$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: atBH91Xe+62CLZUM1YTFKg7oMkpntm1j99cxOVqdlDs= Subject key identifier: 36:AB:80:5A:4E:CE:40:9F:D8:07:46:97:C1:3D:71:D1:82:0F:D5:C9 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584D703FE5617A8F91BA63A16240 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e5:61:7a:8f:91:ba:63:a1:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=d3e22120-f07f-4a25-9f00-c25887bffc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:87:de:0e:7a:e8:63:90:66:4a:c9:42:44: 4c:6d:a8:15:b8:59:75:8d:c6:b1:a5:c2:15:f1:23: ab:20:e7:5a:71:09:e8:0d:08:a6:50:9a:ec:c5:12: 2f:66:0d:bf:f0:04:7b:39:f0:07:38:40:ad:13:e8: c7:3d:c8:03:b3:12:b4:63:63:22:22:04:8e:4e:14: 65:61:a4:4c:16:95:ca:dd:a4:66:51:54:cf:6d:58: c4:84:5f:36:86:9b:b5:6e:60:27:95:84:87:47:81: c1:a7:a7:63:ee:3f:8e:89:51:23:ef:f0:16:71:c7: f8:44:92:78:b9:ff:f7:89:c9:25:41:15:28:3a:80: 97:fa:87:e8:43:70:2c:78:55:1d:25:f3:ab:b4:50: 7a:e3:24:51:bb:70:4b:ea:41:42:a6:a6:7c:6f:ea: db:e0:d3:f8:e2:46:44:f5:c4:be:7f:9e:92:54:77: 79:03:62:ed:96:fa:cd:62:66:4e:f6:fb:46:46:f1: cd:47:02:42:89:fb:b2:f8:83:9e:5d:3f:66:f1:84: 35:ba:85:af:f6:82:4e:3b:bb:39:b8:1c:da:ae:aa: 7c:30:95:5f:99:6f:40:1b:c9:02:84:13:24:fe:61: 67:9e:13:13:52:c0:5f:88:bd:94:f2:a0:27:9b:70: d6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AB:80:5A:4E:CE:40:9F:D8:07:46:97:C1:3D:71:D1:82:0F:D5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:67:f2:28:45:36:9e:d4:f4:3f:9e:48:2d:19:fc:dd:30:80: 29:0f:71:b1:94:c2:50:38:f1:40:71:06:7d:6e:0d:b9:3b:72: 7a:f9:9c:f2:e4:f2:7f:7b:33:cf:cc:75:55:61:48:38:f1:12: 49:b2:54:6b:a1:2e:6d:44:97:33:b6:a6:6d:d8:77:e6:82:e9: f9:51:fe:a9:a3:58:05:9b:cd:4b:79:20:10:dc:f1:5f:7c:74: 88:99:06:9b:66:19:82:ba:c9:de:5d:50:4f:5f:4b:15:6c:3b: 21:05:ba:9e:69:7c:2d:db:10:3b:c6:e5:10:b8:cc:00:5d:be: c5:66:36:eb:b5:46:96:3f:ea:01:8c:0f:cb:25:09:e2:d7:fc: c9:11:3e:ac:74:c1:dc:48:44:95:d0:a2:20:dc:ff:f5:75:ba: 45:a8:03:d9:90:02:04:d1:af:2a:be:a7:2d:80:ff:fe:4b:e7: 5a:ef:c5:6d:ca:ee:f6:ba:c3:68:20:30:fe:2e:c9:e8:ca:32: cd:e0:cb:dc:01:d6:d5:e8:bc:85:0d:16:89:26:fe:0e:70:b7: 8e:30:29:86:12:3e:9f:61:e2:7f:81:ee:5e:f4:77:90:4e:17: 03:c8:74:44:24:1b:f3:72:92:a0:4d:9d:d7:e8:52:a9:af:0a: a1:6b:12:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+Vheo+RumOhYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZDNlMjIxMjAtZjA3Zi00YTI1LTlmMDAtYzI1ODg3YmZmYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEuH3g566GOQZkrJQkRMbagVuFl1jcaxpcIV 8SOrIOdacQnoDQimUJrsxRIvZg2/8AR7OfAHOECtE+jHPcgDsxK0Y2MiIgSOThRl YaRMFpXK3aRmUVTPbVjEhF82hpu1bmAnlYSHR4HBp6dj7j+OiVEj7/AWccf4RJJ4 uf/3icklQRUoOoCX+ofoQ3AseFUdJfOrtFB64yRRu3BL6kFCpqZ8b+rb4NP44kZE 9cS+f56SVHd5A2LtlvrNYmZO9vtGRvHNRwJCifuy+IOeXT9m8YQ1uoWv9oJOO7s5 uBzarqp8MJVfmW9AG8kChBMk/mFnnhMTUsBfiL2U8qAnm3DWZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDargFpOzkCf2AdGl8E9cdGCD9XJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5n8ihFNp7U9D+eSC0Z/N0wgCkPcbGUwlA48UBxBn1uDbk7cnr5nPLk 8n97M8/MdVVhSDjxEkmyVGuhLm1ElzO2pm3Yd+aC6flR/qmjWAWbzUt5IBDc8V98 dIiZBptmGYK6yd5dUE9fSxVsOyEFup5pfC3bEDvG5RC4zABdvsVmNuu1RpY/6gGM D8slCeLX/MkRPqx0wdxIRJXQoiDc//V1ukWoA9mQAgTRryq+py2A//5L51rvxW3K 7va6w2ggMP4uyejKMs3gy9wB1tXovIUNFokm/g5wt44wKYYSPp9h4n+B7l70d5BO FwPIdEQkG/NykqBNndfoUqmvCqFrEu8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:44 2026 by rpki-client