$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa File: bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa (raw, json) Hash identifier: EeWexVOk79HHOqJPwqG5Te3/PuNgetjsSLSZwpoybyE= Subject key identifier: 21:B9:A2:D5:CE:57:D8:47:74:A4:09:4E:3B:89:66:1C:F9:D8:73:39 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D1F4A59668393427F2839A700 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 136.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:59:66:83:93:42:7f:28:39:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=38d7946b-aa80-400e-8d31-43a37ed05481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:3f:8b:89:51:d6:6c:ad:87:4a:b4:46:28: ce:71:1d:6a:16:e8:b4:7f:f9:8b:20:40:9d:66:fc: f4:f0:46:bc:f2:b2:a5:74:6e:35:90:f5:fd:fc:56: 7d:d1:19:1b:03:7a:27:01:27:42:a4:1f:0b:8f:e9: a9:46:5a:15:87:40:1c:cc:d9:cc:c1:57:02:98:e6: f8:93:2a:af:0a:62:fb:2f:58:6b:07:a1:31:7a:67: 38:26:27:91:6a:53:bf:f2:64:ed:5b:2a:18:9f:b2: e9:1d:3e:fa:b9:35:f1:07:32:f2:2e:d5:3b:f3:18: c8:b2:6b:8f:4b:87:eb:1f:72:12:ff:a1:38:0d:0f: 95:01:aa:84:a2:14:13:fd:59:2e:82:f2:19:0a:67: 43:32:1a:a6:56:6c:93:33:4e:62:92:fa:8e:0e:a6: 56:5b:b5:cd:02:5b:b1:96:60:23:a4:f9:84:db:a0: 29:16:44:fb:f0:1b:56:54:d8:8e:69:a8:b5:41:86: 52:57:a9:d4:4f:49:94:93:82:9f:fd:0e:49:84:1d: 6e:b4:9c:78:47:e6:16:1d:16:43:9d:50:b7:2b:f9: 17:15:ca:34:ea:b3:db:bf:00:44:fd:02:15:9f:1c: 0d:a6:b7:ef:80:2e:f4:ad:67:a0:48:d8:52:35:2a: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:A2:D5:CE:57:D8:47:74:A4:09:4E:3B:89:66:1C:F9:D8:73:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b0:bf:6e:c7:0d:c6:d1:9d:88:3a:00:82:99:25:88:b7:9d: d3:6f:6b:98:5c:cd:b9:7b:5a:8a:45:e7:d8:8d:36:82:28:3d: 36:c4:20:13:b0:68:b9:0b:c5:a5:52:8c:2a:7b:a9:71:09:d8: fd:08:12:d1:cc:c9:fe:46:2f:ae:f0:cd:59:38:1c:0c:cb:18: 2d:73:cd:cb:2a:a9:1f:be:89:a4:c3:b1:4e:1a:b3:22:8e:ec: 22:f6:71:6b:da:50:18:a7:0a:3a:ae:e8:a8:ce:69:38:4f:3b: 00:33:26:7a:df:45:1d:08:6f:6b:d9:42:97:20:0f:b9:c6:18: 1a:ea:9e:81:29:f8:f2:a4:74:41:ab:9a:df:2c:a0:73:71:8e: 6d:90:86:0a:95:2c:d6:14:1b:d1:85:90:a3:5e:33:fc:12:1e: 47:ff:b3:22:30:e8:0f:49:4f:d0:24:44:1d:94:9f:31:7c:8e: 1b:11:93:4c:f8:3e:4d:25:ae:ba:0d:c7:a9:6a:ec:a0:2e:59: 1a:16:9d:bb:22:d9:50:b0:ab:26:9f:74:ba:5e:68:7e:c9:12: 3a:3f:72:34:e5:43:38:7b:ff:5a:8b:5e:22:93:81:b8:ea:d7: d7:09:42:81:a5:b0:2c:7c:86:3e:cc:08:83:a6:6e:47:6a:f8: 8a:6a:94:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSllmg5NCfyg5pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MzhkNzk0NmItYWE4MC00MDBlLThkMzEtNDNhMzdlZDA1NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UA/i4lR1myth0q0RijOcR1qFui0f/mLIECd Zvz08Ea88rKldG41kPX9/FZ90RkbA3onASdCpB8Lj+mpRloVh0AczNnMwVcCmOb4 kyqvCmL7L1hrB6Exemc4JieRalO/8mTtWyoYn7LpHT76uTXxBzLyLtU78xjIsmuP S4frH3IS/6E4DQ+VAaqEohQT/VkugvIZCmdDMhqmVmyTM05ikvqODqZWW7XNAlux lmAjpPmE26ApFkT78BtWVNiOaai1QYZSV6nUT0mUk4Kf/Q5JhB1utJx4R+YWHRZD nVC3K/kXFco06rPbvwBE/QIVnxwNprfvgC70rWegSNhSNSoWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG5otXOV9hHdKQJTjuJZhz52HM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmZiYTEwNGMtYjUyNy0z NDg3LTliY2QtM2NkMTE3M2IxZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmwv27HDcbRnYg6AIKZJYi3ndNva5hczbl7WopF59iNNoIoPTbEIBOw aLkLxaVSjCp7qXEJ2P0IEtHMyf5GL67wzVk4HAzLGC1zzcsqqR++iaTDsU4asyKO 7CL2cWvaUBinCjqu6KjOaThPOwAzJnrfRR0Ib2vZQpcgD7nGGBrqnoEp+PKkdEGr mt8soHNxjm2QhgqVLNYUG9GFkKNeM/wSHkf/syIw6A9JT9AkRB2UnzF8jhsRk0z4 Pk0lrroNx6lq7KAuWRoWnbsi2VCwqyafdLpeaH7JEjo/cjTlQzh7/1qLXiKTgbjq 19cJQoGlsCx8hj7MCIOmbkdq+IpqlCA= -----END CERTIFICATE-----Generated at Fri Mar 13 06:35:15 2026 by rpki-client