$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa File: 9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa (raw, json) Hash identifier: KjaxkeXFgeD/J4pJjekOpLhg0k0YPBzHTiICJsGw1Js= Subject key identifier: 6D:C1:3D:CE:BC:71:C1:D4:97:4C:E2:9B:93:19:B0:36:44:1C:6C:C2 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584DE2B5CC3DDD4953561F9ED580 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 398090 IP address blocks: 167.17.96.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:cc:3d:dd:49:53:56:1f:9e:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=db386022-cf1e-431e-9478-9c367aeae616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:4d:d0:c3:34:75:8c:29:a4:34:ca:ce:0f: 40:99:98:b1:6a:66:4b:07:f3:12:91:5a:83:c3:b7: cc:07:91:5c:d7:ef:8b:26:f8:c8:3d:ca:89:9e:14: 06:7b:ee:20:41:cb:28:b9:80:08:7f:23:6d:46:08: 7a:50:df:e3:1d:d0:96:7b:6c:d9:0b:54:4e:30:f6: 42:b2:c6:19:c3:24:27:2f:0b:fd:e0:0f:41:4a:e5: c7:71:00:36:79:56:07:42:0b:30:29:f0:bd:6f:c3: 4e:04:90:59:da:26:08:4e:c5:a6:07:d9:4f:6b:10: d8:8b:d7:f2:a8:77:4a:66:82:df:47:68:e7:3c:d9: 42:7c:90:b8:8c:83:b4:60:5a:46:52:88:5c:ef:19: 9e:f9:3c:a0:6e:b4:d6:de:ef:cb:77:f8:28:02:b3: 95:30:c9:a2:c9:01:5c:39:ee:91:3b:65:8f:76:a5: b1:33:19:bc:cc:03:8c:87:0a:5a:ad:1a:3d:d6:a7: 20:0e:68:8a:a2:a2:b6:63:d7:34:9e:20:84:fd:bd: ea:f4:ae:d4:e0:33:36:2b:52:5a:ea:b4:99:ec:a1: 55:cb:96:d3:47:42:c5:4e:36:98:2a:53:d9:92:3f: a8:c4:f9:a3:e3:82:6c:13:17:55:df:c9:3a:4d:df: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C1:3D:CE:BC:71:C1:D4:97:4C:E2:9B:93:19:B0:36:44:1C:6C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 167.17.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:71:f1:49:52:ec:b1:68:cb:ec:21:4c:f3:ac:30:74:e4:fd: d7:e8:69:c8:6a:8d:6a:94:ae:5c:15:98:43:17:8e:b0:3b:87: f4:78:c1:4d:3c:b0:d7:ea:98:51:20:05:d5:4f:42:e3:5e:03: b2:e1:6b:f3:2a:4c:b6:f2:8f:09:bd:0e:9b:4d:99:cd:9b:eb: 6e:f9:ff:a1:f7:95:83:f6:5c:58:5e:1f:08:03:28:ba:fd:71: 90:f5:c2:e0:cf:87:50:77:06:c1:d9:38:13:ec:5f:a5:f5:b3: 9f:fb:9a:ca:76:57:b3:4b:46:be:92:4c:de:d4:56:34:f6:7d: 3f:92:ba:a8:b2:e2:1b:49:18:11:4c:50:f3:10:75:ab:9c:05: 79:90:87:bc:55:24:ef:d5:0e:30:30:12:3e:a5:26:dd:1e:53: 75:83:b1:ff:9a:c7:6d:ea:22:28:c2:8b:45:cf:b1:fc:22:8b: 9d:f3:85:b0:97:f7:49:68:19:11:72:40:73:3a:a4:c6:77:35: 2c:0f:ee:da:1d:9c:60:a0:e1:6a:d7:78:b1:ed:b0:68:6f:f0: e0:5f:5e:93:f6:a6:ac:45:ea:c9:a9:64:a4:83:96:94:94:44: c5:f2:cc:e1:53:c7:10:17:0c:a9:5d:60:2d:2c:57:1f:63:a3: e7:da:a1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itcw93UlTVh+e1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZGIzODYwMjItY2YxZS00MzFlLTk0NzgtOWMzNjdhZWFlNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYFN0MM0dYwppDTKzg9AmZixamZLB/MSkVqD w7fMB5Fc1++LJvjIPcqJnhQGe+4gQcsouYAIfyNtRgh6UN/jHdCWe2zZC1ROMPZC ssYZwyQnLwv94A9BSuXHcQA2eVYHQgswKfC9b8NOBJBZ2iYITsWmB9lPaxDYi9fy qHdKZoLfR2jnPNlCfJC4jIO0YFpGUohc7xme+TygbrTW3u/Ld/goArOVMMmiyQFc Oe6RO2WPdqWxMxm8zAOMhwparRo91qcgDmiKoqK2Y9c0niCE/b3q9K7U4DM2K1Ja 6rSZ7KFVy5bTR0LFTjaYKlPZkj+oxPmj44JsExdV38k6Td9zwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3BPc68ccHUl0zim5MZsDZEHGzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOWQ3OTk1NmItMmYwOS0z MWExLTlhYWYtZmE2MmRlOWZlZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpxFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdx8UlS7LFoy+whTPOsMHTk/dfoachqjWqUrlwVmEMXjrA7h/R4wU08 sNfqmFEgBdVPQuNeA7Lha/MqTLbyjwm9DptNmc2b6275/6H3lYP2XFheHwgDKLr9 cZD1wuDPh1B3BsHZOBPsX6X1s5/7msp2V7NLRr6STN7UVjT2fT+Suqiy4htJGBFM UPMQdaucBXmQh7xVJO/VDjAwEj6lJt0eU3WDsf+ax23qIijCi0XPsfwii53zhbCX 90loGRFyQHM6pMZ3NSwP7todnGCg4WrXeLHtsGhv8OBfXpP2pqxF6smpZKSDlpSU RMXyzOFTxxAXDKldYC0sVx9jo+faoWs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:51:04 2026 by rpki-client