$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa File: ecf5042d-a001-3491-a272-514979cae084.roa (raw, json) Hash identifier: mhZTOCC1Be1BKwsYUbfvvlQvIbBwo5lFD2xLsnXGRAk= Subject key identifier: 57:E1:FB:C5:CD:E3:8A:78:98:D7:0B:CA:FA:81:99:47:EE:A9:DF:04 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584E000614422256B1A2A740F020 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 36040 IP address blocks: 136.22.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:14:42:22:56:b1:a2:a7:40:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=61f7e4fe-1384-4576-8157-637cb1384913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:a5:da:bd:43:eb:4b:ca:74:6a:9c:e5:64: 49:7b:a0:ce:78:79:f0:4e:30:9d:53:75:ef:8a:67: b6:44:1c:9a:4d:fc:39:fb:a8:f9:35:c7:fb:83:7f: d9:39:2f:6d:b2:f3:5f:39:f0:9e:dd:b1:54:07:64: 9a:80:d0:ad:a6:7c:d4:de:13:2c:de:fc:fd:e5:a5: d9:fd:d5:74:50:f0:ef:8e:c7:c3:91:d7:7c:ed:88: f8:ac:a6:e4:dc:b8:73:fb:31:23:a0:b4:7e:9b:24: ef:1d:18:73:df:59:9d:7e:23:1f:44:e1:a7:57:1d: 08:62:27:36:84:a6:ba:9f:b6:cd:ec:0a:ef:a4:25: e5:a1:9c:3c:06:23:5a:73:6c:ef:c8:9d:db:2a:f7: 45:5c:18:dc:20:fd:87:22:7d:2c:5f:be:d8:b4:d7: a2:4d:a4:10:ef:c0:3b:55:0e:6a:98:2b:96:6e:6c: 35:c8:35:53:0e:ed:7a:f4:e0:a8:de:fe:ff:0b:15: 34:fd:23:9e:55:c9:1c:a1:f1:31:71:6b:f4:51:f5: cd:e5:5c:a1:de:16:ca:a2:04:9c:c0:54:dc:2d:71: 35:08:76:2f:b7:00:ae:89:a6:55:48:2d:06:9e:06: 32:f0:dd:66:db:bc:62:cd:e1:7b:7b:de:50:ae:00: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E1:FB:C5:CD:E3:8A:78:98:D7:0B:CA:FA:81:99:47:EE:A9:DF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:87:85:68:42:e8:16:e6:24:74:67:8f:43:b6:1d:21:ff: 7a:ea:53:e0:78:47:f4:f0:ac:89:a3:02:d9:de:e6:ba:5d:d9: 44:f1:03:47:5b:e9:fe:a2:7d:cf:7a:a9:96:fe:9a:a0:bc:12: 47:31:50:34:b9:c6:bd:72:d5:3b:e5:98:31:81:bd:73:55:34: 6a:df:4f:d7:8c:85:00:e2:44:71:63:3c:70:11:f4:64:6c:85: 8a:f5:39:1f:10:f9:a8:da:81:de:c1:58:cf:25:88:1d:cc:6e: 8a:f1:ab:74:48:8b:ed:a3:d3:fe:2c:0f:15:6f:66:54:0b:81: 07:2a:8d:41:38:b9:f0:5c:96:08:4d:36:69:bb:47:13:e7:9f: 34:4d:f7:9d:aa:cc:ad:db:bb:6f:eb:12:de:6e:fb:56:0c:18: b7:5a:f3:d8:be:c2:93:3c:7c:06:7a:ce:af:5b:b1:48:43:68: 6a:6b:44:a1:59:74:c0:54:d1:89:54:f0:cd:1e:8a:fe:38:ef: ca:4f:98:1b:65:95:50:ad:3e:d5:e9:78:8a:73:18:c3:64:cc: 8a:dd:b9:dc:e4:8b:49:33:57:df:b2:8d:3e:a7:1a:59:a1:1d: d5:02:bc:db:96:be:fb:35:b9:ea:76:46:c4:0b:6f:66:b9:36: 62:ce:7e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhRCIlaxoqdA8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NjFmN2U0ZmUtMTM4NC00NTc2LTgxNTctNjM3Y2IxMzg0OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxml2r1D60vKdGqc5WRJe6DOeHnwTjCdU3Xv ime2RByaTfw5+6j5Ncf7g3/ZOS9tsvNfOfCe3bFUB2SagNCtpnzU3hMs3vz95aXZ /dV0UPDvjsfDkdd87Yj4rKbk3Lhz+zEjoLR+myTvHRhz31mdfiMfROGnVx0IYic2 hKa6n7bN7ArvpCXloZw8BiNac2zvyJ3bKvdFXBjcIP2HIn0sX77YtNeiTaQQ78A7 VQ5qmCuWbmw1yDVTDu169OCo3v7/CxU0/SOeVckcofExcWv0UfXN5Vyh3hbKogSc wFTcLXE1CHYvtwCuiaZVSC0GngYy8N1m27xizeF7e95QrgBGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfh+8XN44p4mNcLyvqBmUfuqd8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNmNTA0MmQtYTAwMS0z NDkxLWEyNzItNTE0OTc5Y2FlMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQh4VoQugW5iR0Z49Dth0h/3rqU+B4R/TwrImjAtne5rpd2UTxA0db 6f6ifc96qZb+mqC8EkcxUDS5xr1y1TvlmDGBvXNVNGrfT9eMhQDiRHFjPHAR9GRs hYr1OR8Q+ajagd7BWM8liB3Mborxq3RIi+2j0/4sDxVvZlQLgQcqjUE4ufBclghN Nmm7RxPnnzRN952qzK3bu2/rEt5u+1YMGLda89i+wpM8fAZ6zq9bsUhDaGprRKFZ dMBU0YlU8M0eiv4478pPmBtllVCtPtXpeIpzGMNkzIrdudzki0kzV9+yjT6nGlmh HdUCvNuWvvs1uep2RsQLb2a5NmLOfss= -----END CERTIFICATE-----Generated at Thu Jun 11 23:41:17 2026 by rpki-client