$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa File: 05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa (raw, json) Hash identifier: ufqtKESCdwVL/JPmzSTFdOYbLpF2UvymPIWlMCGdsqQ= Subject key identifier: F9:1A:30:B1:11:0A:3A:67:90:81:77:5A:BD:B4:5E:AB:49:FB:30:46 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584E7E94E1B525D6C0C3D1E20380 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 55039 IP address blocks: 136.242.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e1:b5:25:d6:c0:c3:d1:e2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3d2281fe-b7c6-4e15-b3b9-2b872ecca6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:28:91:09:9a:46:a7:d8:2e:0c:f5:7d:9f: 7b:41:45:50:67:c1:e2:5f:a3:f1:cb:0e:1f:28:2e: 04:2e:6e:c1:f5:fa:77:8f:f6:82:02:15:a1:19:14: ba:fc:3c:6a:6b:e5:1b:f8:30:6e:ff:d0:0c:fb:31: 88:e0:25:fa:8e:31:17:aa:c3:e6:27:2e:8c:c8:80: 36:15:64:f2:e8:d8:67:e0:77:df:c5:14:51:9a:5f: b9:c4:34:c4:24:ca:d5:e4:92:8c:87:28:80:af:e9: 25:06:6b:f9:f1:3e:e5:b5:af:09:83:f8:ad:dc:23: d0:9e:8d:c3:bc:12:67:5b:15:af:0c:73:a1:a3:9c: 79:97:de:27:73:86:2c:87:8f:1a:48:c3:41:63:c3: 99:d3:77:5c:43:94:68:aa:3a:eb:b0:ff:2b:9f:4a: 55:81:f5:c9:a0:9a:fc:66:4f:8f:ca:96:3e:c6:2f: 48:55:81:79:a6:fe:77:42:61:e3:7d:88:f2:c4:4b: 77:36:c9:f1:1e:19:d2:ca:f0:ae:da:b1:2b:c4:5f: be:b0:62:fa:e1:77:ef:7e:bc:07:7d:a0:21:b4:78: b5:14:2a:b9:ba:4a:d0:36:2d:a9:74:c6:48:4a:67: 09:c0:5d:e4:78:0f:ed:53:37:1e:2d:48:97:1e:9f: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:30:B1:11:0A:3A:67:90:81:77:5A:BD:B4:5E:AB:49:FB:30:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 136.242.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:27:71:83:d4:54:aa:c1:73:cc:29:f9:8d:20:8e:de:d5:e1: bd:5d:6e:6c:a5:3c:14:11:09:65:3c:d5:15:bb:19:db:d4:05: bf:8a:be:15:c1:97:f7:55:7e:7d:83:64:3a:49:d3:95:8b:06: d8:bb:bb:2d:36:40:00:9e:09:fe:fb:20:fd:1a:53:01:ad:fe: b7:65:19:d3:39:07:eb:4c:ac:ef:85:b0:8d:ef:1e:09:16:e1: d8:44:70:1b:b1:de:75:fa:5c:84:47:f9:04:5a:9f:f5:f2:e5: 6e:03:a0:3b:1f:1a:a9:e3:e0:2c:8f:98:62:8d:ef:1b:ca:91: 97:09:6a:a4:cd:3d:39:02:91:06:97:fd:02:60:57:20:bc:b1: 8d:07:73:5d:0c:3e:da:60:17:b9:27:7b:33:92:cc:c7:55:e0: 13:c6:09:fc:ae:fc:45:62:ed:2a:04:20:c1:ec:db:c6:57:72: 52:2a:e7:2f:95:db:68:68:27:97:6b:91:2f:16:96:ad:d9:8c: be:6f:5b:e9:68:ed:f6:d5:b8:58:2e:64:48:ea:be:81:d9:57: 38:a5:1d:64:eb:fb:ed:aa:37:98:c3:0e:ea:8b:cf:5f:89:3d: b0:d5:b8:04:b6:c4:b9:7b:3d:d4:3f:ff:2e:dc:de:70:45:54: 68:62:38:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOG1JdbAw9HiA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk M2QyMjgxZmUtYjdjNi00ZTE1LWIzYjktMmI4NzJlY2NhNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3kokQmaRqfYLgz1fZ97QUVQZ8HiX6Pxyw4f KC4ELm7B9fp3j/aCAhWhGRS6/Dxqa+Ub+DBu/9AM+zGI4CX6jjEXqsPmJy6MyIA2 FWTy6Nhn4HffxRRRml+5xDTEJMrV5JKMhyiAr+klBmv58T7lta8Jg/it3CPQno3D vBJnWxWvDHOho5x5l94nc4Ysh48aSMNBY8OZ03dcQ5RoqjrrsP8rn0pVgfXJoJr8 Zk+PypY+xi9IVYF5pv53QmHjfYjyxEt3NsnxHhnSyvCu2rErxF++sGL64XfvfrwH faAhtHi1FCq5ukrQNi2pdMZISmcJwF3keA/tUzceLUiXHp9HywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkaMLERCjpnkIF3Wr20XqtJ+zBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMDVhYTJkNTEtNGU5ZS0z MjI4LThmMWItY2YwZTI5NDMwNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIncYPUVKrBc8wp+Y0gjt7V4b1dbmylPBQRCWU81RW7GdvUBb+KvhXB l/dVfn2DZDpJ05WLBti7uy02QACeCf77IP0aUwGt/rdlGdM5B+tMrO+FsI3vHgkW 4dhEcBux3nX6XIRH+QRan/Xy5W4DoDsfGqnj4CyPmGKN7xvKkZcJaqTNPTkCkQaX /QJgVyC8sY0Hc10MPtpgF7knezOSzMdV4BPGCfyu/EVi7SoEIMHs28ZXclIq5y+V 22hoJ5drkS8Wlq3ZjL5vW+lo7fbVuFguZEjqvoHZVzilHWTr++2qN5jDDuqLz1+J PbDVuAS2xLl7PdQ//y7c3nBFVGhiOOY= -----END CERTIFICATE-----Generated at Fri Jul 24 22:16:42 2026 by rpki-client