$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: 3+OiePqbWDdACh/RmpPddAx2X79eFAPTU6prD/mmA7o= Subject key identifier: 3C:52:03:90:61:6F:53:9C:4C:29:7F:53:E7:35:4B:5C:34:5D:AF:59 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584EA79AD5246C9E8E5288013D80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:d5:24:6c:9e:8e:52:88:01:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0f7621f0-25da-406b-9bb0-05dd8c13de94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:97:35:7b:bc:94:95:43:87:ca:9c:18:c3:8d: 0b:ce:f7:3d:68:71:86:13:f5:4e:00:8e:45:c6:0b: d7:69:8a:63:36:21:6b:3f:ad:bc:35:d6:b2:54:d7: 78:f1:86:b3:b0:bd:74:da:d8:ab:7f:65:ea:cd:c0: 0c:0f:a3:b5:8a:dc:cb:f1:86:1f:a2:0e:82:b8:cc: cd:86:f7:ff:17:d4:55:ff:13:2f:32:11:8c:d6:76: 13:9d:f6:5a:3a:8f:a9:07:d3:7c:2d:87:b0:a1:32: ea:b8:3a:23:4d:ca:f0:e1:f0:17:bb:b8:37:a6:9e: 69:35:24:ab:5e:71:48:e1:94:7d:c7:5a:40:d3:89: ea:78:88:5f:4e:92:34:bc:bd:3e:28:23:8e:b0:d9: 4d:da:e9:e2:49:c8:ed:11:25:90:88:bf:d4:25:f7: 45:0a:7e:e5:e7:b3:b6:92:3e:4d:94:50:cb:26:12: 70:cd:48:8b:f0:73:f5:61:76:ee:7a:48:31:eb:c8: 93:97:f1:71:ec:4a:f0:f2:3b:43:b8:e7:36:31:0c: 78:15:42:08:ab:21:84:16:28:af:09:c4:0e:67:60: ec:99:fc:1a:f6:ed:a8:3a:6a:a7:6a:1c:60:eb:15: 57:c7:51:ba:cd:97:58:ae:a7:5d:31:30:8c:58:f5: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:52:03:90:61:6F:53:9C:4C:29:7F:53:E7:35:4B:5C:34:5D:AF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:63:6c:51:20:0f:78:51:48:69:8a:38:a8:00:9e:f7:a8:76: 28:48:79:1a:90:1e:1f:ad:f5:32:27:a7:4b:cf:5c:5f:03:23: 0b:f3:b8:30:1d:8c:e0:64:84:5f:e8:6b:fb:cd:f5:9e:b3:8f: 5a:f8:52:e0:e9:ab:d2:8c:21:2f:2f:94:9c:15:69:95:21:32: 5a:2c:c0:74:6b:a4:be:ab:fa:0d:59:b8:9e:9a:ca:0d:aa:bc: cf:c9:df:24:4a:0a:e6:12:4d:43:9a:c8:bb:fa:1c:7d:4c:74: 9a:4b:48:51:17:b1:f0:08:c7:4b:f5:cd:b4:fb:57:e9:8e:dd: 63:1d:43:78:b4:49:a8:5a:ec:1f:13:5d:c4:83:8f:a9:c8:27: d0:60:c3:4b:b5:eb:ed:5e:56:5d:f4:5f:4f:b4:03:29:ae:41: 78:9a:a2:7c:c3:8c:9f:55:22:e7:69:3d:bc:62:58:e7:16:f2: e2:61:1b:21:41:eb:d6:1c:ec:b0:bd:14:87:fc:41:5d:82:11: c1:b2:aa:65:e7:cb:6a:6b:8e:ae:3e:46:af:c2:ca:c5:86:37: 6b:38:e7:d1:67:ea:58:e7:cb:23:58:d5:1c:0f:9e:3c:26:47: df:3a:02:f7:e2:d8:ac:3e:d5:7d:b6:54:9f:20:72:27:2f:9c: ed:51:19:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmtUkbJ6OUogBPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGY3NjIxZjAtMjVkYS00MDZiLTliYjAtMDVkZDhjMTNkZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5c1e7yUlUOHypwYw40Lzvc9aHGGE/VOAI5F xgvXaYpjNiFrP628NdayVNd48YazsL102tirf2XqzcAMD6O1itzL8YYfog6CuMzN hvf/F9RV/xMvMhGM1nYTnfZaOo+pB9N8LYewoTLquDojTcrw4fAXu7g3pp5pNSSr XnFI4ZR9x1pA04nqeIhfTpI0vL0+KCOOsNlN2uniScjtESWQiL/UJfdFCn7l57O2 kj5NlFDLJhJwzUiL8HP1YXbuekgx68iTl/Fx7Erw8jtDuOc2MQx4FUIIqyGEFiiv CcQOZ2Dsmfwa9u2oOmqnahxg6xVXx1G6zZdYrqddMTCMWPXaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxSA5Bhb1OcTCl/U+c1S1w0Xa9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpjbFEgD3hRSGmKOKgAnveodihIeRqQHh+t9TInp0vPXF8DIwvzuDAd jOBkhF/oa/vN9Z6zj1r4UuDpq9KMIS8vlJwVaZUhMloswHRrpL6r+g1ZuJ6ayg2q vM/J3yRKCuYSTUOayLv6HH1MdJpLSFEXsfAIx0v1zbT7V+mO3WMdQ3i0Saha7B8T XcSDj6nIJ9Bgw0u16+1eVl30X0+0AymuQXiaonzDjJ9VIudpPbxiWOcW8uJhGyFB 69Yc7LC9FIf8QV2CEcGyqmXny2prjq4+Rq/CysWGN2s459Fn6ljnyyNY1RwPnjwm R986Avfi2Kw+1X22VJ8gcicvnO1RGU0= -----END CERTIFICATE-----Generated at Wed Jul 29 05:44:26 2026 by rpki-client