$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf70fa1c-9253-3983-945e-bc20838764e5.roa File: cf70fa1c-9253-3983-945e-bc20838764e5.roa (raw, json) Hash identifier: xl8D9dTxMU28kJCoq6M2s3eW7KNDFfrRDB6WQ24Ek78= Subject key identifier: 8F:B9:0E:72:E4:63:64:C8:33:22:A4:E5:65:D9:F5:4B:91:50:1A:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D7E3536EB714F431C8E0EC300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf70fa1c-9253-3983-945e-bc20838764e5.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 395973 IP address blocks: 136.126.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:36:eb:71:4f:43:1c:8e:0e:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=bef0c5e6-89d9-4137-a197-fbce4296698c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:8e:67:77:51:d7:2d:78:92:5e:4f:99:c5: a4:af:d7:8a:25:22:00:a8:60:33:c7:c7:42:c2:fc: d3:cc:01:27:36:94:6c:0f:a2:e9:a5:25:7e:77:fd: 7b:7d:0e:35:ed:08:62:52:a1:81:d8:b2:0e:6d:7a: d3:c8:2d:7b:9b:e6:b6:c5:99:bf:c5:fa:25:bd:27: 88:a2:0d:0d:d5:3d:1b:7b:a8:bf:b2:5d:64:15:6f: 8f:99:18:4c:1a:bf:f6:de:0d:be:65:75:d8:de:a4: 24:9f:c2:71:c7:db:58:3f:4f:93:1d:9b:ae:e3:fc: dc:00:b3:17:21:e4:2d:13:c2:9c:69:1a:90:2a:16: 9b:18:51:c2:ab:05:94:19:e1:a7:85:24:38:1a:ed: 71:7b:e5:40:74:19:0f:35:f8:c4:68:19:c8:ab:3f: a4:01:fb:64:2c:4d:04:59:d7:e7:e5:49:c7:01:e9: 14:0c:6d:3e:ec:f1:91:da:02:c9:cc:20:c9:8a:74: 57:aa:f6:89:b1:6c:3c:18:bb:f1:6c:c9:72:bd:2b: 38:39:da:1d:f2:35:51:44:d1:92:d3:62:5d:d9:dd: d8:b0:fe:1d:ea:d8:67:f8:3c:74:b5:7d:0a:7e:ea: 6f:5c:ba:21:36:50:ec:27:83:1d:c3:4e:ed:0f:3b: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B9:0E:72:E4:63:64:C8:33:22:A4:E5:65:D9:F5:4B:91:50:1A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf70fa1c-9253-3983-945e-bc20838764e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.126.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d3:9c:44:ed:99:b6:25:dd:92:cc:4f:fe:6e:a2:29:90:e0: 36:0c:6e:83:e1:7f:e4:0f:54:75:26:ac:d9:97:25:b7:d6:a2: d3:1c:ec:60:5b:2c:d5:75:d0:f3:0f:20:b4:4d:f1:ed:78:bd: ae:bf:13:3a:82:ca:25:3b:ad:08:d5:21:d0:cb:78:de:c4:b6: 4a:35:7f:62:4c:37:14:ac:72:ec:c3:2e:34:2d:e5:9a:95:07: ea:a8:ea:cd:e1:7f:db:51:5e:14:73:2a:8b:b5:b5:d3:d2:1f: 3d:6e:f3:80:ed:95:62:fc:05:43:0a:01:5a:10:18:4f:c0:e3: c4:96:1e:1c:29:40:8f:fe:25:80:61:77:d0:30:2f:07:48:95: 82:75:57:16:9b:09:9f:53:f4:cc:77:6c:7c:e5:c2:86:17:79: 01:51:ad:29:3b:31:f4:55:73:f0:0e:2b:96:16:f7:16:ad:4f: ce:ad:27:39:11:fa:89:e6:ac:38:39:7d:ab:66:75:a3:52:69: 00:09:08:61:1f:2d:c6:a4:d9:51:ae:a8:0a:5e:16:2b:f4:15: 1d:7a:87:eb:98:c6:d1:a2:a1:d9:48:36:e2:8f:fc:3f:19:08: 18:05:51:0f:1d:81:c0:89:d7:e4:4b:57:31:10:ed:44:a7:c7: 71:3e:4e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NTbrcU9DHI4OwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk YmVmMGM1ZTYtODlkOS00MTM3LWExOTctZmJjZTQyOTY2OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4WOZ3dR1y14kl5PmcWkr9eKJSIAqGAzx8dC wvzTzAEnNpRsD6LppSV+d/17fQ417QhiUqGB2LIObXrTyC17m+a2xZm/xfolvSeI og0N1T0be6i/sl1kFW+PmRhMGr/23g2+ZXXY3qQkn8Jxx9tYP0+THZuu4/zcALMX IeQtE8KcaRqQKhabGFHCqwWUGeGnhSQ4Gu1xe+VAdBkPNfjEaBnIqz+kAftkLE0E Wdfn5UnHAekUDG0+7PGR2gLJzCDJinRXqvaJsWw8GLvxbMlyvSs4Odod8jVRRNGS 02Jd2d3YsP4d6thn+Dx0tX0KfupvXLohNlDsJ4Mdw07tDztlvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+5DnLkY2TIMyKk5WXZ9UuRUBrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y3MGZhMWMtOTI1My0z OTgzLTk0NWUtYmMyMDgzODc2NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiH7qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfTnETtmbYl3ZLMT/5uoimQ4DYMboPhf+QPVHUmrNmXJbfWotMc7GBb LNV10PMPILRN8e14va6/EzqCyiU7rQjVIdDLeN7Etko1f2JMNxSscuzDLjQt5ZqV B+qo6s3hf9tRXhRzKou1tdPSHz1u84DtlWL8BUMKAVoQGE/A48SWHhwpQI/+JYBh d9AwLwdIlYJ1VxabCZ9T9Mx3bHzlwoYXeQFRrSk7MfRVc/AOK5YW9xatT86tJzkR +onmrDg5fatmdaNSaQAJCGEfLcak2VGuqApeFiv0FR16h+uYxtGiodlINuKP/D8Z CBgFUQ8dgcCJ1+RLVzEQ7USnx3E+Tg0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:08:36 2026 by rpki-client