$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f29b230-264c-35d6-933d-2b0776835e2a.roa File: 3f29b230-264c-35d6-933d-2b0776835e2a.roa (raw, json) Hash identifier: jGfnXaL+LzvHMJFI1KgoP8x1vjrharbUUeNFCNoTNwQ= Subject key identifier: 83:9D:0D:13:1D:84:F9:9C:60:BD:14:8E:03:50:DA:F8:8B:49:FB:6D Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D87FA96DD3D693A78B7559980 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f29b230-264c-35d6-933d-2b0776835e2a.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 3320 IP address blocks: 136.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:96:dd:3d:69:3a:78:b7:55:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=effaa6b6-fc25-469c-8e5e-527d19ddd9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:d6:03:a6:91:be:19:73:80:54:0e:38:53: 40:54:96:31:f0:ab:a6:42:2e:50:d0:d5:cd:cf:20: 41:60:f9:18:07:a0:29:55:36:12:0f:c9:0e:56:81: 48:00:58:d7:43:79:4d:c0:8f:2d:bb:9b:20:ce:93: 88:45:dc:2c:4f:e9:99:79:1f:ce:5d:45:02:b5:1a: 21:14:e5:ea:dc:ad:d8:39:06:80:93:ed:7a:f4:26: b5:d9:24:b3:66:ec:9e:59:7d:4c:04:23:13:36:02: 4b:61:80:37:62:5a:37:34:67:a6:bb:17:0b:a1:1c: 09:bb:11:19:df:41:10:93:7b:d4:fe:b9:cf:06:67: 29:c7:71:bb:c7:39:ee:a4:2c:ce:f3:69:e9:48:52: 4d:4d:27:d5:9f:d3:7e:2b:72:76:f9:00:f5:ba:a5: 60:f5:7d:ff:67:4f:08:d5:af:c2:c1:10:fe:2c:34: 58:1e:36:43:bd:74:8a:f3:2c:f1:09:35:cf:76:f0: de:9f:f8:cf:22:af:4e:1f:0f:07:1c:bf:4d:3e:c7: 76:de:96:d2:04:ba:45:c9:a0:47:5f:7e:4e:0b:c8: ca:16:c0:ec:b9:a7:69:53:2f:c6:ba:30:e5:11:25: f5:84:0c:58:71:d1:99:cd:65:06:47:52:07:3a:4d: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9D:0D:13:1D:84:F9:9C:60:BD:14:8E:03:50:DA:F8:8B:49:FB:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f29b230-264c-35d6-933d-2b0776835e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:12:54:92:6e:df:39:f2:e5:4d:55:6b:eb:d7:4b:48:3f:10: b3:7d:74:4e:b8:2f:21:9a:0c:b2:d5:b9:73:e5:b5:3b:10:4f: 2f:e7:c0:c0:c6:85:70:2f:8d:a3:b5:21:c3:12:ba:f3:0e:63: 12:84:fa:1d:39:21:33:b7:5c:05:c5:09:9f:ac:ed:a5:6f:b5: 94:4b:85:a7:04:e6:26:1e:0d:6c:34:98:7a:25:2f:1f:34:f8: 09:14:dc:3f:7b:23:9b:7a:eb:84:bf:8e:cc:54:d5:3d:3f:7b: b3:74:31:d7:e7:0d:b4:3b:ee:66:e3:d0:a8:03:d9:ae:49:eb: 71:21:c9:c9:d4:16:16:3d:6b:f0:8c:22:b8:03:d6:56:c4:23: 14:ad:6f:7b:e3:90:74:16:0f:7a:ea:51:d3:81:3a:a3:ca:00: 94:36:89:d9:e5:eb:b9:3a:f6:0a:10:60:ad:b4:54:ee:f1:6d: 4e:8e:50:d8:b8:5e:6e:94:8a:16:28:73:a2:bc:03:03:cb:cb: 3f:e7:00:f6:30:2f:07:b9:ca:51:d5:ef:9b:0e:6d:e6:53:be: 1f:42:c6:27:a6:2d:56:78:f1:5d:4f:b3:c9:ef:53:1b:42:0c: a9:4f:0a:82:dc:aa:05:57:ca:a2:95:e0:bf:68:78:5c:ee:95: 52:5c:79:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pbdPWk6eLdVmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk ZWZmYWE2YjYtZmMyNS00NjljLThlNWUtNTI3ZDE5ZGRkOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRrWA6aRvhlzgFQOOFNAVJYx8KumQi5Q0NXN zyBBYPkYB6ApVTYSD8kOVoFIAFjXQ3lNwI8tu5sgzpOIRdwsT+mZeR/OXUUCtRoh FOXq3K3YOQaAk+169Ca12SSzZuyeWX1MBCMTNgJLYYA3Ylo3NGemuxcLoRwJuxEZ 30EQk3vU/rnPBmcpx3G7xznupCzO82npSFJNTSfVn9N+K3J2+QD1uqVg9X3/Z08I 1a/CwRD+LDRYHjZDvXSK8yzxCTXPdvDen/jPIq9OHw8HHL9NPsd23pbSBLpFyaBH X35OC8jKFsDsuadpUy/GujDlESX1hAxYcdGZzWUGR1IHOk27fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOdDRMdhPmcYL0UjgNQ2viLSfttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2YyOWIyMzAtMjY0Yy0z NWQ2LTkzM2QtMmIwNzc2ODM1ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQSVJJu3zny5U1Va+vXS0g/ELN9dE64LyGaDLLVuXPltTsQTy/nwMDG hXAvjaO1IcMSuvMOYxKE+h05ITO3XAXFCZ+s7aVvtZRLhacE5iYeDWw0mHolLx80 +AkU3D97I5t664S/jsxU1T0/e7N0MdfnDbQ77mbj0KgD2a5J63EhycnUFhY9a/CM IrgD1lbEIxStb3vjkHQWD3rqUdOBOqPKAJQ2idnl67k69goQYK20VO7xbU6OUNi4 Xm6UihYoc6K8AwPLyz/nAPYwLwe5ylHV75sObeZTvh9CxiemLVZ48V1Ps8nvUxtC DKlPCoLcqgVXyqKV4L9oeFzulVJcees= -----END CERTIFICATE-----Generated at Fri Apr 17 10:01:23 2026 by rpki-client