$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/36db5741-694a-3f57-b452-6148011eb6e5.roa File: 36db5741-694a-3f57-b452-6148011eb6e5.roa (raw, json) Hash identifier: te0FEmcT65QCGcPm/XhkKM2/3U84F03SzvY8fwI38zw= Subject key identifier: 2D:09:0D:85:5A:69:BC:54:76:8B:6A:D8:1A:7F:12:0A:C4:3B:12:44 Certificate issuer: /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Certificate serial: 010D0C9F4328584D8C2A9ED64E845A41546E61C0 Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/36db5741-694a-3f57-b452-6148011eb6e5.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 208.75.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9e:d6:4e:84:5a:41:54:6e:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=75ab0677-b74f-4663-855d-d212f1e674af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:07:79:de:44:33:3b:61:38:57:4d:35:28: 0a:9e:c2:4a:ac:52:36:7b:b0:4e:b7:ca:26:bd:54: 2b:1a:06:47:b6:b2:30:1c:d8:26:cc:e9:95:a5:bd: 6a:5a:ab:71:6f:d0:fe:93:78:dc:07:a9:e6:d8:3b: c9:43:ca:fa:9d:5a:56:c4:98:11:7e:49:1c:bd:0c: 06:b2:63:f2:8e:64:d3:36:4c:8d:54:3b:ac:eb:5e: 68:00:d3:a9:25:af:f8:55:e3:99:3d:86:85:ab:f6: 83:2a:5b:35:7c:ce:0d:ef:6e:97:5e:c4:7a:25:40: d3:68:cf:6e:8a:ba:fb:9f:ca:dd:11:23:de:b1:75: ec:c6:13:70:c0:56:5b:b3:0d:54:37:df:ae:fb:33: 07:43:4e:71:4b:ad:00:02:6d:ce:e4:5c:65:da:5d: 1b:19:eb:5f:ef:33:89:c4:e9:90:75:92:f1:e4:68: 05:16:a9:4c:46:d6:09:77:52:57:44:0f:da:a5:14: 47:49:d9:5d:ba:0d:b2:d7:70:76:ee:97:b0:fe:74: 16:9c:31:ed:ad:11:92:26:2d:d3:b7:b2:61:8d:ac: 85:0d:f2:bb:5d:6d:dd:e1:a1:10:fc:6c:46:96:6e: dc:87:2e:9c:03:0a:55:c7:58:c3:1f:19:55:41:2a: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:0D:85:5A:69:BC:54:76:8B:6A:D8:1A:7F:12:0A:C4:3B:12:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/36db5741-694a-3f57-b452-6148011eb6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl X509v3 Authority Key Identifier: keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer sbgp-ipAddrBlock: critical IPv4: 208.75.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c9:65:5c:3f:d6:e7:d3:3a:63:7f:7d:5d:7f:0d:58:4f:36: be:71:c4:5b:47:e7:d1:0d:47:9a:e1:5e:1e:de:27:c3:ff:da: 21:eb:a9:7a:df:f4:9d:b9:75:d8:78:8c:5f:18:3e:87:95:03: 54:18:43:cb:ea:59:2a:f3:53:63:6b:45:1f:a5:34:8a:c9:6d: 76:6a:bf:1d:a5:96:5e:29:7e:52:75:2d:13:1c:33:9e:ca:d7: f1:9e:db:17:1c:23:1b:c4:71:d9:8f:69:53:d3:78:48:62:a1: 88:36:bc:83:10:e7:00:78:b2:db:76:a6:a7:d6:48:2f:8c:21: b0:5e:15:0e:c9:dd:76:ba:47:3c:f2:71:1e:ba:38:39:e7:17: ea:f6:0e:d7:a5:e5:2d:4c:73:ff:bf:11:fa:b2:a0:c5:db:62: 00:75:0c:9a:f0:94:45:38:cb:03:4a:1b:8c:cd:09:3f:cf:2a: 14:9e:85:76:6f:ae:7f:8e:e7:30:8e:b1:fb:03:c1:55:56:7f: ac:4c:7f:7c:21:0e:e0:41:55:bd:5c:00:50:69:a6:d7:9b:c7: 10:d8:73:4e:19:7e:77:6e:cc:72:9f:32:c1:b8:69:11:af:8f: a7:4c:61:9d:2d:76:82:e8:d5:3d:f8:b2:d6:17:11:05:45:85: a0:8a:25:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKp7WToRaQVRuYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVkODFhNjYtZjQ5ZS00YTE2LWE2NDctZjcwOWU1NWNi ZGIxMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk NzVhYjA2NzctYjc0Zi00NjYzLTg1NWQtZDIxMmYxZTY3NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KoHed5EMzthOFdNNSgKnsJKrFI2e7BOt8om vVQrGgZHtrIwHNgmzOmVpb1qWqtxb9D+k3jcB6nm2DvJQ8r6nVpWxJgRfkkcvQwG smPyjmTTNkyNVDus615oANOpJa/4VeOZPYaFq/aDKls1fM4N726XXsR6JUDTaM9u irr7n8rdESPesXXsxhNwwFZbsw1UN9+u+zMHQ05xS60AAm3O5Fxl2l0bGetf7zOJ xOmQdZLx5GgFFqlMRtYJd1JXRA/apRRHSdldug2y13B27pew/nQWnDHtrRGSJi3T t7JhjayFDfK7XW3d4aEQ/GxGlm7chy6cAwpVx1jDHxlVQSr3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0JDYVaabxUdotq2Bp/EgrEOxJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4 MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1Y2JkYjEvMzZkYjU3NDEtNjk0YS0z ZjU3LWI0NTItNjE0ODAxMWViNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWVkODFhNjYtZjQ5ZS00YTE2LWE2 NDctZjcwOWU1NWNiZGIxLzVlZDgxYTY2LWY0OWUtNGExNi1hNjQ3LWY3MDllNTVj YmRiMS5jcmwwHwYDVR0jBBgwFoAUhl2GbrVevcccGEb+LchoJQCwn44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5 ZTU1Y2JkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Es4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvJZVw/1ufTOmN/fV1/DVhPNr5xxFtH59ENR5rhXh7eJ8P/2iHrqXrf 9J25ddh4jF8YPoeVA1QYQ8vqWSrzU2NrRR+lNIrJbXZqvx2lll4pflJ1LRMcM57K 1/Ge2xccIxvEcdmPaVPTeEhioYg2vIMQ5wB4stt2pqfWSC+MIbBeFQ7J3Xa6Rzzy cR66ODnnF+r2Dtel5S1Mc/+/EfqyoMXbYgB1DJrwlEU4ywNKG4zNCT/PKhSehXZv rn+O5zCOsfsDwVVWf6xMf3whDuBBVb1cAFBpptebxxDYc04ZfnduzHKfMsG4aRGv j6dMYZ0tdoLo1T34stYXEQVFhaCKJT8= -----END CERTIFICATE-----Generated at Wed May 13 18:41:09 2026 by rpki-client