$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a90dde6-9574-3405-99ed-39f19ad7fd6b.roa File: 2a90dde6-9574-3405-99ed-39f19ad7fd6b.roa (raw, json) Hash identifier: vuxdYLArnLjHoZPoG8gRbnkV3O9Zwi3iLBUg5P0RIN4= Subject key identifier: AB:B2:F8:7F:88:C0:AB:FF:93:9F:6E:E7:13:A4:D2:56:02:CB:35:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D6C42A7475BF29CD40BB18D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a90dde6-9574-3405-99ed-39f19ad7fd6b.roa Signing time: Tue 07 Apr 2026 02:43:10 +0000 ROA not before: Tue 07 Apr 2026 02:43:10 +0000 ROA not after: Mon 06 Jul 2026 02:43:10 +0000 asID: 19527 IP address blocks: 136.121.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:42:a7:47:5b:f2:9c:d4:0b:b1:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 7 02:43:10 2026 GMT Not After : Jul 6 02:43:10 2026 GMT Subject: CN=cf319f38-1566-4438-9fab-109f679ef4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:c7:ce:ef:5f:bf:d2:6a:97:15:a9:4b:f7: be:40:4b:41:05:03:18:ec:f0:2e:99:b0:6f:00:8c: 63:cf:13:7a:a4:c8:dc:eb:d1:00:06:09:ee:5d:03: c4:b6:57:be:4f:dd:94:76:81:ed:73:d2:34:e6:99: 7a:69:ad:b7:98:4a:ec:cc:56:9f:64:e9:b6:9d:37: e0:77:35:14:e9:01:f4:40:af:c5:42:33:d1:a4:32: 7e:be:d5:ac:41:cc:5c:43:e1:a3:07:b4:21:fd:d1: 33:69:18:48:51:42:a8:c6:b9:cd:0a:13:71:fb:ac: 18:39:50:6f:2d:71:87:97:3a:d4:85:49:f9:84:4c: 5b:86:de:d5:c9:eb:7b:ea:d4:df:6f:e7:1c:ce:95: cb:a3:d0:77:72:c7:0d:2f:bb:53:92:81:68:89:00: 65:03:4e:fd:49:ca:e4:a9:b0:4c:9e:9f:2c:f7:84: 36:b6:61:20:53:f4:f4:bb:bb:c1:18:19:a2:99:d2: c3:62:ce:54:8d:96:27:44:54:d4:ff:03:7b:a7:d2: e2:9f:9d:48:f2:6a:ea:00:e5:f1:cb:95:55:fc:1f: 5a:62:e2:39:54:fc:85:7d:4c:bc:b2:36:86:39:5e: 43:c3:bb:63:52:0d:1e:a1:21:78:1c:cd:ab:df:2f: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:F8:7F:88:C0:AB:FF:93:9F:6E:E7:13:A4:D2:56:02:CB:35:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a90dde6-9574-3405-99ed-39f19ad7fd6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:50:2c:4f:02:19:c8:a4:7f:14:38:86:4b:44:d9:80:32:92: d6:d0:a4:53:f0:26:5d:61:0d:55:72:e6:8c:19:a4:e5:dd:f0: c2:21:2b:d1:72:80:3d:66:9c:56:7e:29:26:7c:41:72:64:93: 63:21:1c:56:1a:f8:1b:1a:5b:0b:7f:32:49:12:ef:be:e3:4b: fa:d6:73:d1:7c:9a:26:f7:e1:e3:8f:75:51:de:62:cd:9f:d4: 52:4f:b0:54:ad:90:6d:40:b0:49:ae:26:6c:a5:50:df:73:7c: 8f:4e:f1:cd:0e:f8:f9:79:77:17:1f:07:84:95:41:3c:71:84: db:84:e7:57:8d:6c:3d:30:8e:17:8e:8c:33:3c:b7:ae:de:f3: 3a:95:89:34:a1:8d:c1:e1:97:03:bc:86:17:d5:43:18:b4:5c: bc:d4:3a:19:b0:05:f1:39:8e:9c:13:c8:c1:9e:b3:15:d3:5f: eb:67:f8:51:24:b3:89:d5:2c:49:16:17:5c:78:07:1f:e3:eb: ed:d9:db:ec:b7:a8:44:93:fa:60:2c:8d:97:c0:8a:4a:aa:e5: 5b:f1:a7:5b:f5:35:f5:fa:b7:f7:0f:29:b1:02:0c:c0:9c:7c: be:20:63:1d:42:5a:27:08:98:84:07:3e:04:29:f1:b5:52:5f: 84:70:8b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sQqdHW/Kc1AuxjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwNzAyNDMxMFoXDTI2MDcwNjAyNDMxMFowLzEtMCsGA1UEAxMk Y2YzMTlmMzgtMTU2Ni00NDM4LTlmYWItMTA5ZjY3OWVmNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUbHzu9fv9JqlxWpS/e+QEtBBQMY7PAumbBv AIxjzxN6pMjc69EABgnuXQPEtle+T92UdoHtc9I05pl6aa23mErszFafZOm2nTfg dzUU6QH0QK/FQjPRpDJ+vtWsQcxcQ+GjB7Qh/dEzaRhIUUKoxrnNChNx+6wYOVBv LXGHlzrUhUn5hExbht7Vyet76tTfb+cczpXLo9B3cscNL7tTkoFoiQBlA079Scrk qbBMnp8s94Q2tmEgU/T0u7vBGBmimdLDYs5UjZYnRFTU/wN7p9Lin51I8mrqAOXx y5VV/B9aYuI5VPyFfUy8sjaGOV5Dw7tjUg0eoSF4HM2r3y+1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuy+H+IwKv/k59u5xOk0lYCyzUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE5MGRkZTYtOTU3NC0z NDA1LTk5ZWQtMzlmMTlhZDdmZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5QLE8CGcikfxQ4hktE2YAyktbQpFPwJl1hDVVy5owZpOXd8MIhK9Fy gD1mnFZ+KSZ8QXJkk2MhHFYa+BsaWwt/MkkS777jS/rWc9F8mib34eOPdVHeYs2f 1FJPsFStkG1AsEmuJmylUN9zfI9O8c0O+Pl5dxcfB4SVQTxxhNuE51eNbD0wjheO jDM8t67e8zqViTShjcHhlwO8hhfVQxi0XLzUOhmwBfE5jpwTyMGesxXTX+tn+FEk s4nVLEkWF1x4Bx/j6+3Z2+y3qEST+mAsjZfAikqq5Vvxp1v1NfX6t/cPKbECDMCc fL4gYx1CWicImIQHPgQp8bVSX4Rwixw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:06:59 2026 by rpki-client