$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa File: e4352b8d-f0be-3577-958a-9d3589216547.roa (raw, json) Hash identifier: /HwTlpePXamA/MKAt+uM6/OkeBOPuQ1DK38WAwwmiBQ= Subject key identifier: F1:F9:9F:F6:B5:27:FE:40:95:BB:B2:16:62:85:6C:D0:0B:33:A0:29 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584D60E51550D7BBF41859990D60 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 3320 IP address blocks: 136.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:15:50:d7:bb:f4:18:59:99:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=4f5a224a-59af-469f-8162-c554978ed0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:78:75:ee:50:46:f5:1b:0f:15:cb:e3:53: 49:84:01:22:42:25:c3:51:27:8f:26:8e:27:83:6e: aa:88:cc:c0:28:5d:28:d3:b0:f0:63:4f:8c:50:d4: 5a:4b:96:d4:74:8d:b4:af:94:0e:95:8b:f4:18:c6: 17:21:68:67:5b:5f:27:67:bd:21:d1:50:df:68:65: 83:80:12:86:8d:3f:79:7f:7a:86:cb:ac:0b:82:22: f4:d0:c1:07:60:59:9e:f6:3c:70:a5:f8:59:00:ce: 46:66:e2:5a:15:75:dd:2e:0c:ec:b9:ac:97:5b:91: 4c:9c:ed:dc:fa:ff:8c:18:54:79:46:6b:01:3b:ac: f0:79:f3:82:ca:d5:0e:c1:e5:ab:17:32:80:88:f3: c8:c5:bf:55:8f:82:25:6a:7d:2b:85:b0:c9:c2:e1: f5:27:22:75:dd:4e:f1:52:0e:b8:8a:f1:a8:ec:7f: f5:e9:96:f5:94:af:f9:f4:ed:2a:23:44:05:3c:3f: 6e:2e:12:60:fc:7a:ff:9e:e4:ec:23:bd:37:de:06: d7:a1:52:eb:9d:9c:21:31:fb:e5:d8:b0:c8:31:c3: 36:8d:36:47:17:96:df:35:91:15:5c:c4:be:7b:47: 9f:c3:04:ec:89:32:f7:43:d9:86:15:3d:ec:84:33: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F9:9F:F6:B5:27:FE:40:95:BB:B2:16:62:85:6C:D0:0B:33:A0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:06:78:ed:2a:a6:44:7a:1c:64:86:21:01:0b:72:d0:7a:06: 35:3a:e5:fb:f8:93:c0:6e:7e:45:43:49:e9:8c:7c:ac:f7:1a: 72:8c:f5:ad:c3:82:35:67:d9:48:a9:63:34:b4:46:0d:a0:7b: 0d:65:c6:c3:c9:ca:ad:87:0d:bd:e4:1e:97:70:e0:3d:13:48: 8e:2e:c7:dc:41:20:74:71:45:b1:e8:51:55:01:39:48:fa:3f: 75:89:61:a2:45:44:1a:1d:74:c3:2b:c3:74:da:15:39:72:a7: 56:7b:47:70:43:38:37:03:43:d7:63:fc:ac:10:6d:ef:b0:85: 88:c5:12:d9:b6:53:07:cb:c5:26:c9:a3:9e:a1:f2:31:51:c4: ff:cd:22:14:a0:fd:94:57:e2:6f:77:78:4f:ed:21:93:00:82: d1:84:d1:c2:58:fb:82:a0:9a:61:00:88:1c:2c:45:6e:a6:73: 99:4e:c9:be:91:76:2d:23:bf:a7:97:09:95:6e:1e:d3:e4:46: 57:d1:e8:3f:24:62:be:7d:e4:c6:ee:cb:03:c4:27:51:e1:43: f3:74:3a:9f:18:1a:6c:0b:c4:25:9f:63:1d:5a:5e:64:87:f0: 9e:59:59:af:a4:76:47:53:40:96:85:e3:16:81:40:17:9a:c9: cb:eb:f3:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RVQ17v0GFmZDWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NGY1YTIyNGEtNTlhZi00NjlmLTgxNjItYzU1NDk3OGVkMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7x4de5QRvUbDxXL41NJhAEiQiXDUSePJo4n g26qiMzAKF0o07DwY0+MUNRaS5bUdI20r5QOlYv0GMYXIWhnW18nZ70h0VDfaGWD gBKGjT95f3qGy6wLgiL00MEHYFme9jxwpfhZAM5GZuJaFXXdLgzsuayXW5FMnO3c +v+MGFR5RmsBO6zwefOCytUOweWrFzKAiPPIxb9Vj4Ilan0rhbDJwuH1JyJ13U7x Ug64ivGo7H/16Zb1lK/59O0qI0QFPD9uLhJg/Hr/nuTsI7033gbXoVLrnZwhMfvl 2LDIMcM2jTZHF5bfNZEVXMS+e0efwwTsiTL3Q9mGFT3shDN1DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH5n/a1J/5AlbuyFmKFbNALM6ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZTQzNTJiOGQtZjBiZS0z NTc3LTk1OGEtOWQzNTg5MjE2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUGeO0qpkR6HGSGIQELctB6BjU65fv4k8BufkVDSemMfKz3GnKM9a3D gjVn2UipYzS0Rg2gew1lxsPJyq2HDb3kHpdw4D0TSI4ux9xBIHRxRbHoUVUBOUj6 P3WJYaJFRBoddMMrw3TaFTlyp1Z7R3BDODcDQ9dj/KwQbe+whYjFEtm2UwfLxSbJ o56h8jFRxP/NIhSg/ZRX4m93eE/tIZMAgtGE0cJY+4KgmmEAiBwsRW6mc5lOyb6R di0jv6eXCZVuHtPkRlfR6D8kYr595MbuywPEJ1HhQ/N0Op8YGmwLxCWfYx1aXmSH 8J5ZWa+kdkdTQJaF4xaBQBeaycvr8xM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:49 2026 by rpki-client