$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa File: 631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa (raw, json) Hash identifier: T/9qIBOtcTkO0xJKmJ/OQZ52bJcXS82umxSCmQjcNCE= Subject key identifier: 88:B0:DB:97:0E:A0:A4:19:76:5D:3F:03:8F:0B:9A:37:03:A0:D0:8B Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D60E5152A641A07DA743AA780 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 3320 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:15:2a:64:1a:07:da:74:3a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=07e1bfde-290c-4655-9ef2-773d9c262053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:98:7a:24:b7:f8:ea:84:f6:33:f0:1e:06: 69:73:9c:a7:b0:98:1d:29:c4:e4:d2:cb:2e:80:78: 4e:82:92:0f:fb:bf:d9:23:95:af:62:f7:05:b1:81: 16:18:23:36:fe:51:4c:70:d5:c7:cc:b7:33:c4:da: 69:0d:49:2e:70:13:ec:74:82:28:5e:d5:12:e4:9c: 2e:4c:8f:f7:cc:0e:b6:26:1e:56:60:df:56:a1:8d: 18:45:c6:86:f0:c9:26:78:31:28:83:5d:4a:58:08: 93:87:28:30:42:e9:d7:a3:2b:dc:91:39:94:86:73: de:ef:ec:c4:57:18:87:84:3d:71:fd:87:1a:11:76: 8a:8b:4d:67:13:f1:e8:60:9f:0a:06:54:fe:67:38: 25:9e:af:59:35:dc:2b:3f:1e:81:d0:95:d9:dc:51: 93:51:dc:59:3b:c5:52:27:1b:b6:05:5e:5a:cf:c9: 52:4b:e7:68:74:41:b0:c3:0f:10:51:bc:45:2c:19: 26:8a:ae:95:e5:74:c2:09:50:a6:7d:6d:ab:5d:48: d3:52:51:6c:b1:2d:3a:3a:e1:30:52:c5:d0:95:47: 1a:fb:1b:f7:18:c0:c5:e9:90:a2:30:1f:fb:6d:e4: 80:43:42:34:b7:74:3b:2c:65:f4:81:0c:9f:cb:59: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B0:DB:97:0E:A0:A4:19:76:5D:3F:03:8F:0B:9A:37:03:A0:D0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2b:cf:5c:85:2f:47:7a:1e:ea:09:62:7d:c9:8d:9c:bb:78: 39:31:83:f1:54:1c:26:f5:14:c3:c8:3e:64:7c:d6:53:73:bf: 27:6f:a3:d8:d0:24:58:18:27:9b:c2:b6:42:50:eb:cf:30:43: c9:c6:37:8b:9f:1f:c6:fa:41:87:28:2a:49:77:21:ee:6b:0f: 12:8d:32:55:e1:7b:03:bb:1e:50:e1:b2:ec:1d:68:07:17:75: 71:51:4b:d5:e4:91:cb:e2:6e:ab:e0:cb:9f:b8:ab:20:43:92: 43:7e:8f:99:15:68:38:0d:6b:b4:8d:f9:a0:e2:c8:4d:b7:4c: ed:7a:6d:60:39:ff:75:40:f8:17:11:8c:76:12:80:1c:24:86: 14:27:2a:6c:94:f8:fd:f6:dc:6a:22:77:51:4f:c1:95:a3:f1: 17:69:23:82:50:32:88:15:6a:8d:9a:09:7a:03:0a:28:c7:95: e2:b6:e8:69:45:c8:57:52:ad:a2:d4:ba:73:88:ba:15:b3:50: f2:04:c7:f8:66:a2:cc:9d:46:9e:cc:b0:77:c7:26:e1:bc:5e: 44:02:d1:ed:66:2a:98:bc:2d:56:94:dd:26:3f:96:a9:4a:bd: ec:9c:d1:41:fc:19:b1:8c:a4:a7:63:79:bd:0c:f5:c3:04:da: 91:4b:db:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RUqZBoH2nQ6p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MDdlMWJmZGUtMjkwYy00NjU1LTllZjItNzczZDljMjYyMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5SYeiS3+OqE9jPwHgZpc5ynsJgdKcTk0ssu gHhOgpIP+7/ZI5WvYvcFsYEWGCM2/lFMcNXHzLczxNppDUkucBPsdIIoXtUS5Jwu TI/3zA62Jh5WYN9WoY0YRcaG8MkmeDEog11KWAiThygwQunXoyvckTmUhnPe7+zE VxiHhD1x/YcaEXaKi01nE/HoYJ8KBlT+Zzglnq9ZNdwrPx6B0JXZ3FGTUdxZO8VS Jxu2BV5az8lSS+dodEGwww8QUbxFLBkmiq6V5XTCCVCmfW2rXUjTUlFssS06OuEw UsXQlUca+xv3GMDF6ZCiMB/7beSAQ0I0t3Q7LGX0gQyfy1maxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiw25cOoKQZdl0/A48LmjcDoNCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjMxMjkyZjEtMzNkNy0z YjZiLWE2YzgtYTlkZmJiOGZiNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFErz1yFL0d6HuoJYn3JjZy7eDkxg/FUHCb1FMPIPmR81lNzvydvo9jQ JFgYJ5vCtkJQ688wQ8nGN4ufH8b6QYcoKkl3Ie5rDxKNMlXhewO7HlDhsuwdaAcX dXFRS9Xkkcvibqvgy5+4qyBDkkN+j5kVaDgNa7SN+aDiyE23TO16bWA5/3VA+BcR jHYSgBwkhhQnKmyU+P323Goid1FPwZWj8RdpI4JQMogVao2aCXoDCijHleK26GlF yFdSraLUunOIuhWzUPIEx/hmosydRp7MsHfHJuG8XkQC0e1mKpi8LVaU3SY/lqlK veyc0UH8GbGMpKdjeb0M9cME2pFL28M= -----END CERTIFICATE-----Generated at Fri Apr 17 09:51:08 2026 by rpki-client