$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa File: cece6c8f-010f-3c85-a43d-246f8147d7f7.roa (raw, json) Hash identifier: vXnIS595rbeL+9OYpkjvoGLfWFwjGls2toeQq0jL+XQ= Subject key identifier: D0:0B:7B:48:61:A2:40:A8:2F:65:BA:8C:E3:B3:7A:F9:A3:42:2D:DC Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584D237A695670E2D2A9E8598740 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 14543 IP address blocks: 136.227.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:69:56:70:e2:d2:a9:e8:59:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3554c27f-eec9-40aa-87d6-a205f094d030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:20:27:d8:3d:b7:06:e4:0c:8d:60:84:51: ec:ef:82:ce:ca:5e:75:cf:71:f3:a0:5a:8b:dc:a0: a5:ee:e8:dd:29:d0:09:df:c8:de:0f:55:e5:3a:ee: d1:61:4e:9f:96:e4:72:0f:f7:5e:6a:30:fb:2b:e8: ce:cb:b0:4c:2c:f6:26:f2:1d:1d:ae:9c:ca:f9:11: b1:23:2f:84:cc:22:51:b8:23:34:96:41:c9:d0:c3: 59:f3:38:ec:85:f5:6f:84:3d:c5:79:bc:e6:c4:58: de:88:a1:a3:9b:28:55:93:eb:00:03:62:9e:6d:fc: a2:59:21:9e:2c:f8:82:74:43:a8:47:f4:67:35:11: 4f:d2:79:6e:39:2f:4d:50:51:23:58:11:87:43:17: 94:91:6f:40:9c:e2:21:9b:32:f4:90:48:16:9f:2c: ee:b2:d8:2c:3d:a3:6b:28:8d:47:0a:5d:ef:90:a8: 18:cd:50:03:6f:f3:f2:ba:da:bc:30:f2:c0:10:89: 2e:1f:97:8f:8c:84:89:5b:d0:05:dc:0f:e2:1c:31: e6:d9:f1:22:7e:97:13:30:f1:1d:21:81:af:7c:15: d4:7c:1b:29:a4:73:a9:a7:87:79:4c:29:66:fe:0d: 80:bc:5b:2c:02:86:9b:e3:52:6b:45:e7:a1:a6:8c: ed:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:7B:48:61:A2:40:A8:2F:65:BA:8C:E3:B3:7A:F9:A3:42:2D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 136.227.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7e:47:cf:15:14:5e:66:dd:83:47:2d:50:62:86:41:17:ac: 53:33:86:65:e8:cf:39:27:63:3b:5d:bd:c6:19:c5:93:77:79: d4:bc:7b:e2:f1:8a:15:83:4c:71:06:93:83:da:2c:0c:70:78: 63:47:4d:30:f7:c0:0f:b4:d5:56:f1:a9:07:c9:51:b5:55:4c: b9:2d:a7:dc:2e:14:14:b2:cc:22:9a:6d:65:7d:b2:8b:c5:57: 34:2c:50:f0:4d:9f:7b:aa:b9:f0:f8:e5:c7:29:b0:65:c5:aa: ef:11:ff:16:3d:92:88:88:9a:c8:2b:24:57:da:17:b9:64:3f: eb:9b:c9:1a:e9:d1:ff:5e:f7:a3:e3:d1:06:6e:18:79:4c:04: be:58:ef:95:60:53:9c:22:d6:bb:b8:66:2d:d7:40:8f:10:02: 1b:e6:49:a7:a9:c8:32:38:7c:57:d3:63:fb:d7:89:c9:11:25: 7d:d4:f5:9f:41:e6:d1:45:2a:ea:da:f7:48:9e:66:7d:d3:53: e1:2a:ec:45:d3:3d:d7:b6:7f:c4:fd:59:23:f0:6a:57:e3:da: 1e:d8:70:aa:a4:e6:f8:2c:55:f5:c9:bb:ad:8e:8f:36:08:ba: 77:81:1f:44:d8:74:4b:7c:c5:8a:c8:e7:18:18:f1:97:05:cc: bc:e0:3c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemlWcOLSqehZh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzU1NGMyN2YtZWVjOS00MGFhLTg3ZDYtYTIwNWYwOTRkMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwUgJ9g9twbkDI1ghFHs74LOyl51z3HzoFqL 3KCl7ujdKdAJ38jeD1XlOu7RYU6fluRyD/deajD7K+jOy7BMLPYm8h0drpzK+RGx Iy+EzCJRuCM0lkHJ0MNZ8zjshfVvhD3FebzmxFjeiKGjmyhVk+sAA2KebfyiWSGe LPiCdEOoR/RnNRFP0nluOS9NUFEjWBGHQxeUkW9AnOIhmzL0kEgWnyzustgsPaNr KI1HCl3vkKgYzVADb/Pyutq8MPLAEIkuH5ePjISJW9AF3A/iHDHm2fEifpcTMPEd IYGvfBXUfBsppHOpp4d5TClm/g2AvFssAoab41JrReehpoztwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNALe0hhokCoL2W6jOOzevmjQi3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvY2VjZTZjOGYtMDEwZi0z Yzg1LWE0M2QtMjQ2ZjgxNDdkN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiONAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt+R88VFF5m3YNHLVBihkEXrFMzhmXozzknYztdvcYZxZN3edS8e+Lx ihWDTHEGk4PaLAxweGNHTTD3wA+01VbxqQfJUbVVTLktp9wuFBSyzCKabWV9sovF VzQsUPBNn3uqufD45ccpsGXFqu8R/xY9koiImsgrJFfaF7lkP+ubyRrp0f9e96Pj 0QZuGHlMBL5Y75VgU5wi1ru4Zi3XQI8QAhvmSaepyDI4fFfTY/vXickRJX3U9Z9B 5tFFKura90ieZn3TU+Eq7EXTPde2f8T9WSPwalfj2h7YcKqk5vgsVfXJu62OjzYI uneBH0TYdEt8xYrI5xgY8ZcFzLzgPBQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:28 2026 by rpki-client