$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa File: f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa (raw, json) Hash identifier: NB2TsC21LJlprdlHzmZqpZiZz5eucv5FMED01tCEmKM= Subject key identifier: E3:10:2F:0A:AF:E2:31:7B:0A:90:59:A7:A5:AC:30:27:02:92:8B:79 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D1F4A5671373957E3106E2E00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 136.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:56:71:37:39:57:e3:10:6e:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=7d75b3d7-6258-4297-a60e-c6babcf25a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:20:63:2a:02:7b:29:35:a4:9d:66:dd:0c: 19:36:db:73:5f:1c:fd:5d:a3:e5:81:d7:de:17:d0: bb:a1:6c:f0:6a:05:b2:53:54:81:ee:6d:40:5c:7c: 5a:46:d4:c8:8e:15:6c:a0:52:c3:aa:b8:92:c6:55: 10:50:b8:47:f1:24:69:79:2a:53:30:2a:5a:be:0f: b4:2f:4e:a8:9c:2e:86:fc:ba:bc:89:a4:24:b5:54: 64:94:3b:10:31:34:00:50:9a:66:2e:4e:4b:c4:5e: de:80:cc:c6:5b:fd:e2:a5:50:e1:dd:eb:e7:9a:90: 07:9a:2c:9c:59:68:c0:f7:f5:58:98:4e:68:ea:71: 13:fb:eb:ec:40:e2:b5:70:99:dc:15:f2:3a:d7:12: db:44:ca:45:dc:0e:93:0f:99:f5:e2:8e:63:8c:cb: 17:74:d3:5e:5c:70:7b:50:bf:01:1e:bf:8f:99:57: 78:fa:8d:f6:12:47:a9:de:95:00:e2:21:4c:89:f6: 0d:7b:82:ea:b0:0d:6c:9a:a2:35:29:b4:c6:f8:fa: 32:a4:9f:7d:3d:6f:a0:36:27:12:6a:02:55:0e:e2: 8d:01:b9:4e:db:83:a3:ad:a2:e0:e7:65:79:f4:08: a6:53:a4:bf:9e:70:60:d8:b8:54:a3:19:68:e2:62: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:10:2F:0A:AF:E2:31:7B:0A:90:59:A7:A5:AC:30:27:02:92:8B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bb:0a:90:17:60:76:2d:4c:7a:e5:1c:09:3f:5c:4c:14:49: 10:21:b8:7b:42:7a:5f:4f:42:63:59:f6:32:80:a6:bb:78:f7: 1e:ca:22:79:0e:be:64:f3:41:8f:50:1a:4a:fd:a9:36:22:2d: 40:c7:4a:e4:56:48:2f:be:cc:48:c4:f6:e2:44:ec:a0:57:28: d7:78:f6:b5:9d:a4:70:5d:e9:9f:cc:17:38:35:3e:2a:d4:ea: c9:5b:ac:dc:f8:a3:7e:07:f7:f2:63:d5:24:0a:bb:f0:44:e6: 09:cd:f7:31:40:3d:55:be:af:22:7b:19:38:95:05:6c:a2:e8: 3e:e6:4f:59:4e:c9:ea:77:e7:b3:e6:02:78:8c:a1:e6:06:c5: 47:a4:a4:1c:2e:67:23:2c:9e:25:1a:f9:a6:c2:8f:c7:6d:6d: 87:4f:bc:a7:6f:7a:34:47:2d:36:68:3b:e6:04:0e:1b:a1:3c: d1:30:99:7c:22:4d:9f:80:b2:1e:42:2e:e7:03:4d:29:b2:93: 2a:b4:6d:91:fe:d5:ce:5d:ce:9b:c5:62:6e:7e:e1:f4:41:70: 33:57:c4:95:ed:e4:b9:a7:e3:9f:dc:80:a0:9f:5f:a3:c4:68: d0:99:7b:f4:d2:0e:b0:72:47:68:66:f6:31:64:b1:5d:8f:fb: f5:b7:dd:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlZxNzlX4xBuLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk N2Q3NWIzZDctNjI1OC00Mjk3LWE2MGUtYzZiYWJjZjI1YTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2QgYyoCeyk1pJ1m3QwZNttzXxz9XaPlgdfe F9C7oWzwagWyU1SB7m1AXHxaRtTIjhVsoFLDqriSxlUQULhH8SRpeSpTMCpavg+0 L06onC6G/Lq8iaQktVRklDsQMTQAUJpmLk5LxF7egMzGW/3ipVDh3evnmpAHmiyc WWjA9/VYmE5o6nET++vsQOK1cJncFfI61xLbRMpF3A6TD5n14o5jjMsXdNNeXHB7 UL8BHr+PmVd4+o32Ekep3pUA4iFMifYNe4LqsA1smqI1KbTG+PoypJ99PW+gNicS agJVDuKNAblO24OjraLg52V59AimU6S/nnBg2LhUoxlo4mJh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMQLwqv4jF7CpBZp6WsMCcCkot5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjIwYjIzNDMtM2JmZC0z YTNmLWI4MzUtM2VjZDRkYTllNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq7CpAXYHYtTHrlHAk/XEwUSRAhuHtCel9PQmNZ9jKAprt49x7KInkO vmTzQY9QGkr9qTYiLUDHSuRWSC++zEjE9uJE7KBXKNd49rWdpHBd6Z/MFzg1PirU 6slbrNz4o34H9/Jj1SQKu/BE5gnN9zFAPVW+ryJ7GTiVBWyi6D7mT1lOyep357Pm AniMoeYGxUekpBwuZyMsniUa+abCj8dtbYdPvKdvejRHLTZoO+YEDhuhPNEwmXwi TZ+Ash5CLucDTSmykyq0bZH+1c5dzpvFYm5+4fRBcDNXxJXt5Lmn45/cgKCfX6PE aNCZe/TSDrByR2hm9jFksV2P+/W33d8= -----END CERTIFICATE-----Generated at Fri Mar 13 06:35:15 2026 by rpki-client