$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/21c6a376-bdc8-37d6-b25a-8d459b435f72.roa File: 21c6a376-bdc8-37d6-b25a-8d459b435f72.roa (raw, json) Hash identifier: Vuq5shupGNFuhJiMtuy/wDWsAztmU5TdzWP3HQc+bnA= Subject key identifier: 33:6E:DF:2F:65:A4:98:FC:5F:13:8C:F5:32:88:38:13:26:D1:94:77 Certificate issuer: /CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Certificate serial: 010D0C9F4328584D24CBBEC1AB0C1DDC6D822B00 Authority key identifier: AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/21c6a376-bdc8-37d6-b25a-8d459b435f72.roa Signing time: Thu 12 Mar 2026 12:21:12 +0000 ROA not before: Thu 12 Mar 2026 12:21:12 +0000 ROA not after: Wed 10 Jun 2026 12:21:12 +0000 asID: 18540 IP address blocks: 136.165.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:cb:be:c1:ab:0c:1d:dc:6d:82:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Validity Not Before: Mar 12 12:21:12 2026 GMT Not After : Jun 10 12:21:12 2026 GMT Subject: CN=0ee42fcb-046e-4e43-86a4-472bb1ce7930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:a5:4a:43:ac:d6:00:28:b1:10:cf:ad:dd: 30:ba:98:51:42:6b:8b:80:04:19:9a:d2:df:ea:d9: 99:87:a4:56:b8:3f:a6:00:b3:87:5a:2e:fa:ed:68: 08:62:8c:b8:78:61:e7:30:2d:84:85:6a:0e:ac:e0: 36:a3:2b:4d:bc:71:bc:cd:14:c6:17:75:73:0e:0b: 62:4b:bd:f2:23:98:40:c3:d5:20:c1:ce:99:92:fb: 61:d8:8b:37:01:40:bc:1f:87:20:0a:f6:fe:02:24: 23:29:43:79:75:2f:92:b0:15:28:b9:ee:6c:02:b1: bf:2f:78:76:df:ef:2e:4e:55:b3:63:0e:27:11:7d: 2d:c7:19:7a:4e:a7:13:db:56:84:96:d8:5f:2b:03: 6c:79:70:d1:6f:9c:f5:27:d9:30:9a:12:25:24:12: 7f:7d:eb:4c:e3:1e:a9:bd:68:f8:76:f2:99:ae:f8: a6:ef:e8:83:fe:93:a4:73:bf:e9:54:58:67:c1:2a: b6:bf:04:04:f9:a1:93:2e:26:30:a3:30:8c:93:a1: bb:f3:7a:1c:dc:6b:da:c2:09:43:75:c8:26:ec:0c: 50:6b:2b:61:cc:fd:73:a7:fa:ab:e4:40:1c:ea:fe: 59:27:3c:e4:31:d1:1d:47:2e:da:dd:30:a0:a4:28: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:DF:2F:65:A4:98:FC:5F:13:8C:F5:32:88:38:13:26:D1:94:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/21c6a376-bdc8-37d6-b25a-8d459b435f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.crl X509v3 Authority Key Identifier: keyid:AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer sbgp-ipAddrBlock: critical IPv4: 136.165.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a0:41:9c:cf:39:33:c8:11:e4:3d:78:94:43:16:4a:bc:cb: da:18:e2:3d:a0:9c:7d:19:05:6d:fc:4d:98:f9:35:a7:ac:27: eb:c6:f5:73:22:84:7e:43:12:3e:70:45:0a:c8:20:61:f6:cd: 92:ce:2f:4f:61:14:dd:9f:ea:b1:f6:8e:70:41:ad:bf:2c:61: 51:93:35:2d:cc:43:1f:26:3a:95:a4:4f:ec:16:04:f0:6f:20: f9:5b:39:aa:09:f7:2b:79:ed:3a:d1:7e:ae:34:b2:95:ad:4b: af:4b:64:5a:0a:85:62:0d:f9:5e:42:2a:88:52:64:ec:a2:7e: 6a:29:a0:4b:61:ee:e0:7b:a2:1f:b7:89:ae:ab:5b:69:4b:a6: a4:40:72:1f:e1:bd:0a:41:b3:23:d4:d1:f2:1f:88:83:9f:99: 66:a7:1b:d9:80:67:f5:16:e9:79:0c:83:7a:34:6c:64:69:e6: 5b:41:37:11:2d:b9:46:2f:3a:8d:00:93:75:39:8b:14:93:b1: 1f:1b:8b:2c:46:07:5b:98:df:e7:6f:2a:a3:c1:24:a5:9d:11: b5:47:ec:17:9c:6c:b7:3e:2a:d9:d9:a1:7b:66:33:91:66:e8: ab:fe:b2:49:f0:f2:44:1f:4b:1d:83:0f:b9:40:a0:8f:a3:dd: 83:d7:07:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ky77Bqwwd3G2CKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNkMmYxOGMtMWQxMy00NjFhLWEwM2MtYjk5MTIyMGJi NTVhMB4XDTI2MDMxMjEyMjExMloXDTI2MDYxMDEyMjExMlowLzEtMCsGA1UEAxMk MGVlNDJmY2ItMDQ2ZS00ZTQzLTg2YTQtNDcyYmIxY2U3OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qilSkOs1gAosRDPrd0wuphRQmuLgAQZmtLf 6tmZh6RWuD+mALOHWi767WgIYoy4eGHnMC2EhWoOrOA2oytNvHG8zRTGF3VzDgti S73yI5hAw9Ugwc6Zkvth2Is3AUC8H4cgCvb+AiQjKUN5dS+SsBUoue5sArG/L3h2 3+8uTlWzYw4nEX0txxl6TqcT21aElthfKwNseXDRb5z1J9kwmhIlJBJ/fetM4x6p vWj4dvKZrvim7+iD/pOkc7/pVFhnwSq2vwQE+aGTLiYwozCMk6G783oc3GvawglD dcgm7AxQaythzP1zp/qr5EAc6v5ZJzzkMdEdRy7a3TCgpChHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNu3y9lpJj8XxOM9TKIOBMm0ZR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Y2Qy ZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkxMjIwYmI1NWEvMjFjNmEzNzYtYmRjOC0z N2Q2LWIyNWEtOGQ0NTliNDM1ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmNkMmYxOGMtMWQxMy00NjFhLWEw M2MtYjk5MTIyMGJiNTVhLzZjZDJmMThjLTFkMTMtNDYxYS1hMDNjLWI5OTEyMjBi YjU1YS5jcmwwHwYDVR0jBBgwFoAUqhwJKxgDjkJAsDVy4InOB01jXtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Y2QyZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkx MjIwYmI1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiKX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGygQZzPOTPIEeQ9eJRDFkq8y9oY4j2gnH0ZBW38TZj5NaesJ+vG9XMi hH5DEj5wRQrIIGH2zZLOL09hFN2f6rH2jnBBrb8sYVGTNS3MQx8mOpWkT+wWBPBv IPlbOaoJ9yt57TrRfq40spWtS69LZFoKhWIN+V5CKohSZOyifmopoEth7uB7oh+3 ia6rW2lLpqRAch/hvQpBsyPU0fIfiIOfmWanG9mAZ/UW6XkMg3o0bGRp5ltBNxEt uUYvOo0Ak3U5ixSTsR8biyxGB1uY3+dvKqPBJKWdEbVH7BecbLc+KtnZoXtmM5Fm 6Kv+sknw8kQfSx2DD7lAoI+j3YPXB3M= -----END CERTIFICATE-----Generated at Thu Mar 26 08:17:22 2026 by rpki-client