$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa File: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (raw, json) Hash identifier: ks0duiph3q2+vzUgLsbtAlp3/tGBnJZRCCTypHl8XVU= Subject key identifier: 74:40:C4:24:CB:80:A8:3B:C1:0A:B4:67:42:9A:0A:4A:AC:35:8B:F4 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584E3A2F2608A1807E603910C380 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 23316 IP address blocks: 64.136.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:26:08:a1:80:7e:60:39:10:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=d5feeb04-8607-4724-839a-fa59c9e33720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:de:38:75:a1:a2:a4:a5:d5:d3:cb:0c:9b: 76:38:df:e4:39:e6:3c:11:06:71:c1:0f:6a:b3:54: f3:d2:e9:72:0e:0a:5e:9c:74:7c:bd:a6:5e:5e:82: ab:dd:c5:5f:8f:c9:e4:c5:c5:bf:23:cb:ca:7d:b9: fe:bd:60:89:8c:1c:db:d9:30:7e:a5:87:89:11:e4: ab:c9:e5:7c:4a:69:c3:90:6a:86:c2:ef:b3:ee:d6: 7d:b6:ef:9b:f9:ab:dd:cb:bd:98:14:87:bc:62:12: ac:6b:89:8d:08:18:a9:f0:ee:05:54:b9:63:70:b5: 58:d6:2c:01:6b:ec:02:ef:5f:2f:20:61:db:44:0e: 6b:a6:99:67:43:78:c6:07:27:5a:68:78:2b:63:58: 83:d2:38:47:04:5e:c3:23:17:7a:8d:5e:4c:22:19: 2a:66:c3:6d:3f:97:16:fc:2b:3f:68:7a:59:6b:02: c9:fa:d8:63:a1:58:46:d3:e0:87:d5:60:f8:08:f9: 64:23:15:b2:3b:a9:40:75:b5:67:0d:ca:7b:cd:aa: fd:3c:a8:c4:27:8e:94:f2:c1:8a:64:e4:e0:1a:8c: 25:71:a6:6a:cd:33:a0:0a:ca:6a:9b:c9:e6:f3:ce: b1:23:49:3a:4c:1b:07:bb:d5:08:ea:7e:f4:e6:ea: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:40:C4:24:CB:80:A8:3B:C1:0A:B4:67:42:9A:0A:4A:AC:35:8B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d2:3f:50:f8:98:8f:45:f8:a7:03:a9:33:9d:04:57:5a:83: ec:14:b5:e1:1a:6f:84:f3:9e:51:ae:7c:5b:e0:39:db:6f:16: 0a:2b:0d:03:73:34:f0:77:b6:84:91:ff:b5:91:fc:31:f1:37: 7e:14:98:13:f8:5f:c7:52:74:9b:5d:68:05:14:7e:a0:64:04: c8:02:ca:ba:d4:2a:a8:0e:e0:ab:c3:b3:de:de:8a:9b:64:40: fb:dd:3b:4a:91:83:46:ce:1e:95:73:db:41:12:a1:4a:8d:dc: af:b2:5f:65:8d:d5:82:da:34:b3:05:7b:52:a0:ff:22:85:cf: 6a:90:87:30:3b:50:d5:2f:f6:e4:98:08:ca:28:e9:97:81:ec: db:ad:f3:09:27:dc:bb:61:6c:1e:1d:95:40:f7:83:e9:ab:8a: f9:8d:09:50:b9:62:c3:78:6e:22:df:8e:f7:94:7c:38:d8:6b: fc:66:91:f9:52:20:ac:0d:58:94:53:cc:07:29:42:f5:bc:40: 84:b8:f7:d8:d8:5a:db:ad:aa:a5:62:51:66:8c:36:08:0c:f6: b0:73:df:ee:04:24:01:75:37:b9:d6:dd:ab:fa:ec:e3:17:74: c8:ae:8b:e2:7b:1d:da:29:f7:0a:51:87:d1:64:83:c8:e8:e9: 41:48:3d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LyYIoYB+YDkQw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZDVmZWViMDQtODYwNy00NzI0LTgzOWEtZmE1OWM5ZTMzNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqfeOHWhoqSl1dPLDJt2ON/kOeY8EQZxwQ9q s1Tz0ulyDgpenHR8vaZeXoKr3cVfj8nkxcW/I8vKfbn+vWCJjBzb2TB+pYeJEeSr yeV8SmnDkGqGwu+z7tZ9tu+b+avdy72YFIe8YhKsa4mNCBip8O4FVLljcLVY1iwB a+wC718vIGHbRA5rpplnQ3jGBydaaHgrY1iD0jhHBF7DIxd6jV5MIhkqZsNtP5cW /Cs/aHpZawLJ+thjoVhG0+CH1WD4CPlkIxWyO6lAdbVnDcp7zar9PKjEJ46U8sGK ZOTgGowlcaZqzTOgCspqm8nm886xI0k6TBsHu9UI6n705uosqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRAxCTLgKg7wQq0Z0KaCkqsNYv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMzVjNjhkYjEtYjI3Zi0z NDI4LWIzMTItYzAzZDg2ZTRmOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7SP1D4mI9F+KcDqTOdBFdag+wUteEab4TznlGufFvgOdtvFgorDQNz NPB3toSR/7WR/DHxN34UmBP4X8dSdJtdaAUUfqBkBMgCyrrUKqgO4KvDs97eiptk QPvdO0qRg0bOHpVz20ESoUqN3K+yX2WN1YLaNLMFe1Kg/yKFz2qQhzA7UNUv9uSY CMoo6ZeB7Nut8wkn3LthbB4dlUD3g+mrivmNCVC5YsN4biLfjveUfDjYa/xmkflS IKwNWJRTzAcpQvW8QIS499jYWtutqqViUWaMNggM9rBz3+4EJAF1N7nW3av67OMX dMiui+J7Hdop9wpRh9Fkg8jo6UFIPXE= -----END CERTIFICATE-----Generated at Sat Jun 20 15:19:03 2026 by rpki-client