$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa File: cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa (raw, json) Hash identifier: bO67Qby0hlgQatLs3eIo7mGPBVPkR7WjS4/4Iu8sFKg= Subject key identifier: CA:8A:02:68:5B:D7:29:06:28:A5:ED:D4:41:C1:86:BC:30:37:A9:C6 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584DBD058FCB73DD79073D9CB680 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 202888 IP address blocks: 174.136.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:8f:cb:73:dd:79:07:3d:9c:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=6b79efe4-57e8-419a-b6d7-8361a3258762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:0b:eb:6c:54:70:8c:e0:8c:c8:a2:a7:0f: 9c:1b:df:18:17:85:2d:7c:d8:41:a5:d9:e3:62:fc: d1:14:58:e1:76:24:a4:10:58:64:32:90:ab:7d:1b: c6:bd:84:fe:4c:42:b3:cd:96:42:58:3c:55:74:d7: bc:b5:f0:d8:96:ad:9c:55:14:65:c3:88:e3:1c:df: f6:7e:0e:d9:ed:6c:4e:8b:7b:74:1c:a9:82:03:94: bf:6c:d1:44:ef:35:d2:62:64:1a:09:4f:40:81:68: be:27:3c:fb:22:2e:38:9c:9d:fa:4f:4c:a7:36:55: 83:a1:a0:5a:f8:c3:b6:cd:87:46:e0:b8:93:8b:f8: 63:45:b8:ec:81:4b:4e:35:ba:e1:ea:a8:88:c7:93: a7:12:f3:3d:d1:52:db:05:e3:02:d2:e1:b3:e9:00: a3:18:6b:e8:f1:3c:84:f5:d3:92:7b:39:fc:f0:3b: a5:de:9a:01:aa:c0:40:e2:da:76:fc:4c:28:69:ad: 5f:48:11:a6:77:ce:15:5e:5b:ca:86:b1:63:9c:a7: 99:01:c4:89:e1:c4:3a:1c:e1:8d:84:1f:68:a7:7e: 91:0b:5f:85:22:5b:4f:80:e4:d5:a2:f9:e8:ca:dc: e8:b3:94:5f:55:41:48:a4:0f:b3:71:12:ac:1a:5f: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:02:68:5B:D7:29:06:28:A5:ED:D4:41:C1:86:BC:30:37:A9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b5:28:f8:99:82:11:0a:18:43:1c:51:c3:0d:a2:d2:a5:a7: 16:22:43:88:a0:ae:23:17:49:fb:a6:f1:8e:81:f9:89:40:a7: 24:46:99:b5:75:a6:e1:d1:db:d9:81:04:8f:c0:49:b9:5a:c6: 2d:e2:af:bd:ab:0c:94:b2:34:6e:54:1f:be:37:4a:95:69:b5: f7:5f:e6:6e:74:b1:a5:bd:2e:65:1d:e8:d1:96:29:d2:01:c0: cc:f4:4e:6a:4e:3a:59:e6:bc:ad:fc:90:34:26:b0:28:cb:e0: fb:60:1b:b3:4f:e9:c4:03:68:3e:28:91:54:ed:6c:04:88:b2: b8:25:14:1d:b1:14:9d:4b:c2:79:a3:11:a5:e9:78:af:dd:76: 2c:ac:cc:0a:fb:81:d9:2c:d8:be:a6:69:65:5c:76:5f:5c:22: 03:ac:f9:56:51:18:97:c4:eb:b7:d2:ba:9e:ad:d8:2b:92:d0: 22:52:ce:f0:96:18:bf:e9:4c:a0:23:9e:27:7c:bd:61:c2:64: 36:ad:23:15:01:d4:f3:2b:3d:f8:20:a7:a7:8e:07:48:54:82: 22:37:b2:02:cb:55:8a:1d:9e:06:66:a0:54:d6:09:3f:04:0d: 86:2f:fb:37:c5:c1:27:46:ff:ee:e6:40:08:79:c5:7e:e2:97: 2f:09:fd:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BY/Lc915Bz2ctoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NmI3OWVmZTQtNTdlOC00MTlhLWI2ZDctODM2MWEzMjU4NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3ML62xUcIzgjMiipw+cG98YF4UtfNhBpdnj YvzRFFjhdiSkEFhkMpCrfRvGvYT+TEKzzZZCWDxVdNe8tfDYlq2cVRRlw4jjHN/2 fg7Z7WxOi3t0HKmCA5S/bNFE7zXSYmQaCU9AgWi+Jzz7Ii44nJ36T0ynNlWDoaBa +MO2zYdG4LiTi/hjRbjsgUtONbrh6qiIx5OnEvM90VLbBeMC0uGz6QCjGGvo8TyE 9dOSezn88Dul3poBqsBA4tp2/Ewoaa1fSBGmd84VXlvKhrFjnKeZAcSJ4cQ6HOGN hB9op36RC1+FIltPgOTVovnoytzos5RfVUFIpA+zcRKsGl90rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqKAmhb1ykGKKXt1EHBhrwwN6nGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2IzMmNlNjktYmU0OC0z NGU1LTlmOTAtNmE1YWZiOGZhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD21KPiZghEKGEMcUcMNotKlpxYiQ4igriMXSfum8Y6B+YlApyRGmbV1 puHR29mBBI/ASblaxi3ir72rDJSyNG5UH743SpVptfdf5m50saW9LmUd6NGWKdIB wMz0TmpOOlnmvK38kDQmsCjL4PtgG7NP6cQDaD4okVTtbASIsrglFB2xFJ1Lwnmj EaXpeK/ddiyszAr7gdks2L6maWVcdl9cIgOs+VZRGJfE67fSup6t2CuS0CJSzvCW GL/pTKAjnid8vWHCZDatIxUB1PMrPfggp6eOB0hUgiI3sgLLVYodngZmoFTWCT8E DYYv+zfFwSdG/+7mQAh5xX7ily8J/XE= -----END CERTIFICATE-----Generated at Wed May 13 14:12:34 2026 by rpki-client