$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa File: 2ab65280-fd1c-322e-bb70-8afda5598e79.roa (raw, json) Hash identifier: pUunPUo/VkxfY9ar922fzncuH7aAvxH75PzMe5m2Ysg= Subject key identifier: 88:10:A5:39:33:64:AC:DE:70:6C:1D:89:7B:24:7D:D1:61:D6:17:01 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584E69A4B613DD49C9560B9C4980 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 402139 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b6:13:dd:49:c9:56:0b:9c:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=9ebc6332-5aaf-492a-b302-04e1623edebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:28:e4:07:20:c0:57:32:55:da:2d:18:42: ea:43:a0:5a:4b:de:85:fa:9b:4e:6e:53:d3:a7:16: d3:cd:76:0f:26:16:d0:26:5e:06:7e:c0:f0:84:ba: 02:32:79:26:07:16:50:fd:fd:2d:33:98:84:bf:bb: a2:d4:86:d2:36:6b:b3:3f:63:bc:87:8c:cc:38:68: 35:71:c5:f9:22:d5:69:02:df:a2:29:6c:a0:ca:50: 82:56:3d:22:ce:e9:4b:41:8b:b7:20:96:dc:1d:c7: 0c:82:1a:89:70:d0:fc:1d:ae:e0:66:0f:4d:b2:db: 9a:d0:79:57:db:90:3f:e0:d6:1c:f5:71:7f:cf:cb: b5:e7:0e:d7:26:05:67:41:59:c4:32:d6:a5:bb:1e: d8:bc:86:63:a2:4f:0c:02:ae:07:ae:f6:0d:6b:84: 6d:da:4e:b2:69:69:57:92:4a:68:52:e9:40:67:50: ab:78:16:a2:42:e7:2e:f0:6c:72:54:65:3c:f6:e0: 36:d9:dc:40:b2:95:6d:5f:11:1b:89:3b:e6:3b:ca: 8b:51:5a:07:3b:e2:47:cc:19:7d:2f:1f:4c:85:07: d8:dd:df:17:9f:22:68:11:f5:45:95:bb:36:ac:be: 20:8e:c2:9d:7d:0f:8f:75:43:b7:66:46:be:07:b0: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:10:A5:39:33:64:AC:DE:70:6C:1D:89:7B:24:7D:D1:61:D6:17:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:47:6a:97:57:2f:71:ae:2d:4e:d8:3b:ff:18:6d:0d:29:25: 1a:f0:a2:32:ee:a5:13:45:1c:27:70:6d:19:01:22:44:d9:d9: dd:7e:ff:63:96:db:f3:de:92:4f:34:07:1c:f0:67:f4:1f:7a: 34:1e:54:76:ad:4e:8d:94:85:a4:04:69:2b:cd:8c:cf:f4:42: 4f:2c:dc:d8:18:6b:1c:68:e9:c9:17:f8:3f:f0:dd:3e:e9:a3: 1f:16:a2:2a:c8:1e:aa:22:d7:05:69:97:79:41:45:12:09:3f: fc:cc:b1:25:fc:5b:e0:82:bd:8c:aa:eb:10:e2:97:7e:eb:ae: 89:3b:f6:2f:2b:45:e2:1a:87:48:94:ae:e2:55:6b:25:9c:1e: 74:da:a0:aa:bd:1e:49:ad:0a:3d:a1:88:1c:65:e5:26:c5:cc: 59:f3:46:af:7c:d2:12:62:c2:82:c6:07:0c:db:76:1c:84:76: 91:c9:bf:65:9c:ac:90:24:54:41:06:b5:ee:cb:3f:f5:d5:b5: cd:ca:85:be:7a:a2:02:ad:a1:db:3f:e2:88:16:75:9d:ca:6b: e0:73:fe:25:4a:20:1a:87:92:6b:be:81:81:8d:bf:e6:b0:eb: 22:53:da:63:3f:5b:a1:6c:a2:a8:85:c2:06:bd:55:6a:9f:a8: 9d:93:d9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLYT3UnJVgucSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk OWViYzYzMzItNWFhZi00OTJhLWIzMDItMDRlMTYyM2VkZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw24o5AcgwFcyVdotGELqQ6BaS96F+ptOblPT pxbTzXYPJhbQJl4GfsDwhLoCMnkmBxZQ/f0tM5iEv7ui1IbSNmuzP2O8h4zMOGg1 ccX5ItVpAt+iKWygylCCVj0izulLQYu3IJbcHccMghqJcND8Ha7gZg9Nstua0HlX 25A/4NYc9XF/z8u15w7XJgVnQVnEMtalux7YvIZjok8MAq4HrvYNa4Rt2k6yaWlX kkpoUulAZ1CreBaiQucu8GxyVGU89uA22dxAspVtXxEbiTvmO8qLUVoHO+JHzBl9 Lx9MhQfY3d8XnyJoEfVFlbs2rL4gjsKdfQ+PdUO3Zka+B7BQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgQpTkzZKzecGwdiXskfdFh1hcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMmFiNjUyODAtZmQxYy0z MjJlLWJiNzAtOGFmZGE1NTk4ZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRHapdXL3GuLU7YO/8YbQ0pJRrwojLupRNFHCdwbRkBIkTZ2d1+/2OW 2/Pekk80BxzwZ/QfejQeVHatTo2UhaQEaSvNjM/0Qk8s3NgYaxxo6ckX+D/w3T7p ox8WoirIHqoi1wVpl3lBRRIJP/zMsSX8W+CCvYyq6xDil37rrok79i8rReIah0iU ruJVayWcHnTaoKq9HkmtCj2hiBxl5SbFzFnzRq980hJiwoLGBwzbdhyEdpHJv2Wc rJAkVEEGte7LP/XVtc3Khb56ogKtods/4ogWdZ3Ka+Bz/iVKIBqHkmu+gYGNv+aw 6yJT2mM/W6FsoqiFwga9VWqfqJ2T2V0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:38 2026 by rpki-client