:27:9b:45:54: 81:c0:a8:e0:90:40:4f:fc:e5:b7:2b:18:12:e9:3c: d9:84:84:d9:a7:37:cf:72:d6:e6:a5:65:b4:87:cf: 8c:e7:47:0d:bf:b3:4d:8f:bf:9c:4a:91:d8:79:8c: 42:3c:20:44:f7:c5:ce:d0:4e:64:89:d1:60:47:54: c8:95:be:b8:0d:7c:9e:f3:e4:7c:f6:4a:79:e1:3f: 57:dc:2f:8c:f7:f4:7b:5c:60:ef:5e:c1:f5:b9:8a: dc:6c:f9:bf:69:39:52:f1:11:1d:7a:fa:c6:96:c2: 66:4b:15:f4:86:bd:23:02:fd:33:0e:d0:29:61:29: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:49:D0:7F:7E:87:DD:88:CC:56:BB:21:EE:BE:95:95:DB:E4:B4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d0:6e:d9:71:50:06:7d:c8:63:fc:74:d5:0b:9b:98:d2:51: cd:58:d3:3a:ec:4a:3f:c7:c2:9d:50:de:04:b2:89:3e:28:43: ac:79:56:3d:e5:e4:c5:f7:8c:90:61:10:27:27:e2:c8:a0:ef: 91:67:e0:55:1d:d2:36:bf:3f:58:ef:e7:0a:42:e0:23:46:69: 6d:86:3a:00:91:04:4d:3b:34:31:f7:4a:8b:be:59:cb:43:f7: 2a:73:83:7f:a6:38:8b:93:09:c7:5b:ef:45:46:aa:18:f8:81: 94:19:93:d2:75:20:3d:65:01:a7:33:76:a7:22:42:ac:31:55: f4:2e:a4:aa:6f:7f:6e:98:77:ed:b0:f9:3d:2d:56:6d:ac:d7: a3:14:c5:89:4f:ea:90:bd:f0:ee:88:df:83:3d:26:3f:9d:6e: 5e:c7:5c:2d:86:28:27:5d:5d:0b:ab:20:aa:d0:f8:a3:7e:a1: f5:ec:ed:46:3f:91:9e:ba:f5:de:b6:e9:ea:e8:3d:af:cc:7d: 84:a2:74:3c:c0:b4:d5:29:ac:6b:4e:24:07:83:e9:67:05:13: 1d:a5:ef:b8:76:44:50:c9:4e:7c:ca:50:b1:a1:f1:a7:2e:2d: 9a:98:f1:16:d5:1d:c0:4e:00:a1:9c:83:51:48:da:dd:80:20: f0:34:bd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABg4lpPu0vqgruMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk YTFlODkwYTEtN2UwNi00NmQ0LTk4NzktNmJiMTZlNDM1OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGcZwhn5VLnLevJz4VwI9y4r/XZwJ1znQ0wd Va30Y6WygNtvsJ6uKJoK0POhAP7dyK8FV1J16KkVJWOVHrIMRj0dQNn9GOiTswn7 2iSWaNUfveeFwPXWi6hXLAiHsn56ZV0aQki7Jx6MPilsDcoDBaEDzAz8+R+MCLW4 qtcLlxtrDyebRVSBwKjgkEBP/OW3KxgS6TzZhITZpzfPctbmpWW0h8+M50cNv7NN j7+cSpHYeYxCPCBE98XO0E5kidFgR1TIlb64DXye8+R89kp54T9X3C+M9/R7XGDv XsH1uYrcbPm/aTlS8REdevrGlsJmSxX0hr0jAv0zDtApYSnnRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNJ0H9+h92IzFa7Ie6+lZXb5LQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXQbtlxUAZ9yGP8dNULm5jSUc1Y0zrsSj/Hwp1Q3gSyiT4oQ6x5Vj3l 5MX3jJBhECcn4sig75Fn4FUd0ja/P1jv5wpC4CNGaW2GOgCRBE07NDH3Sou+WctD 9ypzg3+mOIuTCcdb70VGqhj4gZQZk9J1ID1lAaczdqciQqwxVfQupKpvf26Yd+2w +T0tVm2s16MUxYlP6pC98O6I34M9Jj+dbl7HXC2GKCddXQurIKrQ+KN+ofXs7UY/ kZ669d626eroPa/MfYSidDzAtNUprGtOJAeD6WcFEx2l77h2RFDJTnzKULGh8acu LZqY8RbVHcBOAKGcg1FI2t2AIPA0vSs= -----END CERTIFICATE-----Generated at Fri Jun 12 01:10:11 2026 by rpki-client