$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/259366f0-f5b8-329c-9cc3-9e769af60c46.roa File: 259366f0-f5b8-329c-9cc3-9e769af60c46.roa (raw, json) Hash identifier: zU9qEZHwTZriQDCWN2Y6r6GcN1hAT81s9fJ3HiCknLY= Subject key identifier: D4:71:61:1C:70:19:86:F6:91:09:8D:40:14:66:47:43:3C:FA:61:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE150AAEA2603DC4075F72F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/259366f0-f5b8-329c-9cc3-9e769af60c46.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 54253 IP address blocks: 157.137.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:aa:ea:26:03:dc:40:75:f7:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=c5e67991-f91d-4c97-966a-f0cd18986ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:07:47:74:1c:f2:3a:40:c5:c1:94:70:1f: 6f:de:7f:3b:41:36:56:75:64:d1:c9:13:c4:6c:39: c4:ca:60:a9:cf:03:a2:f1:cd:c0:2d:be:f3:b7:29: 6f:87:f1:bd:9c:79:8c:5c:c8:77:50:de:c4:a3:33: e2:11:4c:40:cd:c6:95:a5:0f:4a:7c:c7:46:ee:65: 2e:44:2f:5c:c0:5a:d3:93:79:12:91:65:8e:f9:61: f5:95:17:46:8d:3d:d4:b0:4c:36:43:6a:3c:3c:33: 59:41:26:15:92:5c:d3:09:b7:0f:36:4c:4b:07:b6: e6:2c:7a:22:d3:39:b2:e0:6a:d2:69:29:70:7c:e2: 2b:73:0f:8c:b0:25:c8:c7:99:70:94:04:f2:43:cf: 54:36:c7:58:fb:a5:41:55:be:76:47:79:3d:6f:98: 82:9d:90:f6:2b:bf:19:1f:41:49:ac:f4:fe:74:49: a5:a5:f9:83:51:44:f6:88:85:6d:de:90:42:a1:ef: 02:b8:2e:07:c0:c9:1d:c8:ee:60:6c:f2:2b:89:a3: f0:91:bb:d7:b9:d9:f4:9c:8d:44:96:a2:db:b9:66: e9:26:49:d4:09:7b:d1:36:7f:cc:e5:4b:cf:a9:8f: 05:40:1d:c9:b8:3d:b5:16:97:c3:df:fe:ed:a7:3f: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:71:61:1C:70:19:86:F6:91:09:8D:40:14:66:47:43:3C:FA:61:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/259366f0-f5b8-329c-9cc3-9e769af60c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:1b:22:ce:ab:f2:23:66:e0:73:34:be:8d:b7:37:b9:83: 68:5a:a9:6c:c2:aa:af:c6:88:df:9b:64:be:e0:c5:42:6b:21: 93:ad:da:83:ae:e8:85:71:7e:f4:1c:58:a9:8b:20:d6:0a:a9: 0e:d7:9b:95:59:92:2d:11:6a:0f:fd:74:fd:f9:ca:a4:57:27: ab:cc:52:50:3e:45:00:7d:00:53:d8:9f:ad:13:dc:1c:d8:70: fb:13:29:8e:55:10:f4:82:18:21:d2:5d:74:ea:36:64:1d:8b: 15:dd:6f:34:5d:84:c2:69:30:09:d2:b1:f0:cf:41:3d:c0:f6: b1:a9:5b:19:66:87:cd:4d:b2:da:db:b1:f0:54:14:c2:b6:07: 08:92:49:10:f3:56:92:0c:d1:a4:ee:f3:ab:d5:2b:88:a8:1e: a9:02:ae:10:1e:a2:e8:2b:7e:5f:65:51:99:17:b8:4d:da:1b: 78:09:52:28:88:86:a5:c0:80:c2:4e:15:c6:58:d7:ea:1e:c5: ca:81:0b:d8:b9:f4:5f:52:9f:ef:6f:0d:e8:f8:52:ce:28:c7: 65:8a:48:2e:de:7f:1c:d3:28:43:cb:9c:cd:48:7f:58:44:25: f7:a8:17:c5:73:3f:46:74:ff:9c:3c:bc:2a:40:fd:91:2b:44: 22:87:c8:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKrqJgPcQHX3LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk YzVlNjc5OTEtZjkxZC00Yzk3LTk2NmEtZjBjZDE4OTg2YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CQHR3Qc8jpAxcGUcB9v3n87QTZWdWTRyRPE bDnEymCpzwOi8c3ALb7ztylvh/G9nHmMXMh3UN7EozPiEUxAzcaVpQ9KfMdG7mUu RC9cwFrTk3kSkWWO+WH1lRdGjT3UsEw2Q2o8PDNZQSYVklzTCbcPNkxLB7bmLHoi 0zmy4GrSaSlwfOIrcw+MsCXIx5lwlATyQ89UNsdY+6VBVb52R3k9b5iCnZD2K78Z H0FJrPT+dEmlpfmDUUT2iIVt3pBCoe8CuC4HwMkdyO5gbPIriaPwkbvXudn0nI1E lqLbuWbpJknUCXvRNn/M5UvPqY8FQB3JuD21FpfD3/7tpz+XLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRxYRxwGYb2kQmNQBRmR0M8+mGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjU5MzY2ZjAtZjViOC0z MjljLTljYzMtOWU3NjlhZjYwYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADizGyLOq/IjZuBzNL6Ntze5g2haqWzCqq/GiN+bZL7gxUJrIZOt2oOu 6IVxfvQcWKmLINYKqQ7Xm5VZki0Rag/9dP35yqRXJ6vMUlA+RQB9AFPYn60T3BzY cPsTKY5VEPSCGCHSXXTqNmQdixXdbzRdhMJpMAnSsfDPQT3A9rGpWxlmh81Nstrb sfBUFMK2BwiSSRDzVpIM0aTu86vVK4ioHqkCrhAeougrfl9lUZkXuE3aG3gJUiiI hqXAgMJOFcZY1+oexcqBC9i59F9Sn+9vDej4Us4ox2WKSC7efxzTKEPLnM1If1hE JfeoF8VzP0Z0/5w8vCpA/ZErRCKHyJY= -----END CERTIFICATE-----Generated at Thu May 28 17:05:57 2026 by rpki-client