$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: BryvOphDG/7MUUpMpxLBWdH0MQLd1P9aXYaOfVA7GxY= Subject key identifier: E6:32:4F:3E:99:CE:5F:22:07:FB:28:12:41:DE:96:9D:0B:0D:EC:58 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584E0006162DD82B2C77EA0EA980 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:16:2d:d8:2b:2c:77:ea:0e:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=bf70b998-1491-4010-aa96-88671e4453a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:57:fc:c9:95:db:45:b0:ad:1d:9c:99:cc: 5d:62:9f:1f:f4:e3:d0:d7:9a:2a:5c:88:8b:95:de: 41:bb:97:35:94:c7:7a:6a:fd:68:19:57:3a:53:b5: e5:66:1c:c3:03:2e:14:98:8e:06:1f:c8:0b:11:4a: 9f:12:85:2f:5b:e5:91:32:63:19:28:7f:f6:0b:9f: 23:e2:d7:76:1a:82:8f:ee:30:42:b5:30:91:61:5a: 99:82:09:e9:60:63:40:65:7c:62:1b:dc:5a:34:24: db:c8:6e:ef:71:ad:3e:7a:32:85:1b:b8:cc:4f:b6: b5:66:93:02:c6:e2:1c:83:2a:e1:57:c4:c0:fd:18: d3:6d:10:72:54:a2:16:f8:0f:b3:67:a2:8c:53:4a: 6f:89:64:76:8d:1e:82:ee:39:9e:59:2f:24:42:55: 41:b3:f5:4b:eb:46:38:6d:85:b5:d6:80:c6:ae:b3: da:f4:2c:e8:90:30:f4:fd:92:a6:8f:d4:b6:1e:ee: 48:9a:e5:74:85:98:e4:ef:f1:f4:38:12:51:0b:0d: 90:b6:04:70:47:c8:d8:64:fb:f8:de:68:e7:c7:d1: 3a:a8:cb:26:0d:5f:d3:f2:a6:54:a5:f5:99:3b:30: 0d:9b:2a:97:4e:68:62:98:de:a8:7f:97:6e:5b:d4: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:32:4F:3E:99:CE:5F:22:07:FB:28:12:41:DE:96:9D:0B:0D:EC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:77:d9:d0:82:49:4f:3a:da:75:e8:96:96:34:63:57:e9:10: cb:48:e2:b3:f8:43:56:df:8f:7e:e2:75:2f:33:1d:1b:de:e1: 1c:f7:f6:06:f2:67:b7:3b:27:1d:99:c3:5a:f2:cf:69:cb:87: e1:6f:70:4d:fd:c6:d6:a7:f6:ee:3a:24:0e:34:e2:9b:39:ea: 98:1d:be:ae:e8:2f:98:00:93:eb:2f:62:46:b9:ef:4d:21:ec: df:84:91:53:4b:c6:25:18:24:bf:d4:15:8b:8e:f0:bb:69:2c: 60:98:57:21:96:8e:1a:48:17:2b:30:75:99:fe:4c:a9:ac:ab: 69:2c:f5:e3:e1:79:91:c8:bc:86:e3:b3:2d:87:8a:8e:7b:ce: fa:78:fa:60:aa:1e:c8:c2:55:57:96:56:4c:6b:ec:e5:68:46: b2:ca:f7:c6:10:bd:9c:de:d4:9e:da:17:a7:9f:42:ed:1f:ac: ff:de:2f:c2:50:e9:8f:7a:aa:40:95:f9:8e:1f:c5:ed:15:f0: 96:a0:1d:87:9e:e4:40:63:53:e6:63:58:63:19:76:40:a7:04: 6f:05:70:95:12:eb:b5:28:cf:9d:8f:37:15:fb:84:74:8a:c6: 5f:45:f5:25:72:47:5f:af:c5:ee:86:3a:3b:05:a9:08:03:5a: d8:30:57:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhYt2Cssd+oOqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk YmY3MGI5OTgtMTQ5MS00MDEwLWFhOTYtODg2NzFlNDQ1M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFFX/MmV20WwrR2cmcxdYp8f9OPQ15oqXIiL ld5Bu5c1lMd6av1oGVc6U7XlZhzDAy4UmI4GH8gLEUqfEoUvW+WRMmMZKH/2C58j 4td2GoKP7jBCtTCRYVqZggnpYGNAZXxiG9xaNCTbyG7vca0+ejKFG7jMT7a1ZpMC xuIcgyrhV8TA/RjTbRByVKIW+A+zZ6KMU0pviWR2jR6C7jmeWS8kQlVBs/VL60Y4 bYW11oDGrrPa9CzokDD0/ZKmj9S2Hu5ImuV0hZjk7/H0OBJRCw2QtgRwR8jYZPv4 3mjnx9E6qMsmDV/T8qZUpfWZOzANmyqXTmhimN6of5duW9TNBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYyTz6Zzl8iB/soEkHelp0LDexYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx32dCCSU862nXolpY0Y1fpEMtI4rP4Q1bfj37idS8zHRve4Rz39gby Z7c7Jx2Zw1ryz2nLh+FvcE39xtan9u46JA404ps56pgdvq7oL5gAk+svYka5700h 7N+EkVNLxiUYJL/UFYuO8LtpLGCYVyGWjhpIFyswdZn+TKmsq2ks9ePheZHIvIbj sy2Hio57zvp4+mCqHsjCVVeWVkxr7OVoRrLK98YQvZze1J7aF6efQu0frP/eL8JQ 6Y96qkCV+Y4fxe0V8JagHYee5EBjU+ZjWGMZdkCnBG8FcJUS67Uoz52PNxX7hHSK xl9F9SVyR1+vxe6GOjsFqQgDWtgwVz0= -----END CERTIFICATE-----Generated at Thu Jun 11 23:40:38 2026 by rpki-client