$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa File: e4352b8d-f0be-3577-958a-9d3589216547.roa (raw, json) Hash identifier: lhqnLRSZ6ci3DVAiz1qPpBmKrqjBwdSvUii9sst9xBQ= Subject key identifier: 68:75:6C:71:3E:2E:44:2B:C7:11:2B:40:0B:2C:8E:CC:36:26:26:60 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584E4129E4F673BE8D167917F400 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 3320 IP address blocks: 136.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e4:f6:73:be:8d:16:79:17:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=2f1add7c-1027-493b-8387-f721bc38ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:b7:df:a0:c8:51:85:33:10:91:da:f2:35: 33:67:28:7e:3b:d1:14:e4:67:cd:db:a0:26:05:df: c7:29:54:89:85:02:38:f4:7c:af:9c:21:42:e7:94: 39:f5:da:71:ae:a5:3f:9a:22:86:79:62:a2:34:35: f9:1d:31:ff:d7:ea:5a:24:ae:dd:4c:63:f2:8c:48: e7:98:28:f2:01:99:98:d3:e1:c5:ef:90:16:15:7f: 96:1d:60:4b:17:ff:ac:96:1c:36:ee:b2:1b:1c:47: e2:1b:c6:90:a4:f6:3e:fe:88:41:3e:c7:6f:1a:05: d5:1a:c0:1f:73:69:1f:7f:3c:51:2f:ba:f7:78:28: df:4a:00:ce:1f:cf:20:72:2d:99:56:a3:ad:83:32: 89:32:a9:bd:a2:f6:4e:1f:cc:7d:16:57:2b:d4:d2: 61:2d:ff:d6:91:2f:0e:11:74:c4:fd:a8:dd:a2:16: 6d:0a:67:2d:2b:f5:1b:c4:3b:0c:d9:35:ac:57:d3: b5:81:9d:2c:0b:9e:91:1d:0b:3b:04:86:6a:94:01: df:91:2d:12:5f:d7:d9:89:2f:20:7a:79:43:99:b9: 6e:5a:b9:7d:eb:fe:91:ce:0b:39:78:cd:96:c5:f2: 40:28:09:a8:53:08:00:54:66:df:2d:2b:1c:43:3f: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:75:6C:71:3E:2E:44:2B:C7:11:2B:40:0B:2C:8E:CC:36:26:26:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d1:70:7f:a3:f2:c6:0f:fa:0c:e8:fe:20:b6:32:04:cf:f2: 79:23:e8:cd:71:7b:ce:98:68:91:7f:76:85:4b:28:09:0e:7c: 55:04:c3:f3:5d:f4:2b:86:b4:33:c6:b4:f7:84:66:06:97:b7: 4a:98:19:3a:64:cc:79:cd:5a:6e:a5:d6:15:2a:6b:e3:d0:33: 27:34:c2:68:c3:14:9b:dd:3e:05:86:07:31:19:e7:93:da:13: 56:68:be:73:74:e9:f3:3f:f1:eb:6f:f1:06:87:e0:e9:34:41: fb:e6:88:7a:ce:ae:90:f5:a4:36:23:b7:ac:dc:25:f1:68:a1: 7d:e5:9c:ce:b3:d7:4e:62:fb:8b:23:37:86:ee:e9:96:00:59: 19:43:e3:4d:02:00:52:2a:5d:8b:84:ef:da:07:70:cd:7e:ae: fa:e1:d0:5d:c7:26:55:91:15:5b:24:ee:af:33:71:fc:20:4d: 7d:f2:50:9b:af:c0:d4:4a:9f:73:0c:e5:05:13:90:ef:a2:3f: 42:bb:7f:a0:53:1c:e7:22:31:74:17:20:81:85:18:58:e7:6a: 4b:86:56:87:ed:63:90:50:30:e6:88:4e:a4:bb:87:bb:44:53: aa:a0:00:2a:06:8e:20:b3:6d:33:39:ee:a4:21:e4:7d:08:26: 35:41:1b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKeT2c76NFnkX9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MmYxYWRkN2MtMTAyNy00OTNiLTgzODctZjcyMWJjMzhmZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7W336DIUYUzEJHa8jUzZyh+O9EU5GfN26Am Bd/HKVSJhQI49HyvnCFC55Q59dpxrqU/miKGeWKiNDX5HTH/1+paJK7dTGPyjEjn mCjyAZmY0+HF75AWFX+WHWBLF/+slhw27rIbHEfiG8aQpPY+/ohBPsdvGgXVGsAf c2kffzxRL7r3eCjfSgDOH88gci2ZVqOtgzKJMqm9ovZOH8x9Flcr1NJhLf/WkS8O EXTE/ajdohZtCmctK/UbxDsM2TWsV9O1gZ0sC56RHQs7BIZqlAHfkS0SX9fZiS8g enlDmbluWrl96/6Rzgs5eM2WxfJAKAmoUwgAVGbfLSscQz9mYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh1bHE+LkQrxxErQAssjsw2JiZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZTQzNTJiOGQtZjBiZS0z NTc3LTk1OGEtOWQzNTg5MjE2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPRcH+j8sYP+gzo/iC2MgTP8nkj6M1xe86YaJF/doVLKAkOfFUEw/Nd 9CuGtDPGtPeEZgaXt0qYGTpkzHnNWm6l1hUqa+PQMyc0wmjDFJvdPgWGBzEZ55Pa E1ZovnN06fM/8etv8QaH4Ok0QfvmiHrOrpD1pDYjt6zcJfFooX3lnM6z105i+4sj N4bu6ZYAWRlD400CAFIqXYuE79oHcM1+rvrh0F3HJlWRFVsk7q8zcfwgTX3yUJuv wNRKn3MM5QUTkO+iP0K7f6BTHOciMXQXIIGFGFjnakuGVoftY5BQMOaITqS7h7tE U6qgACoGjiCzbTM57qQh5H0IJjVBG/Y= -----END CERTIFICATE-----Generated at Mon Jul 20 23:57:38 2026 by rpki-client