$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ef0ed6a-070e-3551-9cd6-8d43eb25bc29.roa File: 3ef0ed6a-070e-3551-9cd6-8d43eb25bc29.roa (raw, json) Hash identifier: Za+U7J2h0NrXCXMRTYeqO0tbjf7/K6/bLyt6/zcJIGs= Subject key identifier: D8:BB:82:02:0F:37:41:B4:73:D4:91:AB:5F:B2:07:67:81:96:5F:DB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F97FF17AA30294EA7F6A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ef0ed6a-070e-3551-9cd6-8d43eb25bc29.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 136.226.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:97:ff:17:aa:30:29:4e:a7:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=9e3ff659-7244-4c09-be3f-deb8d18012cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:26:82:48:40:62:48:6c:2f:2b:e2:ae:01: c8:bd:68:a2:99:70:39:f6:f6:ec:6c:68:a7:48:fb: 82:d5:e5:9f:af:72:0d:74:7e:4e:86:84:2d:7d:97: 3b:a7:82:0a:4f:26:7b:02:fe:21:91:ec:25:6c:26: 08:e3:56:02:a0:4d:a4:4c:5a:66:a5:59:95:86:a8: 20:89:12:24:e3:10:6d:19:5d:5a:99:eb:64:38:5a: 02:b9:5f:b3:07:15:0e:19:eb:d4:32:f1:aa:2a:9c: 65:6b:3e:ef:0d:72:89:b2:58:67:4c:10:53:f7:b9: 1a:96:69:48:32:c2:c7:5e:1d:56:0b:26:4e:e4:0e: ef:de:f7:78:2b:66:e4:d5:c7:a8:3b:3e:8c:d6:8b: 5d:79:15:4f:ca:7c:36:32:ca:43:e8:e0:5b:19:28: 09:50:dd:c5:52:50:0a:4e:af:bb:e5:40:6d:86:09: 26:4a:e1:11:9c:fd:45:e1:24:42:66:c0:c2:6e:b3: 88:79:13:fa:d5:80:87:d7:d1:d8:bd:ab:99:7f:18: d4:37:06:a1:96:bb:21:c8:31:a4:2a:5a:6b:33:96: db:01:88:26:44:59:70:68:a3:65:b3:8c:21:18:96: 1b:aa:11:77:f8:2b:af:6f:a4:ca:12:a0:8b:f8:62: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BB:82:02:0F:37:41:B4:73:D4:91:AB:5F:B2:07:67:81:96:5F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ef0ed6a-070e-3551-9cd6-8d43eb25bc29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a6:e2:9d:53:ff:2a:14:67:61:8d:58:74:35:a7:05:75:47: 49:0f:d5:ca:36:1b:51:eb:f0:d2:2c:61:37:c9:a4:d4:b9:53: 5c:47:55:99:5e:44:94:94:a9:d7:95:3b:9d:f8:1e:f7:f7:c1: 0f:46:04:93:42:43:3e:b4:00:f2:1f:2d:76:a4:30:fd:5c:f9: d5:54:1c:00:e4:dc:1c:cc:27:8e:0c:bb:9b:0b:91:1a:43:d8: d7:19:57:37:5f:ea:44:62:c4:77:70:1d:f5:28:f1:bc:88:e4: 45:49:80:59:1c:5a:2a:18:b9:3d:d9:dd:89:e8:47:0c:1a:98: 22:19:83:08:78:05:19:92:f1:d1:41:33:d6:a9:20:be:bf:1a: e7:bd:71:0a:dc:c7:9a:96:1d:93:89:16:2b:6e:4e:ef:5a:ff: 9b:3a:df:39:f8:c9:5d:ab:0e:77:67:e4:3e:04:55:df:82:44: 32:07:20:8b:09:7f:85:fe:33:57:7c:85:a7:1a:cb:1b:65:9d: b6:5b:30:89:d0:64:ad:a2:94:c2:0f:41:c7:e0:62:e4:e2:c5: cd:14:cc:9e:a9:21:5e:8b:3d:8c:58:1b:80:56:cd:81:59:5f: 04:fe:91:19:c5:b2:be:8c:49:a4:ef:01:47:a9:4f:5e:84:2d: 14:7a:b2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5f/F6owKU6n9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk OWUzZmY2NTktNzI0NC00YzA5LWJlM2YtZGViOGQxODAxMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjsmgkhAYkhsLyvirgHIvWiimXA59vbsbGin SPuC1eWfr3INdH5OhoQtfZc7p4IKTyZ7Av4hkewlbCYI41YCoE2kTFpmpVmVhqgg iRIk4xBtGV1ametkOFoCuV+zBxUOGevUMvGqKpxlaz7vDXKJslhnTBBT97kalmlI MsLHXh1WCyZO5A7v3vd4K2bk1ceoOz6M1otdeRVPynw2MspD6OBbGSgJUN3FUlAK Tq+75UBthgkmSuERnP1F4SRCZsDCbrOIeRP61YCH19HYvauZfxjUNwahlrshyDGk KlprM5bbAYgmRFlwaKNls4whGJYbqhF3+Cuvb6TKEqCL+GLs0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi7ggIPN0G0c9SRq1+yB2eBll/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2VmMGVkNmEtMDcwZS0z NTUxLTljZDYtOGQ0M2ViMjViYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWm4p1T/yoUZ2GNWHQ1pwV1R0kP1co2G1Hr8NIsYTfJpNS5U1xHVZle RJSUqdeVO534Hvf3wQ9GBJNCQz60APIfLXakMP1c+dVUHADk3BzMJ44Mu5sLkRpD 2NcZVzdf6kRixHdwHfUo8byI5EVJgFkcWioYuT3Z3YnoRwwamCIZgwh4BRmS8dFB M9apIL6/Gue9cQrcx5qWHZOJFituTu9a/5s63zn4yV2rDndn5D4EVd+CRDIHIIsJ f4X+M1d8hacayxtlnbZbMInQZK2ilMIPQcfgYuTixc0UzJ6pIV6LPYxYG4BWzYFZ XwT+kRnFsr6MSaTvAUepT16ELRR6suU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:49 2026 by rpki-client