$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/28d6deac-c048-3de6-a65b-745142ffb645.roa File: 28d6deac-c048-3de6-a65b-745142ffb645.roa (raw, json) Hash identifier: p8UeBagYJDpKWGPfqtfxpyGrPPVsUJVJ1y3I/Su5C7o= Subject key identifier: 79:27:E4:90:FA:3A:17:0A:1E:C7:F6:74:94:67:A3:8D:55:68:B0:B7 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D24E02B1D2A482F804D6F1880 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/28d6deac-c048-3de6-a65b-745142ffb645.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 136.22.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2b:1d:2a:48:2f:80:4d:6f:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a1edc358-06f0-40aa-959e-4dbc68ee349d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:45:54:93:64:03:fb:5e:b4:e7:4e:d2:ed: 18:93:8a:18:96:c5:b3:ae:93:64:f2:95:c3:c3:5c: be:12:a7:d7:58:06:7f:37:c5:26:e5:78:76:9a:ef: 6a:76:b4:e0:a8:76:39:d2:7e:34:06:8d:f4:68:a9: ba:a6:79:20:9d:bc:4c:7d:fb:44:3b:d5:4b:26:64: 7f:ae:a8:a4:ba:9e:e4:62:11:75:7c:51:42:19:e6: a8:8c:09:7a:59:ff:b6:19:3b:c3:67:e2:ec:29:6a: da:22:6c:61:3d:f1:58:18:89:bf:55:16:33:a1:1d: d9:48:41:b9:77:8a:8d:0d:7a:f8:4d:e8:1f:01:ae: 39:d5:bc:c0:07:75:f0:23:b0:2a:f9:94:48:d6:b3: 77:3c:98:99:20:2e:7c:c1:34:68:6c:17:3e:55:e8: a5:28:e2:dc:68:b5:67:81:7f:51:82:77:5b:a1:11: d1:e5:af:0a:3c:64:3c:f3:32:13:93:22:2b:d7:6c: 77:d9:de:d8:57:e9:4d:cd:a0:88:e9:82:fc:e4:eb: bc:87:8f:43:be:61:3b:55:93:a8:ba:56:84:d0:12: b4:b8:1f:2c:11:29:11:f9:22:68:e8:c2:60:15:0e: b6:5d:da:79:86:94:6f:49:87:ef:8d:ff:be:42:ad: 23:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:27:E4:90:FA:3A:17:0A:1E:C7:F6:74:94:67:A3:8D:55:68:B0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/28d6deac-c048-3de6-a65b-745142ffb645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ee:9b:48:e0:c5:6d:6b:7d:92:6b:7c:1f:c9:7b:94:d7:cd: 38:37:fc:1d:de:5b:ae:72:df:a9:41:94:6c:90:fb:e8:42:c4: 2c:b7:2a:f4:3f:bf:e2:e5:16:72:da:34:61:03:ef:17:c7:67: 8c:4f:c1:c2:cd:08:fe:d8:90:82:0c:c5:e5:e6:ad:02:7d:79: 70:53:0f:c6:27:37:09:f6:83:11:19:ab:87:43:9f:4d:c2:a3: 98:ef:51:bf:b2:6f:d1:4e:4c:aa:b7:ed:de:82:9b:3d:38:c3: b6:88:90:59:bd:6e:3d:ca:96:4d:19:29:fe:21:60:f1:59:58: b2:e4:25:fc:75:b3:f3:73:bb:9a:8e:0a:76:5b:5f:e0:0f:c0: aa:55:c2:ea:07:5e:d5:6f:f9:78:6d:d8:84:af:78:0f:d2:71: 24:33:a9:5c:6f:42:5b:17:ec:e6:63:b5:3f:2f:f1:a9:80:54: cb:a0:d6:fc:87:40:e3:3d:25:16:0a:d3:0c:f7:10:a7:f0:c3: 99:d7:79:0c:9c:f1:21:fd:cb:89:f2:82:28:52:ed:0e:c7:f2: ce:79:9a:73:05:33:0a:1e:13:81:25:f3:6c:0a:87:ad:5b:8f: e8:10:f2:09:ab:19:9d:f5:8a:9d:1a:bd:cd:9c:ef:43:e0:55: da:27:2b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CsdKkgvgE1vGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTFlZGMzNTgtMDZmMC00MGFhLTk1OWUtNGRiYzY4ZWUzNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRZFVJNkA/tetOdO0u0Yk4oYlsWzrpNk8pXD w1y+EqfXWAZ/N8Um5Xh2mu9qdrTgqHY50n40Bo30aKm6pnkgnbxMfftEO9VLJmR/ rqikup7kYhF1fFFCGeaojAl6Wf+2GTvDZ+LsKWraImxhPfFYGIm/VRYzoR3ZSEG5 d4qNDXr4TegfAa451bzAB3XwI7Aq+ZRI1rN3PJiZIC58wTRobBc+VeilKOLcaLVn gX9RgndboRHR5a8KPGQ88zITkyIr12x32d7YV+lNzaCI6YL85Ou8h49DvmE7VZOo ulaE0BK0uB8sESkR+SJo6MJgFQ62Xdp5hpRvSYfvjf++Qq0jZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkn5JD6OhcKHsf2dJRno41VaLC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMjhkNmRlYWMtYzA0OC0z ZGU2LWE2NWItNzQ1MTQyZmZiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArum0jgxW1rfZJrfB/Je5TXzTg3/B3eW65y36lBlGyQ++hCxCy3KvQ/ v+LlFnLaNGED7xfHZ4xPwcLNCP7YkIIMxeXmrQJ9eXBTD8YnNwn2gxEZq4dDn03C o5jvUb+yb9FOTKq37d6Cmz04w7aIkFm9bj3Klk0ZKf4hYPFZWLLkJfx1s/Nzu5qO CnZbX+APwKpVwuoHXtVv+Xht2ISveA/ScSQzqVxvQlsX7OZjtT8v8amAVMug1vyH QOM9JRYK0wz3EKfww5nXeQyc8SH9y4nygihS7Q7H8s55mnMFMwoeE4El82wKh61b j+gQ8gmrGZ31ip0avc2c70PgVdonK74= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:05 2026 by rpki-client