$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: Ts6OGJVgK/oOP8QA9AAWGg7EzycRTFKxYsNZMSzGrIM= Subject key identifier: CB:D3:17:DB:1B:03:4B:07:92:DB:F5:A9:7A:2B:8B:66:4A:18:27:C0 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D1F4A7C125671FB0931287700 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7c:12:56:71:fb:09:31:28:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=8ad44ae3-0506-4a28-b687-c0f1405a66f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:fa:d0:88:4f:c0:25:42:29:40:a1:4b:6c: e3:ab:76:ac:cd:e2:ee:d7:39:4f:50:cc:62:43:4d: a1:d7:c9:81:03:e9:28:d4:f0:26:c6:2b:2f:9b:c1: 68:64:5b:3b:2e:6c:44:d8:90:fc:05:b0:8f:80:92: 2f:8f:8f:a5:70:ef:55:e4:eb:63:ef:b9:6d:e2:91: ec:b3:b9:15:4a:9c:55:df:1b:b5:0f:4a:f2:61:eb: 6e:3d:39:02:da:a5:86:a3:05:76:68:d2:6f:0b:48: 9f:1c:f9:df:24:06:77:27:74:74:85:a6:24:32:6b: 1d:cc:c1:86:47:7d:91:87:80:2c:df:26:f6:c1:ed: 4c:b9:ef:4d:da:08:54:c3:15:ff:69:31:32:51:f6: 5b:fa:c7:bc:e3:e8:ee:34:d0:a2:55:c9:d3:4a:cc: ba:44:09:29:52:4b:57:80:f8:d9:72:c0:cf:4a:89: 1c:a2:3f:e8:f6:92:68:18:28:d7:c4:c6:cf:7d:5a: 12:7a:f3:b1:c3:5f:fa:20:6d:fb:c8:15:b9:ab:11: 21:4d:0c:bc:aa:18:95:d4:4d:30:ec:8a:32:1f:0b: 07:83:18:6f:25:49:d3:95:d2:90:1f:cd:51:cb:ba: bb:ce:95:d4:c6:03:1a:f8:fb:ab:24:73:c4:72:92: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D3:17:DB:1B:03:4B:07:92:DB:F5:A9:7A:2B:8B:66:4A:18:27:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d9:4b:cd:8f:09:f7:be:58:e9:8d:14:dc:11:6b:0f:75:b6: 42:b5:e9:bd:a6:d0:8c:87:f0:a0:e6:b3:b8:b9:db:84:78:8b: 4f:f7:9b:0a:98:88:5d:22:80:13:da:b0:db:c4:75:87:7f:83: 12:57:02:e7:be:2d:8d:ce:7a:f3:75:0e:a8:af:02:9e:40:e0: 73:9e:e0:f4:b2:d2:ed:24:9b:19:f0:e3:8d:b1:e7:d0:4f:1e: 9f:16:ea:48:f7:2c:cc:2d:35:11:e3:0e:2a:fb:eb:a2:6f:00: 2a:8c:5f:3d:1d:ef:34:79:ed:c3:91:ba:28:82:46:4f:0e:11: a7:3f:d4:01:91:b1:5a:ab:90:00:4f:57:e9:ca:1f:b3:08:75: f8:42:df:b0:27:7c:da:64:c2:a8:10:c4:db:68:21:32:a4:d1: 84:29:4a:c9:0f:3f:b2:ee:80:a3:d8:0c:52:61:3a:64:d3:ea: cb:09:bc:dc:e0:78:6a:a4:84:ce:37:c2:db:5b:a7:df:0a:b5: 4a:51:5a:1a:77:78:05:73:c3:be:0b:4b:b4:b6:4e:4d:a1:70: 60:94:a9:a2:75:ba:a0:a3:3c:14:da:3d:a1:a8:f4:ec:63:8c: 5e:6b:5a:2d:e4:f8:fc:2a:4f:99:ac:70:de:d0:a4:ee:8d:aa: 89:25:e0:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnwSVnH7CTEodwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OGFkNDRhZTMtMDUwNi00YTI4LWI2ODctYzBmMTQwNWE2NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSv60IhPwCVCKUChS2zjq3aszeLu1zlPUMxi Q02h18mBA+ko1PAmxisvm8FoZFs7LmxE2JD8BbCPgJIvj4+lcO9V5Otj77lt4pHs s7kVSpxV3xu1D0ryYetuPTkC2qWGowV2aNJvC0ifHPnfJAZ3J3R0haYkMmsdzMGG R32Rh4As3yb2we1Mue9N2ghUwxX/aTEyUfZb+se84+juNNCiVcnTSsy6RAkpUktX gPjZcsDPSokcoj/o9pJoGCjXxMbPfVoSevOxw1/6IG37yBW5qxEhTQy8qhiV1E0w 7IoyHwsHgxhvJUnTldKQH81Ry7q7zpXUxgMa+PurJHPEcpL6IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvTF9sbA0sHktv1qXori2ZKGCfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDZS82PCfe+WOmNFNwRaw91tkK16b2m0IyH8KDms7i524R4i0/3mwqY iF0igBPasNvEdYd/gxJXAue+LY3OevN1DqivAp5A4HOe4PSy0u0kmxnw442x59BP Hp8W6kj3LMwtNRHjDir766JvACqMXz0d7zR57cORuiiCRk8OEac/1AGRsVqrkABP V+nKH7MIdfhC37AnfNpkwqgQxNtoITKk0YQpSskPP7LugKPYDFJhOmTT6ssJvNzg eGqkhM43wttbp98KtUpRWhp3eAVzw74LS7S2Tk2hcGCUqaJ1uqCjPBTaPaGo9Oxj jF5rWi3k+PwqT5mscN7QpO6Nqokl4IQ= -----END CERTIFICATE-----Generated at Fri Mar 13 06:33:58 2026 by rpki-client