$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: N5AFRJAI8NttTC5mthKMxKVrBdGVSq0rDEivY+ZYf90= Subject key identifier: 8C:8B:58:F7:F5:AF:CD:99:4C:8F:FA:6F:41:94:31:49:5C:37:3F:BA Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584EA79AEF8C6CEE8F4BD32F3000 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:ef:8c:6c:ee:8f:4b:d3:2f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5b00db8b-649e-4f90-8a0d-85273986ccaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:b8:e5:3c:02:df:5a:12:47:d2:9d:8b:24: 18:aa:94:7a:b1:24:01:96:8e:e4:0a:8a:ff:a8:b3: 7b:10:34:60:c6:73:07:6f:60:8d:c5:71:28:f5:0f: 26:20:40:43:78:32:da:98:f5:28:31:74:3c:8d:10: 92:4d:59:61:e7:e9:e9:49:ab:fa:31:69:7d:2d:7a: ec:c3:3e:06:39:12:79:d9:72:bb:9b:2f:e5:3b:d7: 5a:df:16:33:14:48:e6:f5:60:15:eb:ab:aa:cc:7f: 93:4a:e5:ef:75:e2:99:64:39:09:72:3a:63:ae:8e: 5d:e7:e4:19:72:dd:7b:f5:3b:10:57:dd:d3:f4:65: e2:70:b6:23:ae:7b:c4:82:6f:58:f3:19:6b:e7:a0: 1c:1e:35:44:a6:95:74:79:95:f3:11:d4:43:2e:78: 67:14:7c:f2:60:db:ce:77:c9:3e:26:20:8c:2a:80: fe:7f:75:2d:0b:e1:47:59:59:09:68:32:fd:06:b6: 5c:b3:34:f5:61:08:bf:9e:fe:bf:18:1a:d5:01:04: 11:7f:f6:6f:ee:12:8e:81:bd:e2:c5:48:61:be:2a: 4e:1a:41:e6:fa:28:1a:28:a6:4a:9c:5b:cd:c5:d7: e3:28:59:30:d9:79:fc:3d:61:1c:4f:97:1a:c3:1a: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8B:58:F7:F5:AF:CD:99:4C:8F:FA:6F:41:94:31:49:5C:37:3F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2d:87:e8:90:aa:e9:58:5c:4e:9d:61:8d:99:63:3a:4f:2a: d7:c1:89:75:11:45:51:c1:82:27:18:8c:5c:c5:ce:1e:c2:94: c6:da:b9:1f:03:d5:c3:5c:0c:34:09:cb:5e:34:43:f2:b2:c6: 11:57:50:1c:8c:db:b1:74:a6:57:33:6b:67:6d:b2:20:3d:88: f6:fe:c3:e9:cd:53:78:a1:a6:21:01:02:53:f8:a9:17:cb:32: 41:0e:ef:51:3c:43:2e:a9:18:dd:8d:0d:9d:b2:66:cb:59:2b: fa:e0:1f:64:88:8f:8b:1d:69:09:5f:04:93:b3:8e:20:5e:f7: c1:63:74:e2:20:2e:eb:1a:a9:d4:a7:36:0b:09:54:64:e9:41: 7d:43:ba:49:ae:5a:e5:8a:40:6b:4a:13:12:0c:b7:e5:54:7c: de:c6:3a:a5:9a:b7:08:5a:f9:8d:7d:a4:ed:47:96:0f:5e:77: 9c:5a:40:1b:23:80:37:72:11:fa:aa:fd:24:fc:3a:46:b7:1b: 67:3a:31:ed:b2:06:48:21:50:2b:a4:f9:93:30:5d:86:3d:75: 5f:14:d1:bc:db:b9:57:66:6e:36:04:e2:65:39:a1:bd:58:68: e8:14:44:12:06:9f:77:1d:51:8a:29:16:8f:63:2d:3e:a9:94: 8a:00:29:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmu+MbO6PS9MvMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWIwMGRiOGItNjQ5ZS00ZjkwLThhMGQtODUyNzM5ODZjY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTy45TwC31oSR9KdiyQYqpR6sSQBlo7kCor/ qLN7EDRgxnMHb2CNxXEo9Q8mIEBDeDLamPUoMXQ8jRCSTVlh5+npSav6MWl9LXrs wz4GORJ52XK7my/lO9da3xYzFEjm9WAV66uqzH+TSuXvdeKZZDkJcjpjro5d5+QZ ct179TsQV93T9GXicLYjrnvEgm9Y8xlr56AcHjVEppV0eZXzEdRDLnhnFHzyYNvO d8k+JiCMKoD+f3UtC+FHWVkJaDL9BrZcszT1YQi/nv6/GBrVAQQRf/Zv7hKOgb3i xUhhvipOGkHm+igaKKZKnFvNxdfjKFkw2Xn8PWEcT5cawxpBzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyLWPf1r82ZTI/6b0GUMUlcNz+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoth+iQqulYXE6dYY2ZYzpPKtfBiXURRVHBgicYjFzFzh7ClMbauR8D 1cNcDDQJy140Q/KyxhFXUByM27F0plcza2dtsiA9iPb+w+nNU3ihpiEBAlP4qRfL MkEO71E8Qy6pGN2NDZ2yZstZK/rgH2SIj4sdaQlfBJOzjiBe98FjdOIgLusaqdSn NgsJVGTpQX1DukmuWuWKQGtKExIMt+VUfN7GOqWatwha+Y19pO1Hlg9ed5xaQBsj gDdyEfqq/ST8Oka3G2c6Me2yBkghUCuk+ZMwXYY9dV8U0bzbuVdmbjYE4mU5ob1Y aOgURBIGn3cdUYopFo9jLT6plIoAKaA= -----END CERTIFICATE-----Generated at Fri Sep 11 09:06:39 2026 by rpki-client