$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa File: 9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa (raw, json) Hash identifier: Pa3hpK4FsQN+esrDSiUl3Oe7+HssZV2mnz5xI2I7W44= Subject key identifier: 05:5F:E3:AE:5C:20:21:AB:43:7F:46:31:B2:75:4A:87:83:D6:D9:B4 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584E0005FB8A3A599E1DD6A02080 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 36040 IP address blocks: 136.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:fb:8a:3a:59:9e:1d:d6:a0:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=bed94793-c7d6-4243-838b-b39e1c71fdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:6e:ac:be:7b:55:52:46:b2:66:99:21:d3: 4e:91:e5:57:05:11:bb:8f:ba:69:92:47:ef:34:b4: 42:2d:b0:0a:59:b1:0a:b2:22:2f:4b:1b:f3:df:31: 49:b4:c5:9f:c1:ac:c2:aa:9b:d1:de:ee:bf:bb:92: 87:ac:fd:4d:c7:c1:2f:b3:76:f8:fe:53:38:60:3b: 0f:d4:28:53:d3:0f:e5:1a:38:06:3e:b2:ac:9b:98: cd:af:03:01:b9:cf:2a:e1:e5:7d:5c:49:5a:6b:9b: 13:9c:64:dd:22:87:8a:f7:ae:a8:9e:57:68:8a:d6: 22:e2:a6:d0:2b:cb:cf:8e:9f:33:fc:53:99:9f:cf: cf:75:b9:31:61:0c:6e:d0:4d:1d:69:e1:65:d3:98: ee:82:a9:ea:fa:cb:cf:da:cf:36:b9:38:c6:25:91: 35:85:27:b3:14:84:b0:18:3d:d4:a3:70:43:16:50: 82:6c:06:68:91:c5:07:08:ac:15:a6:fd:c5:36:74: df:26:5b:ec:b7:f1:4c:b1:e6:73:39:32:13:57:6e: 14:50:5a:87:14:9a:ef:e3:99:a2:d2:c9:03:89:5d: a5:a7:5a:9d:d0:d3:5d:ee:78:53:b1:34:37:9c:a7: 73:29:ea:a9:b1:93:b3:de:e8:b2:e3:b7:bf:4c:9d: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5F:E3:AE:5C:20:21:AB:43:7F:46:31:B2:75:4A:87:83:D6:D9:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:84:3e:7c:15:83:e8:7d:62:a2:42:50:e2:2d:0d:ff:2d:71: 22:81:c9:5b:f3:09:f3:6d:09:10:95:21:36:18:36:5b:d8:e6: 6e:c2:2d:ca:9d:88:b5:db:bc:c7:87:aa:3c:a7:57:9e:ac:d5: c7:83:92:12:fe:42:8c:61:64:00:85:f8:e5:2e:5a:9a:db:31: 97:ad:c1:ea:4b:a8:6e:f7:d7:b7:e7:2f:cb:46:52:2e:ff:69: fd:37:98:bf:b6:34:a0:00:62:14:3a:b4:88:b7:9a:6d:ce:a4: c5:3c:dd:a1:b3:ff:13:4b:bd:6c:b0:23:60:6b:23:0a:79:39: c5:a8:0e:ba:95:3a:57:fd:3d:06:5c:8d:ea:d2:28:f3:81:6b: bb:b5:ba:11:e8:3e:a2:92:01:a3:c9:0f:33:fc:87:ca:de:b2: 3b:d5:74:68:eb:ab:69:0f:96:0f:e2:f3:35:b9:75:54:b5:37: c4:81:c3:34:23:b6:ed:eb:fd:e8:fc:ee:95:3c:09:f5:ca:ed: 3d:5b:a1:f4:2f:55:97:b8:fe:3f:bb:9d:67:9d:4a:5c:8d:e0: 7f:37:58:f0:58:4d:9b:ba:38:ac:9b:c0:0a:80:70:05:ef:16: 8e:4d:16:85:c9:6b:44:18:67:f5:e2:18:17:98:69:b3:b9:4b: 81:cf:38:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfuKOlmeHdagIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk YmVkOTQ3OTMtYzdkNi00MjQzLTgzOGItYjM5ZTFjNzFmZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvturL57VVJGsmaZIdNOkeVXBRG7j7ppkkfv NLRCLbAKWbEKsiIvSxvz3zFJtMWfwazCqpvR3u6/u5KHrP1Nx8Evs3b4/lM4YDsP 1ChT0w/lGjgGPrKsm5jNrwMBuc8q4eV9XElaa5sTnGTdIoeK966onldoitYi4qbQ K8vPjp8z/FOZn8/PdbkxYQxu0E0daeFl05jugqnq+svP2s82uTjGJZE1hSezFISw GD3Uo3BDFlCCbAZokcUHCKwVpv3FNnTfJlvst/FMseZzOTITV24UUFqHFJrv45mi 0skDiV2lp1qd0NNd7nhTsTQ3nKdzKeqpsZOz3uiy47e/TJ3JlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVf465cICGrQ39GMbJ1SoeD1tm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWRkYTQ5ZGUtZTNmNS0z Mjg5LWJiZWEtM2ZmNTBkZmI1Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOEPnwVg+h9YqJCUOItDf8tcSKByVvzCfNtCRCVITYYNlvY5m7CLcqd iLXbvMeHqjynV56s1ceDkhL+QoxhZACF+OUuWprbMZetwepLqG7317fnL8tGUi7/ af03mL+2NKAAYhQ6tIi3mm3OpMU83aGz/xNLvWywI2BrIwp5OcWoDrqVOlf9PQZc jerSKPOBa7u1uhHoPqKSAaPJDzP8h8resjvVdGjrq2kPlg/i8zW5dVS1N8SBwzQj tu3r/ej87pU8CfXK7T1bofQvVZe4/j+7nWedSlyN4H83WPBYTZu6OKybwAqAcAXv Fo5NFoXJa0QYZ/XiGBeYabO5S4HPOFQ= -----END CERTIFICATE-----Generated at Thu Jun 11 23:41:03 2026 by rpki-client