$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa File: 0436a35f-9148-3f28-8e51-98ce1b0011b0.roa (raw, json) Hash identifier: hDJS6MXezf9dfLhPELrCRoN29BspY6CpX47NuFCC63A= Subject key identifier: E2:35:F5:49:56:A4:B6:E8:55:F6:16:7E:71:CD:0C:E0:1C:B6:16:AF Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Certificate serial: 010D0C9F4328584D8EF5612DECC99F11C08C3100 Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 67.231.0.0/20 maxlen: 24 208.94.156.0/22 maxlen: 24 216.82.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:61:2d:ec:c9:9f:11:c0:8c:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=cec0fb32-c4a3-4108-b0b8-62f2917cc967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:f0:cd:55:63:dc:2a:91:93:85:0e:ed:bd: d7:8e:8e:d2:dc:11:e1:0f:f9:4e:8e:75:94:b1:29: 72:97:86:db:31:2a:33:8f:69:11:e8:8c:7c:eb:0b: 79:32:c3:3c:00:a1:24:18:cf:30:08:95:c3:33:49: cc:3e:60:0a:74:7d:27:36:0a:d0:23:44:af:bf:19: 75:04:8b:dd:21:6e:7b:d3:30:f4:8e:49:42:62:a9: 80:56:2d:d7:71:6d:bb:9f:1e:6b:b5:ab:3a:64:a9: 9c:e5:4d:18:1a:76:e3:aa:cf:a1:4f:c3:fa:d7:6f: f2:e7:0f:2a:64:bb:55:af:30:4a:d3:a2:02:bd:15: 71:67:91:74:58:0a:d7:08:8c:30:4a:37:47:8d:ad: 80:8d:14:69:ec:90:18:be:f0:ab:7d:04:0a:28:3d: 46:89:a1:53:8d:df:c7:da:a5:07:52:1a:b4:39:90: ac:06:f0:84:f6:93:c8:db:f0:4c:ba:50:44:60:41: 8b:a4:e2:ce:4b:02:69:0a:df:40:f2:18:e2:8b:f7: 83:2c:ff:66:38:40:8a:8c:81:83:a2:44:c1:62:fe: f8:99:b7:ef:65:ed:b6:6d:4b:bd:34:7d:03:d7:5e: bc:20:95:a9:fc:f7:b0:c6:87:ff:ce:b8:e9:3a:cf: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:35:F5:49:56:A4:B6:E8:55:F6:16:7E:71:CD:0C:E0:1C:B6:16:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl X509v3 Authority Key Identifier: keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer sbgp-ipAddrBlock: critical IPv4: 67.231.0.0/20 208.94.156.0/22 216.82.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7a:45:df:8d:e0:d1:57:19:6f:ae:c1:3f:1e:c2:90:b5:a1: 47:36:1f:06:47:3e:51:f3:1d:80:23:74:4d:60:f3:05:6c:52: 95:f0:75:cf:4f:32:42:fe:48:cf:f0:62:65:db:f6:17:bb:52: e8:bf:6d:bb:9a:ac:0e:6e:a7:2b:e8:3d:ae:21:22:ff:dc:c8: 16:ce:85:73:fc:4f:f5:71:84:3b:b1:d6:a3:43:1f:11:98:99: f2:53:a0:52:46:cc:e4:2f:a3:1d:41:73:c5:3c:bd:59:23:01: ec:cb:17:de:2a:aa:e1:23:8a:ec:51:71:63:db:b0:ad:ea:16: 6d:89:11:7e:d5:5b:e8:ff:a0:90:3f:00:26:88:9f:53:b6:d4: 7c:94:5d:50:fa:19:ba:85:da:7a:eb:76:56:a4:e0:e6:62:8d: 74:ca:80:6a:c9:28:50:48:e7:6b:ff:db:c6:bc:08:28:06:44: 69:d1:02:20:2a:7e:ff:b3:70:8b:85:cf:55:fb:cf:ad:2c:dd: b8:2b:3b:63:86:8f:2b:70:85:c1:53:ba:3d:77:c0:70:a6:90: 08:cb:bf:f9:de:53:18:ea:e1:19:1a:04:c9:6b:05:28:ef:42: b7:11:23:e1:e4:18:92:40:f4:d7:d0:5d:f6:45:67:6f:43:75: 33:ae:f1:ca -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2O9WEt7MmfEcCMMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz ODkwMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Y2VjMGZiMzItYzRhMy00MTA4LWIwYjgtNjJmMjkxN2NjOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVvwzVVj3CqRk4UO7b3Xjo7S3BHhD/lOjnWU sSlyl4bbMSozj2kR6Ix86wt5MsM8AKEkGM8wCJXDM0nMPmAKdH0nNgrQI0Svvxl1 BIvdIW570zD0jklCYqmAVi3XcW27nx5rtas6ZKmc5U0YGnbjqs+hT8P612/y5w8q ZLtVrzBK06ICvRVxZ5F0WArXCIwwSjdHja2AjRRp7JAYvvCrfQQKKD1GiaFTjd/H 2qUHUhq0OZCsBvCE9pPI2/BMulBEYEGLpOLOSwJpCt9A8hjii/eDLP9mOECKjIGD okTBYv74mbfvZe22bUu9NH0D1168IJWp/Pewxof/zrjpOs8P3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOI19UlWpLboVfYWfnHNDOActhavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvMDQzNmEzNWYtOTE0OC0z ZjI4LThlNTEtOThjZTFiMDAxMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5 N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4 Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx NjRlODM4OTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQ+cAAwQC 0F6cAwQE2FLgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADd6Rd+N4NFXGW+uwT8ewpC1oUc2HwZHPlHzHYAj dE1g8wVsUpXwdc9PMkL+SM/wYmXb9he7Uui/bbuarA5upyvoPa4hIv/cyBbOhXP8 T/VxhDux1qNDHxGYmfJToFJGzOQvox1Bc8U8vVkjAezLF94qquEjiuxRcWPbsK3q Fm2JEX7VW+j/oJA/ACaIn1O21HyUXVD6GbqF2nrrdlak4OZijXTKgGrJKFBI52v/ 28a8CCgGRGnRAiAqfv+zcIuFz1X7z60s3bgrO2OGjytwhcFTuj13wHCmkAjLv/ne Uxjq4RkaBMlrBSjvQrcRI+HkGJJA9NfQXfZFZ29DdTOu8co= -----END CERTIFICATE-----Generated at Wed May 13 07:16:34 2026 by rpki-client