$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa File: cece6c8f-010f-3c85-a43d-246f8147d7f7.roa (raw, json) Hash identifier: zzfYHbzkN+8utwhmOG5bIiPswXcFQfqV2wExJ1vBNx0= Subject key identifier: 54:5A:B8:AE:DD:46:A9:D0:FB:FE:6B:62:9A:89:4C:7E:60:00:5C:12 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584E04360962013628260D5D1B80 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 14543 IP address blocks: 136.227.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:09:62:01:36:28:26:0d:5d:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=faf76d5c-8d8a-4221-9005-996a60ab7094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:ff:66:63:f8:f4:fb:dc:67:7f:18:92:66: fe:d9:8a:6e:66:e0:71:35:b8:03:e2:d4:28:c8:ff: 9c:a8:25:42:5a:f8:4b:23:2a:44:ef:3f:c3:89:35: 35:92:64:dc:42:6e:85:b6:02:6a:05:02:ba:70:e6: e4:31:bb:a7:74:62:67:e8:60:59:bf:41:4d:63:25: 18:db:c3:a9:1f:3c:0f:c8:47:82:b7:c0:d1:c1:a6: d4:d3:29:61:69:8e:a0:85:b5:e1:76:d8:d7:28:40: f6:f3:09:fa:2a:ae:91:44:12:1b:07:c6:07:51:6d: a2:dd:88:04:e2:b4:d6:3b:12:1f:e0:dc:94:8e:8a: 23:a7:93:2c:41:c5:ba:69:7c:d9:36:77:0f:58:9a: c4:f7:59:fb:a0:c2:a3:c6:a4:06:fb:8a:85:45:39: 13:1b:cc:7a:d0:77:35:64:5a:92:5f:c2:e1:2d:35: 14:e0:99:73:25:79:8d:02:ae:54:81:1b:75:d1:c1: 6a:ff:b5:fc:09:1e:d0:73:d0:4a:72:d8:5c:1e:b7: b9:ed:99:38:4e:18:1a:13:c1:d1:ed:cd:7c:35:aa: 36:7a:3a:b4:ea:0b:72:80:5a:be:bf:37:93:dd:3c: 9a:62:8f:5d:9c:25:24:a9:94:06:43:56:a3:f1:fe: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:B8:AE:DD:46:A9:D0:FB:FE:6B:62:9A:89:4C:7E:60:00:5C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 136.227.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e6:23:49:58:10:0f:97:0f:68:7b:f7:12:20:a6:64:0b:c7: dd:28:c5:c5:54:c2:bc:3a:38:1b:1d:9f:76:cc:8b:da:67:b0: 8d:b9:fa:96:f7:a3:61:cb:8e:03:f4:c1:6b:d2:83:9f:19:80: 99:ed:29:3c:eb:62:0a:72:63:db:a5:fb:37:92:61:2d:8f:d7: 05:29:0d:8a:3f:24:86:1d:05:53:45:04:4c:8b:a7:5f:c9:0f: 17:7b:1e:70:ec:f9:a4:01:e8:84:fe:c7:2d:cf:ed:b9:e8:fe: 37:ec:4e:20:60:fe:99:e8:35:bd:aa:e8:e0:18:f7:df:ea:47: d2:66:85:d2:d7:4b:10:e7:07:56:62:97:1e:74:a7:ac:50:ab: 21:1d:88:63:a2:9a:d0:32:19:f8:c8:65:6d:bc:5f:7c:6f:a3: 35:ee:f3:5b:8e:02:a5:8f:0e:07:6b:49:6a:5c:23:5f:50:92: f4:32:fc:98:99:b2:d7:cd:ae:8c:fc:8d:eb:9a:70:33:c1:92: 52:03:b5:1e:79:b2:9c:ed:8b:ed:3c:13:4a:dc:a2:73:2d:89: 43:7f:39:30:33:d1:32:47:e1:63:f4:e3:f3:19:4d:e7:f4:f3: d2:f3:69:39:36:c0:37:9b:5d:bd:08:82:0d:a1:36:85:a1:c0: a9:09:bb:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgliATYoJg1dG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZmFmNzZkNWMtOGQ4YS00MjIxLTkwMDUtOTk2YTYwYWI3MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCP/ZmP49PvcZ38Ykmb+2YpuZuBxNbgD4tQo yP+cqCVCWvhLIypE7z/DiTU1kmTcQm6FtgJqBQK6cObkMbundGJn6GBZv0FNYyUY 28OpHzwPyEeCt8DRwabU0ylhaY6ghbXhdtjXKED28wn6Kq6RRBIbB8YHUW2i3YgE 4rTWOxIf4NyUjoojp5MsQcW6aXzZNncPWJrE91n7oMKjxqQG+4qFRTkTG8x60Hc1 ZFqSX8LhLTUU4JlzJXmNAq5UgRt10cFq/7X8CR7Qc9BKcthcHre57Zk4ThgaE8HR 7c18Nao2ejq06gtygFq+vzeT3TyaYo9dnCUkqZQGQ1aj8f7dDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRauK7dRqnQ+/5rYpqJTH5gAFwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvY2VjZTZjOGYtMDEwZi0z Yzg1LWE0M2QtMjQ2ZjgxNDdkN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiONAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/mI0lYEA+XD2h79xIgpmQLx90oxcVUwrw6OBsdn3bMi9pnsI25+pb3 o2HLjgP0wWvSg58ZgJntKTzrYgpyY9ul+zeSYS2P1wUpDYo/JIYdBVNFBEyLp1/J Dxd7HnDs+aQB6IT+xy3P7bno/jfsTiBg/pnoNb2q6OAY99/qR9JmhdLXSxDnB1Zi lx50p6xQqyEdiGOimtAyGfjIZW28X3xvozXu81uOAqWPDgdrSWpcI19QkvQy/JiZ stfNroz8jeuacDPBklIDtR55spzti+08E0rconMtiUN/OTAz0TJH4WP04/MZTef0 89LzaTk2wDebXb0Igg2hNoWhwKkJu4s= -----END CERTIFICATE-----Generated at Sat Jun 13 16:55:59 2026 by rpki-client