$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436226e9-f4c1-3a65-a41b-15d9efba00e9.roa File: 436226e9-f4c1-3a65-a41b-15d9efba00e9.roa (raw, json) Hash identifier: Y96HnDx/9jzJTLqnc2Oh2IWByQEgMxoaAnE0RQ2DaSE= Subject key identifier: 03:A3:38:E0:30:7F:0A:F6:12:01:25:D3:7E:23:7F:D0:D8:A8:45:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D0A778EC803A011CEF8D6F160 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436226e9-f4c1-3a65-a41b-15d9efba00e9.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 15169 IP address blocks: 136.126.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:8e:c8:03:a0:11:ce:f8:d6:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=c66cb610-5df6-4d20-a84d-76ecc875033a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:18:09:7f:07:0c:92:4b:6c:33:d1:4f:77: 36:da:07:37:8f:98:bd:9e:23:1b:4e:9e:95:e9:eb: ab:61:0f:27:41:af:73:fb:18:36:42:e8:9d:2a:77: 98:ae:75:8e:cf:c9:aa:ac:e1:ba:c7:5b:0b:eb:98: 10:0b:bc:4c:e8:4d:54:da:d3:4f:a9:e5:f4:49:63: c6:36:29:bd:4b:88:c2:24:d7:75:dd:f3:bc:7e:e9: 10:e7:bf:11:99:16:65:4f:43:1d:dd:92:26:e7:f1: ee:61:db:8c:bc:01:e4:23:40:3d:d0:06:ff:8f:52: db:7c:f4:72:02:36:bf:35:05:89:04:e1:da:35:f8: c4:e3:38:21:dd:4e:cf:a4:1d:c3:a8:c7:fb:88:5e: a6:1f:44:f1:a0:45:1f:cb:a1:98:60:ed:78:77:5b: 71:a9:d4:c7:0a:16:39:63:df:43:ac:ab:db:0e:73: 8c:0d:ab:d3:4b:e6:89:06:7a:3f:69:27:89:bc:38: 5f:9a:6c:42:39:1f:a3:d7:a0:a8:0f:6f:eb:59:3d: 5a:a3:0f:f7:4f:27:83:63:75:9a:6a:ae:42:2f:b1: 79:bb:12:a3:d0:af:12:de:b9:a0:48:8c:a9:8a:24: 04:02:b7:15:46:f9:76:24:b0:79:df:4d:68:c6:8a: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:38:E0:30:7F:0A:F6:12:01:25:D3:7E:23:7F:D0:D8:A8:45:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436226e9-f4c1-3a65-a41b-15d9efba00e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.126.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cb:8b:bd:b3:5f:77:60:41:7a:4a:0f:f9:d8:12:d4:90:32: 98:36:7f:8e:53:6c:64:68:24:a9:96:3e:73:8d:2f:d1:23:11: 5b:83:50:1a:94:86:74:35:e7:aa:7b:91:a3:b0:48:9f:0f:a1: d7:fe:d8:19:84:4a:f0:8b:5e:8b:19:53:3d:0b:3c:c1:a7:cf: 84:9f:e3:24:04:22:41:18:d4:6f:b6:2b:eb:b1:ae:d6:2c:7a: aa:ca:fa:d2:ff:c7:1d:4a:01:c2:38:2b:77:f9:d0:41:d5:20: 90:3f:ba:c2:72:cf:98:08:0a:36:aa:fd:2c:fb:c1:21:74:1e: 91:62:09:01:d1:ca:08:ce:ab:8b:40:5e:4a:16:74:a8:31:76: 12:67:f7:f9:57:b9:bd:fa:85:8c:82:27:3d:2b:dd:e6:00:c6: 1a:57:4e:ce:58:4f:0b:2f:24:b5:50:4d:87:41:59:32:01:8f: 78:5b:60:45:15:91:67:59:26:df:f9:21:d5:d3:43:16:06:b0: f7:7d:c1:b2:2f:b1:8f:59:4e:b3:20:fa:6c:d1:0b:60:d9:93: e4:d8:1c:35:c6:eb:b2:c5:e3:a1:20:5f:7b:63:bc:0f:49:3c: 1e:28:70:be:71:3c:6f:f2:8e:ea:7b:a1:4b:29:67:51:60:09: 45:48:ac:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd47IA6ARzvjW8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YzY2Y2I2MTAtNWRmNi00ZDIwLWE4NGQtNzZlY2M4NzUwMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPwYCX8HDJJLbDPRT3c22gc3j5i9niMbTp6V 6eurYQ8nQa9z+xg2QuidKneYrnWOz8mqrOG6x1sL65gQC7xM6E1U2tNPqeX0SWPG Nim9S4jCJNd13fO8fukQ578RmRZlT0Md3ZIm5/HuYduMvAHkI0A90Ab/j1LbfPRy Aja/NQWJBOHaNfjE4zgh3U7PpB3DqMf7iF6mH0TxoEUfy6GYYO14d1txqdTHChY5 Y99DrKvbDnOMDavTS+aJBno/aSeJvDhfmmxCOR+j16CoD2/rWT1aow/3TyeDY3Wa aq5CL7F5uxKj0K8S3rmgSIypiiQEArcVRvl2JLB5301oxor9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOjOOAwfwr2EgEl034jf9DYqEW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM2MjI2ZTktZjRjMS0z YTY1LWE0MWItMTVkOWVmYmEwMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiH7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXLi72zX3dgQXpKD/nYEtSQMpg2f45TbGRoJKmWPnONL9EjEVuDUBqU hnQ156p7kaOwSJ8Podf+2BmESvCLXosZUz0LPMGnz4Sf4yQEIkEY1G+2K+uxrtYs eqrK+tL/xx1KAcI4K3f50EHVIJA/usJyz5gICjaq/Sz7wSF0HpFiCQHRygjOq4tA XkoWdKgxdhJn9/lXub36hYyCJz0r3eYAxhpXTs5YTwsvJLVQTYdBWTIBj3hbYEUV kWdZJt/5IdXTQxYGsPd9wbIvsY9ZTrMg+mzRC2DZk+TYHDXG67LF46EgX3tjvA9J PB4ocL5xPG/yjup7oUspZ1FgCUVIrFQ= -----END CERTIFICATE-----Generated at Tue Mar 3 10:54:06 2026 by rpki-client