$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa File: 20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa (raw, json) Hash identifier: efnmAJMKsZxYnbAHR2s9Ktk3vr01QbM4IIAaEIK9R6c= Subject key identifier: 47:2B:44:39:66:9E:35:10:1A:F9:A7:D5:23:64:B2:86:12:6E:5C:9D Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D24E0329529B0EFFB8CB2D500 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 136.22.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:32:95:29:b0:ef:fb:8c:b2:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3bfd723b-4f6a-40cc-b6ec-7a4620cd7517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:a5:49:e2:10:06:54:ab:fd:95:71:90:27: 17:da:bc:55:c4:71:2a:7e:ca:6b:b5:9a:4a:fa:78: d9:96:18:f1:45:02:d7:79:e9:04:a0:4b:fe:a5:91: 94:84:d2:b1:34:c4:e0:26:99:73:07:ad:b5:32:79: 0d:15:e7:9f:f6:f6:6a:f3:3a:c5:0e:12:06:8f:f9: 9a:6d:50:54:97:be:38:f8:c5:97:ac:5e:f5:f2:f2: bd:09:b3:35:2e:8c:5e:ec:08:d0:5a:32:d0:18:70: d5:26:ce:54:b8:5b:18:36:54:2c:56:1b:81:19:e4: dd:17:7f:93:aa:7c:2f:69:c2:9e:fb:96:45:5f:52: 15:03:51:bf:a0:51:1f:5e:6b:b2:2b:44:0a:17:e0: c8:ae:c6:3a:6b:97:45:6f:67:72:79:50:36:9d:21: 5b:0e:70:9d:b4:92:fc:ee:60:74:33:01:e2:bf:db: ed:05:6a:72:d0:e6:27:87:37:be:3c:e5:77:aa:3b: b6:37:30:3c:7a:4a:e6:cb:74:5f:6c:77:2a:a7:8a: 80:d9:45:b0:d2:72:f1:b9:78:c9:71:b1:f3:79:16: 04:a7:d2:fd:f9:c7:fc:7d:95:a5:e8:5d:6b:49:da: 5c:31:97:de:35:8e:e2:2b:dc:fb:44:c2:3d:e8:b1: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2B:44:39:66:9E:35:10:1A:F9:A7:D5:23:64:B2:86:12:6E:5C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:47:dd:35:df:a1:cb:00:13:5e:d3:d2:71:23:0e:f5:08:64: 09:dd:58:50:cd:8e:1c:c9:3d:c4:ed:eb:cd:65:c2:ba:e9:a9: 71:13:8f:4c:77:24:e8:9b:41:2d:e0:5f:ee:db:da:20:a9:69: 51:cf:4a:56:49:56:68:6c:b1:ed:6e:b0:02:b1:82:67:b9:45: 56:7e:4c:15:cc:86:07:7e:53:c1:e1:30:1f:31:04:96:61:82: 81:ef:e2:19:51:1d:3c:b8:fc:64:ee:e1:07:15:01:94:86:3a: d0:6a:21:e9:ce:3f:a8:b0:dd:3c:7d:1c:2f:59:30:c6:e0:4f: ec:fd:23:74:fc:88:66:e6:3c:99:4e:0b:ba:ff:0c:84:70:22: bb:ec:4c:1b:cd:a3:b7:1b:39:6b:2b:9e:da:06:1e:2d:7f:2a: af:3e:fc:02:f6:a6:eb:b5:0c:dd:e9:ae:f1:c6:d0:5c:70:d0: 4d:30:85:0f:89:66:98:12:1e:a9:5e:37:83:bd:61:50:c3:48: 19:c8:8f:2f:af:c4:8c:ce:e2:43:25:c2:09:12:ea:7c:06:85: d1:01:23:34:0e:d7:12:5b:ed:30:ee:e7:9c:54:df:3f:71:21: 51:7b:3e:43:7a:80:d0:2a:c3:5d:08:1d:e6:ee:50:8c:a5:81: d4:57:f8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DKVKbDv+4yy1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2JmZDcyM2ItNGY2YS00MGNjLWI2ZWMtN2E0NjIwY2Q3NTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCulSeIQBlSr/ZVxkCcX2rxVxHEqfsprtZpK +njZlhjxRQLXeekEoEv+pZGUhNKxNMTgJplzB621MnkNFeef9vZq8zrFDhIGj/ma bVBUl744+MWXrF718vK9CbM1Loxe7AjQWjLQGHDVJs5UuFsYNlQsVhuBGeTdF3+T qnwvacKe+5ZFX1IVA1G/oFEfXmuyK0QKF+DIrsY6a5dFb2dyeVA2nSFbDnCdtJL8 7mB0MwHiv9vtBWpy0OYnhze+POV3qju2NzA8ekrmy3RfbHcqp4qA2UWw0nLxuXjJ cbHzeRYEp9L9+cf8fZWl6F1rSdpcMZfeNY7iK9z7RMI96LFEZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcrRDlmnjUQGvmn1SNksoYSblydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMjBlMThkMGEtMTU2ZS0z YmY3LTkwOTgtNzZkMWZhODYzZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhH3TXfocsAE17T0nEjDvUIZAndWFDNjhzJPcTt681lwrrpqXETj0x3 JOibQS3gX+7b2iCpaVHPSlZJVmhsse1usAKxgme5RVZ+TBXMhgd+U8HhMB8xBJZh goHv4hlRHTy4/GTu4QcVAZSGOtBqIenOP6iw3Tx9HC9ZMMbgT+z9I3T8iGbmPJlO C7r/DIRwIrvsTBvNo7cbOWsrntoGHi1/Kq8+/AL2puu1DN3prvHG0Fxw0E0whQ+J ZpgSHqleN4O9YVDDSBnIjy+vxIzO4kMlwgkS6nwGhdEBIzQO1xJb7TDu55xU3z9x IVF7PkN6gNAqw10IHebuUIylgdRX+G0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:46 2026 by rpki-client