$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa File: cfa83893-71b6-3e5f-84ca-567698627079.roa (raw, json) Hash identifier: ovLxVydNkh7267iNA44vwbK/CforA5XBrJ4P/1Tsx0U= Subject key identifier: 1E:A1:52:37:2C:E3:2C:51:9F:0C:A1:C8:E7:E9:19:C8:62:2F:9B:10 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D1F4A509E6C5D2431022FBFC0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:50:9e:6c:5d:24:31:02:2f:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1e8d58a8-de78-43ab-9e87-64dacd28c983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:92:7f:12:89:e7:d0:36:96:17:a4:3c:8e: c8:df:b6:e2:8d:8a:b0:23:34:2b:65:45:f2:64:99: 8d:94:63:67:8e:bf:b0:4f:cb:af:a5:0a:7e:ef:1c: 26:29:f9:bd:46:62:dc:ab:de:a9:d2:95:02:e8:f2: 58:63:d1:0d:29:21:3f:d8:d4:c3:61:75:f4:0b:ba: ad:bc:75:3a:46:6e:7b:99:9c:55:14:a8:85:69:c7: ab:c0:bd:f0:d1:fb:74:1b:0f:42:a6:1a:d7:6d:55: 71:0c:4e:73:da:ea:96:cb:53:51:ce:ad:02:0f:c0: 89:84:40:b2:12:d6:61:a3:9e:59:3f:83:7c:5a:1a: f6:cc:d8:e1:1d:f9:22:46:70:70:a1:3a:4a:4e:b3: c6:a9:eb:f4:b0:65:be:30:bb:4e:ed:c8:2b:62:62: 9c:4d:73:80:fc:1f:d4:32:5c:05:90:34:05:b2:f4: d7:c3:eb:64:97:00:b0:58:73:b5:af:29:ed:d3:b8: a2:94:37:35:a4:c9:05:c2:b3:e4:43:c5:b9:44:62: 72:6a:7d:21:3e:f5:e5:91:55:bb:17:b8:3f:6e:61: a3:bd:a7:46:80:14:fd:2a:00:fa:13:e0:3f:01:ca: f3:32:b2:47:ff:70:57:04:de:8d:2d:5a:e9:a6:6e: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:52:37:2C:E3:2C:51:9F:0C:A1:C8:E7:E9:19:C8:62:2F:9B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8b:02:23:81:5f:4c:27:65:b1:5e:a0:c3:ea:74:ef:00:4f: d6:f7:0a:f4:90:7c:fc:77:8d:9b:9c:ed:e6:9e:13:13:dc:64: 48:e0:8c:1b:32:5e:6b:ce:69:1e:3e:7d:fe:ba:2d:f5:a2:de: 15:55:8c:a7:69:92:10:bb:ab:f8:00:09:4f:b3:e2:2e:b2:55: fc:b7:5e:af:58:f8:05:ac:c8:28:f0:ef:63:ac:3f:19:76:25: e3:6e:e7:84:d0:df:4b:a2:21:14:86:21:89:1d:b6:0f:62:0c: cc:73:c9:82:5f:2f:e9:2a:0c:29:e4:9a:19:d0:38:bb:1d:55: c0:f5:f8:52:0f:83:76:85:1f:25:d4:f1:ce:67:88:68:ea:0f: d3:89:22:b9:35:a6:ea:22:d1:0a:8f:14:a8:9a:70:3a:61:a8: b5:b8:77:84:45:00:25:ee:48:03:8f:8f:ce:24:4c:b3:f0:38: 40:c0:3d:bb:66:e9:e2:d5:7f:71:a8:82:f2:99:a1:29:75:09: 56:9a:1a:18:e0:d7:ec:40:b7:5e:b5:40:72:0a:fa:6f:76:5e: b8:c1:a9:31:09:65:6a:ee:86:c6:8f:b4:ff:e2:7d:b3:23:55: 43:12:85:83:d5:74:0b:00:4b:d4:0a:22:dc:64:04:b5:9d:30: 28:b8:e8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlCebF0kMQIvv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MWU4ZDU4YTgtZGU3OC00M2FiLTllODctNjRkYWNkMjhjOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsieSfxKJ59A2lhekPI7I37bijYqwIzQrZUXy ZJmNlGNnjr+wT8uvpQp+7xwmKfm9RmLcq96p0pUC6PJYY9ENKSE/2NTDYXX0C7qt vHU6Rm57mZxVFKiFacerwL3w0ft0Gw9CphrXbVVxDE5z2uqWy1NRzq0CD8CJhECy EtZho55ZP4N8Whr2zNjhHfkiRnBwoTpKTrPGqev0sGW+MLtO7cgrYmKcTXOA/B/U MlwFkDQFsvTXw+tklwCwWHO1rynt07iilDc1pMkFwrPkQ8W5RGJyan0hPvXlkVW7 F7g/bmGjvadGgBT9KgD6E+A/AcrzMrJH/3BXBN6NLVrppm5WiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6hUjcs4yxRnwyhyOfpGchiL5sQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvY2ZhODM4OTMtNzFiNi0z ZTVmLTg0Y2EtNTY3Njk4NjI3MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOLAiOBX0wnZbFeoMPqdO8AT9b3CvSQfPx3jZuc7eaeExPcZEjgjBsy XmvOaR4+ff66LfWi3hVVjKdpkhC7q/gACU+z4i6yVfy3Xq9Y+AWsyCjw72OsPxl2 JeNu54TQ30uiIRSGIYkdtg9iDMxzyYJfL+kqDCnkmhnQOLsdVcD1+FIPg3aFHyXU 8c5niGjqD9OJIrk1puoi0QqPFKiacDphqLW4d4RFACXuSAOPj84kTLPwOEDAPbtm 6eLVf3GogvKZoSl1CVaaGhjg1+xAt161QHIK+m92XrjBqTEJZWruhsaPtP/ifbMj VUMShYPVdAsAS9QKItxkBLWdMCi46KQ= -----END CERTIFICATE-----Generated at Fri Mar 13 06:33:57 2026 by rpki-client