$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa File: b9e8f069-91b2-31a8-95be-93db8964f515.roa (raw, json) Hash identifier: 6y8q+0/oHZdm17aiKOFnn7LlaRo3izwnjJvbAmAYN9I= Subject key identifier: 25:AD:AF:C6:01:9D:73:43:99:EF:25:17:AB:F7:00:CB:F6:05:C7:D6 Certificate issuer: /CN=81216c68-71e2-4795-933c-05f1e22d0c17 Certificate serial: 010D0C9F4328584E69A4B4A111C3CA7525878300 Authority key identifier: E7:67:85:ED:8B:EF:52:31:FC:98:2E:05:8D:26:C3:98:2A:CA:80:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 17196 IP address blocks: 192.203.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b4:a1:11:c3:ca:75:25:87:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81216c68-71e2-4795-933c-05f1e22d0c17 Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=a5253bd4-d58c-483c-ae47-34eb9f0a460a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:31:7d:f6:76:93:d1:99:60:c0:4b:01:6f: 16:9c:4a:11:d8:74:a5:a1:f0:25:23:db:21:fa:f9: 2e:e6:40:be:48:42:68:32:59:1c:d1:35:d4:80:14: 73:22:0d:0a:d3:c2:2d:8d:9f:f1:ea:d7:3b:9e:f5: 9d:f8:5b:a0:81:8e:42:ca:00:87:9f:a1:5b:0c:7c: e3:92:d2:27:d9:42:41:78:dd:08:18:d5:18:c2:8b: 7b:73:0a:38:c0:70:f2:6d:17:5c:c7:a2:90:17:ae: 28:93:e1:84:1a:63:23:21:d6:73:94:03:25:07:eb: 88:4b:d1:00:e1:78:4b:45:70:00:62:2b:d4:3a:e1: 9f:e3:db:6f:a0:86:c5:12:fb:bf:04:a8:bd:a5:a0: 14:59:3f:85:d1:94:be:b3:f4:63:f3:57:8c:9c:46: 77:ca:5a:19:ae:8f:c2:b1:22:03:fb:d8:8e:f0:80: b6:f1:b9:0f:74:c7:bb:0c:14:cd:f7:72:46:77:7f: 29:41:9a:ee:87:1f:6f:82:aa:1d:cc:bf:dd:f8:47: 0a:e3:86:38:37:20:5c:d8:90:17:b1:27:91:e9:89: ed:c8:62:aa:e4:10:94:24:82:20:02:06:57:e0:0e: 3f:25:99:d2:03:eb:e3:c5:ec:ff:bf:50:54:16:ad: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:AF:C6:01:9D:73:43:99:EF:25:17:AB:F7:00:CB:F6:05:C7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/b9e8f069-91b2-31a8-95be-93db8964f515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17/81216c68-71e2-4795-933c-05f1e22d0c17.crl X509v3 Authority Key Identifier: keyid:E7:67:85:ED:8B:EF:52:31:FC:98:2E:05:8D:26:C3:98:2A:CA:80:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81216c68-71e2-4795-933c-05f1e22d0c17.cer sbgp-ipAddrBlock: critical IPv4: 192.203.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2a:d6:9f:db:73:4a:79:7b:ee:41:38:4e:1f:37:27:41:9c: 35:e2:b5:f0:45:e7:fb:ca:24:e4:e7:5c:2a:f4:2c:26:9b:d3: 58:85:08:57:54:ac:b4:bc:a5:98:7b:74:fb:6a:bb:ca:4e:54: d1:85:5b:54:b6:0a:68:96:93:8a:7c:48:ee:c1:00:c2:ac:21: 6f:30:39:46:99:a3:7e:a4:2e:d0:b0:17:fe:85:b7:14:a4:8c: 47:9f:a7:0a:aa:02:64:14:3c:26:27:e1:e1:21:3e:09:d0:cf: 12:3e:1f:58:09:ce:cf:52:b7:a9:66:0d:8a:58:e0:0f:ba:e2: f7:bd:28:69:3a:86:13:6e:30:b7:77:d4:09:9e:ab:3e:24:f2: 44:7c:c3:64:69:0c:70:ec:a2:42:c3:33:4a:4d:3d:5c:83:e7: 99:f5:e7:11:a7:db:56:a1:a4:c6:15:bd:03:d4:f0:19:2c:47: a7:0b:65:13:f8:7e:0a:8c:32:01:d6:e7:55:88:95:0a:8c:c9: e1:7e:e7:b6:06:a2:e3:71:f5:06:41:5d:41:af:49:1a:24:21: 0d:6e:3b:cf:7c:29:6d:73:b9:31:5c:ee:7c:63:58:ae:17:f2: 1c:57:04:0e:c4:45:62:b7:63:fc:0c:6f:8e:04:9a:06:67:cc: fb:79:8a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLShEcPKdSWHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEyMTZjNjgtNzFlMi00Nzk1LTkzM2MtMDVmMWUyMmQw YzE3MB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk YTUyNTNiZDQtZDU4Yy00ODNjLWFlNDctMzRlYjlmMGE0NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcgxffZ2k9GZYMBLAW8WnEoR2HSlofAlI9sh +vku5kC+SEJoMlkc0TXUgBRzIg0K08ItjZ/x6tc7nvWd+FuggY5CygCHn6FbDHzj ktIn2UJBeN0IGNUYwot7cwo4wHDybRdcx6KQF64ok+GEGmMjIdZzlAMlB+uIS9EA 4XhLRXAAYivUOuGf49tvoIbFEvu/BKi9paAUWT+F0ZS+s/Rj81eMnEZ3yloZro/C sSID+9iO8IC28bkPdMe7DBTN93JGd38pQZruhx9vgqodzL/d+EcK44Y4NyBc2JAX sSeR6YntyGKq5BCUJIIgAgZX4A4/JZnSA+vjxez/v1BUFq3OFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWtr8YBnXNDme8lF6v3AMv2BcfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84MTIx NmM2OC03MWUyLTQ3OTUtOTMzYy0wNWYxZTIyZDBjMTcvYjllOGYwNjktOTFiMi0z MWE4LTk1YmUtOTNkYjg5NjRmNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODEyMTZjNjgtNzFlMi00Nzk1LTkz M2MtMDVmMWUyMmQwYzE3LzgxMjE2YzY4LTcxZTItNDc5NS05MzNjLTA1ZjFlMjJk MGMxNy5jcmwwHwYDVR0jBBgwFoAU52eF7YvvUjH8mC4FjSbDmCrKgNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84MTIxNmM2OC03MWUyLTQ3OTUtOTMzYy0wNWYx ZTIyZDBjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0q1p/bc0p5e+5BOE4fNydBnDXitfBF5/vKJOTnXCr0LCab01iFCFdU rLS8pZh7dPtqu8pOVNGFW1S2CmiWk4p8SO7BAMKsIW8wOUaZo36kLtCwF/6FtxSk jEefpwqqAmQUPCYn4eEhPgnQzxI+H1gJzs9St6lmDYpY4A+64ve9KGk6hhNuMLd3 1Ameqz4k8kR8w2RpDHDsokLDM0pNPVyD55n15xGn21ahpMYVvQPU8BksR6cLZRP4 fgqMMgHW51WIlQqMyeF+57YGouNx9QZBXUGvSRokIQ1uO898KW1zuTFc7nxjWK4X 8hxXBA7ERWK3Y/wMb44EmgZnzPt5inY= -----END CERTIFICATE-----Generated at Mon Jul 13 01:21:12 2026 by rpki-client