$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa File: 538ac9de-4a75-3f69-b455-da6a5cb4052d.roa (raw, json) Hash identifier: hTlvnQtNqzGLewQhTiPCXMd4Q9GG/h2mR7GUlP1HnHI= Subject key identifier: 2E:71:97:E0:09:92:9E:0D:53:FB:76:2F:4B:3F:B5:B5:F6:6C:9E:61 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584E059C4D0A7B635C0908175240 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 36492 IP address blocks: 136.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4d:0a:7b:63:5c:09:08:17:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2e4d1b03-233d-4624-a902-83c7d51c581b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:3c:92:13:5b:ce:ee:ae:93:6e:01:cb:78: f0:cc:a7:f3:5a:9b:13:67:58:7f:85:0b:72:de:65: 0b:87:9b:3c:69:9f:af:be:c2:c2:3b:60:14:04:19: e9:10:ab:8b:c4:96:af:9f:a4:b1:ad:83:6d:7d:0c: 35:72:80:0e:f3:49:b1:e6:81:e3:d1:1b:d5:a7:9f: f1:0b:c9:f6:4c:b0:54:43:d7:be:62:48:3c:3b:15: 06:9f:00:b4:05:23:59:12:72:23:d1:34:51:3c:1c: cc:38:d7:b7:02:5c:20:41:77:25:52:12:4e:32:59: 84:44:0c:bd:f7:0f:ac:d3:e5:f4:7c:9a:16:b4:49: 7e:37:7c:54:a6:cd:f3:7e:30:1a:0b:8f:2e:f0:3c: 6e:23:c8:70:44:af:3e:4d:38:8b:5f:d9:c8:32:fb: 86:3d:21:96:10:18:6e:3e:56:fa:57:6a:88:23:c7: 80:b3:7c:7a:c9:05:fc:52:df:e5:ec:af:b8:a2:e0: a6:6e:77:93:2a:b7:5d:93:42:3b:af:ee:33:e8:5c: 36:a3:a1:11:76:be:1a:a7:11:b9:18:a3:a2:18:93: 0b:92:40:fb:28:ab:69:dd:1a:ec:10:cc:54:77:f1: 69:8a:08:a2:14:88:ee:86:f9:cb:e7:9f:be:a9:f1: 5d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:71:97:E0:09:92:9E:0D:53:FB:76:2F:4B:3F:B5:B5:F6:6C:9E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a2:2d:4a:e6:66:e9:99:0d:4d:ba:89:c3:39:2e:8b:f0:bf: 7f:71:29:48:8e:17:13:85:32:0e:3b:f2:9c:b5:63:28:01:81: f9:74:cd:af:31:b1:58:2f:94:65:e7:66:dd:2d:71:39:bd:af: e2:21:c1:ba:07:99:66:0d:0a:85:aa:c6:5d:70:ea:e1:a7:83: 7f:80:01:0c:20:9c:13:e1:4f:de:4f:7f:c9:15:d8:ff:10:39: 78:ad:ba:09:bf:75:c3:aa:24:0a:8e:e3:be:d8:c9:53:92:d0: 7e:99:cb:eb:9d:40:ec:7d:a1:c1:d3:7a:fa:0d:d6:a2:41:b6: 88:de:5d:ef:63:92:5a:6e:47:c1:ec:be:d0:41:16:fe:16:03: 0a:c3:db:83:1c:1a:bb:9b:a2:16:04:86:ea:17:79:28:0c:d8: 63:23:11:c5:29:70:f2:b4:d8:ca:ca:9a:73:6b:5d:36:40:f9: e2:73:c1:4b:57:33:7b:11:3e:9d:8c:4f:01:37:af:ed:88:ba: dd:8c:21:9e:7f:86:4a:72:cc:71:40:4f:b2:bc:e1:4c:f1:39: 69:da:e5:dc:08:53:b5:63:e5:1e:7a:14:8d:e8:5c:0a:1d:56: d4:66:64:fa:69:f1:02:2a:d4:88:0d:47:6c:3b:48:2c:14:ac: 77:ac:0b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnE0Ke2NcCQgXUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmU0ZDFiMDMtMjMzZC00NjI0LWE5MDItODNjN2Q1MWM1ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQ8khNbzu6uk24By3jwzKfzWpsTZ1h/hQty 3mULh5s8aZ+vvsLCO2AUBBnpEKuLxJavn6SxrYNtfQw1coAO80mx5oHj0RvVp5/x C8n2TLBUQ9e+Ykg8OxUGnwC0BSNZEnIj0TRRPBzMONe3AlwgQXclUhJOMlmERAy9 9w+s0+X0fJoWtEl+N3xUps3zfjAaC48u8DxuI8hwRK8+TTiLX9nIMvuGPSGWEBhu Plb6V2qII8eAs3x6yQX8Ut/l7K+4ouCmbneTKrddk0I7r+4z6Fw2o6ERdr4apxG5 GKOiGJMLkkD7KKtp3RrsEMxUd/FpigiiFIjuhvnL55++qfFd3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5xl+AJkp4NU/t2L0s/tbX2bJ5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTM4YWM5ZGUtNGE3NS0z ZjY5LWI0NTUtZGE2YTVjYjQwNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKiLUrmZumZDU26icM5Lovwv39xKUiOFxOFMg478py1YygBgfl0za8x sVgvlGXnZt0tcTm9r+IhwboHmWYNCoWqxl1w6uGng3+AAQwgnBPhT95Pf8kV2P8Q OXitugm/dcOqJAqO477YyVOS0H6Zy+udQOx9ocHTevoN1qJBtojeXe9jklpuR8Hs vtBBFv4WAwrD24McGrubohYEhuoXeSgM2GMjEcUpcPK02MrKmnNrXTZA+eJzwUtX M3sRPp2MTwE3r+2Iut2MIZ5/hkpyzHFAT7K84UzxOWna5dwIU7Vj5R56FI3oXAod VtRmZPpp8QIq1IgNR2w7SCwUrHesC6g= -----END CERTIFICATE-----Generated at Sat Jun 13 21:36:15 2026 by rpki-client