$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa File: 536bdaa0-0f1a-3e47-9251-28af7a104243.roa (raw, json) Hash identifier: 7IVyAOmnKBWMLuIjCsGW7reEfcU894dCWgwIk0y0NeQ= Subject key identifier: D1:EB:C5:46:3E:1D:55:F7:71:5B:85:F3:7B:91:76:42:38:E7:41:12 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584D4D5A485E2155EC14C4878880 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 20365 IP address blocks: 199.7.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:48:5e:21:55:ec:14:c4:87:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ddd1d6d2-8d57-4246-9053-ac9f5dc8766c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:be:d4:e4:e9:10:64:32:ae:ed:cb:6f:14: 66:58:0e:3b:c6:ae:8b:02:be:ce:d5:a0:0f:34:70: 63:15:6c:cb:ad:81:25:2e:6d:7a:2e:1a:89:3a:d6: d6:79:8f:4b:2f:01:70:d8:a9:51:6c:e6:2f:1a:11: 2a:6a:b5:4e:91:86:ec:24:d9:c0:ea:60:72:c3:78: bb:e5:1d:95:2d:38:ba:43:1c:d4:81:ac:90:74:e3: 5a:46:f4:c6:b7:00:c2:74:a5:c9:d6:aa:7f:bd:75: 5b:e4:a8:b4:43:42:e3:02:42:d0:74:15:ec:1f:85: 77:4a:f0:46:ed:68:07:64:f3:8d:bf:d8:ee:60:95: ac:eb:6d:f2:f4:14:e1:0f:e6:c7:23:41:dd:e2:8e: e0:5e:05:7b:f9:e6:3f:73:e5:a5:04:03:9f:60:e3: f8:61:22:f6:96:b8:2a:68:f3:10:53:21:64:6f:2c: ca:60:0c:f9:4c:50:11:09:90:95:ba:98:36:90:02: 1b:c6:3d:56:2d:f3:b3:dc:18:54:6b:05:74:db:36: ea:82:ba:73:83:51:72:8e:83:68:cc:19:c0:75:83: 6a:5d:c3:4d:89:9e:34:9e:45:01:41:a4:fa:10:ac: 8a:43:92:0a:f2:3b:98:f1:61:09:cb:3e:0d:47:1e: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EB:C5:46:3E:1D:55:F7:71:5B:85:F3:7B:91:76:42:38:E7:41:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 199.7.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:28:d6:7a:77:6a:4e:f9:7a:bc:8d:47:86:b0:37:7a:b2:67: 42:75:f1:2b:7c:e8:c5:3f:04:59:f0:68:79:0a:c6:0f:4b:52: f8:01:0e:6c:43:1c:75:88:d1:f5:ca:3d:c1:be:e9:4f:12:15: d2:b7:44:0d:81:05:b2:d4:8a:88:ca:94:85:b9:d9:29:87:81: f5:4a:bf:80:08:09:bf:d3:0a:ae:fe:15:cd:fc:8b:53:19:fb: f9:e5:90:07:a1:29:78:0b:d1:61:fb:08:94:f3:af:c4:16:b9: 1e:89:5e:41:5d:d4:f3:0b:f9:be:bf:6f:5a:3b:f4:67:99:ec: 73:1d:1c:59:a9:ea:6b:0a:e1:1e:94:f6:f9:6d:1e:95:0a:30: 36:19:a6:6c:62:c3:d8:1d:36:80:2f:bc:1b:d2:ed:17:2e:ba: c7:2f:2f:40:cd:f8:24:ac:4b:e9:9c:2c:95:25:bb:76:48:a4: c5:d0:56:79:ec:64:6b:b2:16:8f:25:d9:ee:96:23:25:30:be: 2a:42:75:98:e0:ff:6a:c1:9d:3e:5e:2d:c9:99:fc:d0:de:c2: 9f:27:51:91:08:b6:a2:fb:f9:e5:d5:ac:b4:87:36:39:2e:73: 02:69:94:c1:f7:43:08:dc:32:0b:f1:65:77:1c:5b:13:ad:8d: e5:6b:63:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkheIVXsFMSHiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZGRkMWQ2ZDItOGQ1Ny00MjQ2LTkwNTMtYWM5ZjVkYzg3NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRi+1OTpEGQyru3LbxRmWA47xq6LAr7O1aAP NHBjFWzLrYElLm16LhqJOtbWeY9LLwFw2KlRbOYvGhEqarVOkYbsJNnA6mByw3i7 5R2VLTi6QxzUgayQdONaRvTGtwDCdKXJ1qp/vXVb5Ki0Q0LjAkLQdBXsH4V3SvBG 7WgHZPONv9juYJWs623y9BThD+bHI0Hd4o7gXgV7+eY/c+WlBAOfYOP4YSL2lrgq aPMQUyFkbyzKYAz5TFARCZCVupg2kAIbxj1WLfOz3BhUawV02zbqgrpzg1FyjoNo zBnAdYNqXcNNiZ40nkUBQaT6EKyKQ5IK8juY8WEJyz4NRx5RjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHrxUY+HVX3cVuF83uRdkI450ESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNTM2YmRhYTAtMGYxYS0z ZTQ3LTkyNTEtMjhhZjdhMTA0MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAo1np3ak75eryNR4awN3qyZ0J18St86MU/BFnwaHkKxg9LUvgBDmxD HHWI0fXKPcG+6U8SFdK3RA2BBbLUiojKlIW52SmHgfVKv4AICb/TCq7+Fc38i1MZ +/nlkAehKXgL0WH7CJTzr8QWuR6JXkFd1PML+b6/b1o79GeZ7HMdHFmp6msK4R6U 9vltHpUKMDYZpmxiw9gdNoAvvBvS7RcuuscvL0DN+CSsS+mcLJUlu3ZIpMXQVnns ZGuyFo8l2e6WIyUwvipCdZjg/2rBnT5eLcmZ/NDewp8nUZEItqL7+eXVrLSHNjku cwJplMH3QwjcMgvxZXccWxOtjeVrY8A= -----END CERTIFICATE-----Generated at Fri Apr 17 21:34:40 2026 by rpki-client