$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: hkAhwcYOoUUCPvbn1bAkPJB74O2YNTasDgx/sOg7bIo= Subject key identifier: F0:85:27:39:2B:AC:6B:23:BB:DA:3C:FA:1A:DE:EB:6B:64:7C:FE:9C Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584E5084A11FDB6DF0EF0A979C40 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a1:1f:db:6d:f0:ef:0a:97:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=cc42546a-68f9-4fe8-b7df-8c5a5528e4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3f:3e:9b:e2:4c:50:60:f8:f6:ab:e3:91:7f: 72:66:63:2b:e9:39:37:30:b0:05:87:e1:86:7c:25: 28:e7:9a:c1:f1:c8:79:da:2a:ea:31:66:ee:a3:c0: 08:24:7c:06:a6:ad:b6:34:4e:ea:34:a4:50:2e:95: 35:4a:ce:f4:63:6b:89:54:91:63:c0:47:7d:14:07: 53:ea:7f:d5:00:a5:b5:56:a1:12:c1:da:e2:aa:82: 7c:f8:76:4a:c2:cc:5c:c8:38:bc:f1:c5:dc:7f:15: a1:77:38:ba:de:93:62:48:4e:16:20:48:7b:d6:3e: d9:a7:e2:93:ab:65:5c:15:32:eb:1c:c2:29:8e:d0: da:0c:09:2a:fb:ce:10:10:a4:37:0b:b4:18:63:4a: 0e:24:c5:ee:f6:de:bd:05:82:38:cf:5a:8a:5d:e4: a1:e3:46:d4:d7:1c:96:db:b3:15:7f:14:de:30:cc: 93:67:9c:69:9c:eb:88:71:40:7f:9b:59:92:e2:7e: 0f:b5:cf:1d:64:5c:c7:e3:4c:d3:8c:92:da:11:8c: 80:57:4f:e4:b3:e9:ed:7d:eb:13:f9:eb:24:06:dd: 1a:cf:1f:92:6e:8d:25:8a:9b:e9:0f:da:59:60:1b: 2f:13:97:34:3e:35:5c:d1:dd:5d:7c:4c:ca:32:e8: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:27:39:2B:AC:6B:23:BB:DA:3C:FA:1A:DE:EB:6B:64:7C:FE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:57:07:79:33:0f:f9:64:0e:68:c8:f6:ba:5c:61:b1:82:20: 1c:66:41:83:f6:d2:9a:2f:50:19:34:ac:89:b2:91:70:d9:41: 8d:8a:12:f8:be:b1:27:90:f6:bd:84:b8:ac:47:40:30:5f:b6: 52:cc:83:b5:72:9b:a2:df:8e:8e:67:d2:3c:91:20:0b:6c:c2: 51:ea:82:3b:e0:51:1d:c4:0e:db:39:bc:cb:4c:cb:b2:f3:41: 24:5a:fb:f1:42:d7:a2:bc:69:13:c5:23:d3:43:db:c6:29:48: 03:2e:76:5a:d4:aa:ac:5b:b7:03:90:40:ae:89:c8:cf:1a:2b: 4e:54:6d:c9:21:1a:e4:4c:be:75:59:31:4b:4b:83:90:4a:34: 84:ad:01:3f:fa:bd:2a:cd:02:ce:ee:da:a3:3d:46:15:90:08: f6:c4:c6:68:5e:50:f6:18:25:39:50:16:8b:e4:ed:9f:ef:79: fb:a1:f9:18:c6:00:96:a0:9b:0e:9a:ca:74:af:12:e7:6e:e0: 99:f2:49:99:c9:2d:94:31:30:28:44:3f:9f:8e:2a:e5:0e:36: 6a:13:01:37:b4:36:c9:ff:d1:e7:ed:82:ae:cd:24:a3:46:81: 88:dd:2e:e2:56:5d:b0:c6:f6:a4:c2:c2:b4:31:c8:f0:24:31: 31:6d:c7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKEf223w7wqXnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk Y2M0MjU0NmEtNjhmOS00ZmU4LWI3ZGYtOGM1YTU1MjhlNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT8+m+JMUGD49qvjkX9yZmMr6Tk3MLAFh+GG fCUo55rB8ch52irqMWbuo8AIJHwGpq22NE7qNKRQLpU1Ss70Y2uJVJFjwEd9FAdT 6n/VAKW1VqESwdriqoJ8+HZKwsxcyDi88cXcfxWhdzi63pNiSE4WIEh71j7Zp+KT q2VcFTLrHMIpjtDaDAkq+84QEKQ3C7QYY0oOJMXu9t69BYI4z1qKXeSh40bU1xyW 27MVfxTeMMyTZ5xpnOuIcUB/m1mS4n4Ptc8dZFzH40zTjJLaEYyAV0/ks+ntfesT +eskBt0azx+Sbo0lipvpD9pZYBsvE5c0PjVc0d1dfEzKMuh+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCFJzkrrGsju9o8+hre62tkfP6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZXB3kzD/lkDmjI9rpcYbGCIBxmQYP20povUBk0rImykXDZQY2KEvi+ sSeQ9r2EuKxHQDBftlLMg7Vym6Lfjo5n0jyRIAtswlHqgjvgUR3EDts5vMtMy7Lz QSRa+/FC16K8aRPFI9ND28YpSAMudlrUqqxbtwOQQK6JyM8aK05UbckhGuRMvnVZ MUtLg5BKNIStAT/6vSrNAs7u2qM9RhWQCPbExmheUPYYJTlQFovk7Z/vefuh+RjG AJagmw6aynSvEudu4JnySZnJLZQxMChEP5+OKuUONmoTATe0Nsn/0eftgq7NJKNG gYjdLuJWXbDG9qTCwrQxyPAkMTFtx/o= -----END CERTIFICATE-----Generated at Thu Jul 23 21:38:08 2026 by rpki-client