$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: ZEjD9+OUWSBTC8u5WDxxU0JkWwGs2qe/2ZeJ2PmYEZ8= Subject key identifier: DF:BA:E8:D7:B1:BE:A6:CE:75:75:A1:74:1F:53:D7:E5:30:CE:68:3E Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D1F4A827C575AB53C7A8FDFA0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:82:7c:57:5a:b5:3c:7a:8f:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1b72307c-5d00-4db6-a9af-4d94e244fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:b3:9f:05:80:6a:f7:2b:ec:65:8e:59:1b: ad:bc:01:21:58:ee:84:f2:54:f2:25:ae:bd:3e:5d: 32:29:10:99:bf:ab:e5:9f:2f:4b:db:ab:ab:4d:17: 00:8c:80:db:31:67:f3:8c:96:c5:3b:fb:47:07:07: 21:b1:ec:84:d3:f2:5b:22:87:5d:53:10:5a:6e:47: c2:28:88:0a:c2:a6:41:4e:c0:f3:a7:02:31:00:a4: 9b:40:77:2a:3f:52:53:37:8b:e7:a1:1f:3f:4e:b4: a4:e7:1b:34:d2:35:d4:ed:62:52:ec:fe:35:ed:19: 3b:05:f3:7b:f8:31:e6:be:b2:81:87:85:37:a2:dd: 83:67:b8:ab:5d:b8:48:bc:d2:c9:35:df:ca:03:df: d5:f8:d3:1c:59:03:cc:d1:53:b6:5e:a0:01:d9:d5: 42:51:28:b9:09:97:c2:5c:c2:f5:11:00:22:22:ae: 98:1a:c8:30:5f:d5:dc:9c:f5:54:5f:b3:1f:3e:bf: a0:da:15:6c:7d:5e:6a:ba:08:f6:4e:6a:44:d7:ca: d8:10:21:a6:f1:5d:6d:cd:7f:a0:bf:2b:1f:2c:4e: 27:f0:82:43:1c:df:ca:7e:15:5b:77:48:c4:ff:66: 2e:e6:d8:d3:61:d8:65:79:98:70:9c:71:34:2f:18: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:E8:D7:B1:BE:A6:CE:75:75:A1:74:1F:53:D7:E5:30:CE:68:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:87:76:38:87:1d:0a:08:b7:4b:76:24:cc:85:ca:7f:1f:55: 06:d7:be:c4:ef:0a:c5:97:e5:d1:1f:57:ba:a1:ed:88:a6:14: 83:e2:72:f8:ee:ce:83:0c:19:16:6e:86:c5:18:68:be:82:4c: 31:b4:f5:0d:40:77:f8:03:ae:55:9f:03:6d:17:f0:35:03:e0: ea:19:14:8a:b5:dc:cc:06:63:25:e1:b4:a9:7c:43:cf:d5:83: 1d:df:d0:32:62:78:bc:b6:89:cf:75:02:c9:cf:1d:36:92:86: 04:6e:ca:8f:41:91:ee:98:b1:84:9d:f8:96:3b:aa:4b:94:03: 1e:9f:1b:b2:69:de:57:76:29:1e:cd:48:94:5f:63:64:70:ab: 34:14:11:a2:60:5a:f5:87:58:a3:9b:5d:eb:66:ba:45:71:b3: f6:0c:47:e6:09:e4:0e:33:ab:61:14:70:7c:44:bc:30:1e:44: 80:eb:a1:03:91:b9:3b:fb:0e:4f:76:ec:48:ca:81:ac:01:69: 43:cb:ca:17:c2:d9:7e:48:37:8a:63:70:ad:47:60:4b:45:18: fb:eb:92:b8:cc:8b:4e:dc:a2:11:a8:8a:ff:a0:7d:e0:db:f6: d4:12:7b:09:94:fb:f7:b3:8a:9a:f6:eb:85:a9:13:da:79:91: b2:ed:34:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoJ8V1q1PHqP36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MWI3MjMwN2MtNWQwMC00ZGI2LWE5YWYtNGQ5NGUyNDRmZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnCznwWAavcr7GWOWRutvAEhWO6E8lTyJa69 Pl0yKRCZv6vlny9L26urTRcAjIDbMWfzjJbFO/tHBwchseyE0/JbIoddUxBabkfC KIgKwqZBTsDzpwIxAKSbQHcqP1JTN4vnoR8/TrSk5xs00jXU7WJS7P417Rk7BfN7 +DHmvrKBh4U3ot2DZ7irXbhIvNLJNd/KA9/V+NMcWQPM0VO2XqAB2dVCUSi5CZfC XML1EQAiIq6YGsgwX9XcnPVUX7MfPr+g2hVsfV5qugj2TmpE18rYECGm8V1tzX+g vysfLE4n8IJDHN/KfhVbd0jE/2Yu5tjTYdhleZhwnHE0Lxi7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+66NexvqbOdXWhdB9T1+Uwzmg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyHdjiHHQoIt0t2JMyFyn8fVQbXvsTvCsWX5dEfV7qh7YimFIPicvju zoMMGRZuhsUYaL6CTDG09Q1Ad/gDrlWfA20X8DUD4OoZFIq13MwGYyXhtKl8Q8/V gx3f0DJieLy2ic91AsnPHTaShgRuyo9Bke6YsYSd+JY7qkuUAx6fG7Jp3ld2KR7N SJRfY2RwqzQUEaJgWvWHWKObXetmukVxs/YMR+YJ5A4zq2EUcHxEvDAeRIDroQOR uTv7Dk927EjKgawBaUPLyhfC2X5IN4pjcK1HYEtFGPvrkrjMi07cohGoiv+gfeDb 9tQSewmU+/ezipr264WpE9p5kbLtNGk= -----END CERTIFICATE-----Generated at Fri Mar 13 06:33:21 2026 by rpki-client