$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa File: 87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa (raw, json) Hash identifier: yIsVnvdlp3ZieVIENoDmiXCCTqS3nu9W2YLRvXVbISE= Subject key identifier: 4B:89:97:20:5A:46:23:70:6F:B3:A2:AF:52:EA:E6:29:04:B3:BE:70 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584E0005ECAE4291153AE3A64940 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 36040 IP address blocks: 136.22.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:ec:ae:42:91:15:3a:e3:a6:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=3f430c6a-7604-477e-b443-1b7738ea1582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:c6:f6:54:42:ae:34:94:01:ee:9b:ee:8b: 00:fb:d0:19:89:da:ea:9f:97:27:20:70:90:2b:75: 72:f6:42:8e:fd:5b:af:30:0b:56:16:7a:31:fe:1d: ac:7f:03:7e:14:1a:19:8f:3f:d7:44:f9:07:89:07: 28:74:17:71:b1:95:62:4d:00:96:d0:bd:22:07:dd: 0e:ca:e3:6b:ac:a6:5c:a6:29:85:88:b6:39:ae:0a: 59:3d:6d:ae:4b:78:2e:64:9a:9e:b9:a5:0b:d2:4a: 58:26:ec:b4:13:13:3a:b4:35:81:c5:2b:5b:57:e7: ad:0a:30:b5:87:47:cb:0b:b1:67:7a:c4:87:ea:8f: 24:5e:87:e7:66:21:c1:64:63:43:cc:14:37:66:04: d1:0e:26:13:3e:da:b2:21:a3:75:4d:3a:1a:95:d1: 02:68:c9:eb:46:af:f3:de:5f:2e:eb:a0:31:b3:a6: 6f:8b:9c:d1:b0:b5:82:52:94:31:83:d5:e5:05:cf: f6:dc:5c:72:19:89:ea:0b:49:c8:c8:b2:e8:31:7d: 38:3b:06:06:ec:78:0d:f2:22:90:65:0a:02:31:c5: d6:7b:a6:9a:ac:f0:34:37:14:2e:68:13:2e:e8:fc: da:39:c7:86:a3:4a:13:b8:95:60:44:32:35:74:ce: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:97:20:5A:46:23:70:6F:B3:A2:AF:52:EA:E6:29:04:B3:BE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:06:4e:61:c4:df:10:96:a9:ae:4f:ad:79:2c:ce:fa:65:91: 41:a5:3f:76:3c:b0:d8:1f:44:f4:34:c4:be:5f:cf:b5:02:df: 50:63:4c:f2:fa:66:fc:ac:60:7c:be:1e:22:75:f6:3c:4b:25: 6d:dd:4d:6d:e6:96:3c:15:47:c9:5d:e1:dc:9a:e6:1f:dd:b6: c8:2c:76:c5:59:d8:84:e5:f4:fa:12:51:a5:48:6f:cc:45:83: cb:a4:85:cd:85:0e:7e:ac:af:fe:a2:e4:d6:a1:15:d3:d5:07: 12:ef:9c:0a:00:80:c2:9a:ed:f8:e6:bf:7c:bf:fb:f6:49:7a: f0:53:c5:6a:bb:77:2f:c0:3c:48:51:05:93:ee:f4:a6:8e:7a: f1:da:6a:1b:4e:bd:23:28:ed:46:2c:8d:45:d3:f5:6b:25:32: ad:b5:4f:46:d5:3d:78:60:7d:83:25:7c:e5:0d:e6:d8:f8:de: 89:5e:82:9e:21:80:e7:c1:e9:2b:8f:5e:2a:e7:da:80:42:ec: 2f:1d:5f:1a:6b:da:9a:bf:ad:17:35:88:27:ec:9b:dd:91:71: d2:da:4d:13:8f:e8:25:1b:2e:c8:a9:c6:51:b0:6b:26:91:5b: e6:c4:51:65:bb:c7:a9:ac:8c:6b:3e:51:73:9b:b6:b2:0b:6e: fd:c6:46:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABeyuQpEVOuOmSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk M2Y0MzBjNmEtNzYwNC00NzdlLWI0NDMtMWI3NzM4ZWExNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTrG9lRCrjSUAe6b7osA+9AZidrqn5cnIHCQ K3Vy9kKO/VuvMAtWFnox/h2sfwN+FBoZjz/XRPkHiQcodBdxsZViTQCW0L0iB90O yuNrrKZcpimFiLY5rgpZPW2uS3guZJqeuaUL0kpYJuy0ExM6tDWBxStbV+etCjC1 h0fLC7FnesSH6o8kXofnZiHBZGNDzBQ3ZgTRDiYTPtqyIaN1TToaldECaMnrRq/z 3l8u66Axs6Zvi5zRsLWCUpQxg9XlBc/23FxyGYnqC0nIyLLoMX04OwYG7HgN8iKQ ZQoCMcXWe6aarPA0NxQuaBMu6PzaOceGo0oTuJVgRDI1dM4SXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuJlyBaRiNwb7Oir1Lq5ikEs75wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODdmYTlmYTItOGIzMi0z YmNjLTgyMTYtOTA2YjAwZDU1MGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAGTmHE3xCWqa5PrXkszvplkUGlP3Y8sNgfRPQ0xL5fz7UC31BjTPL6 ZvysYHy+HiJ19jxLJW3dTW3mljwVR8ld4dya5h/dtsgsdsVZ2ITl9PoSUaVIb8xF g8ukhc2FDn6sr/6i5NahFdPVBxLvnAoAgMKa7fjmv3y/+/ZJevBTxWq7dy/APEhR BZPu9KaOevHaahtOvSMo7UYsjUXT9WslMq21T0bVPXhgfYMlfOUN5tj43olegp4h gOfB6SuPXirn2oBC7C8dXxpr2pq/rRc1iCfsm92RcdLaTROP6CUbLsipxlGwayaR W+bEUWW7x6msjGs+UXObtrILbv3GRlA= -----END CERTIFICATE-----Generated at Sat Jun 6 15:47:17 2026 by rpki-client