$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648c1f9c-0e88-399e-b1a0-94ef8473244d.roa File: 648c1f9c-0e88-399e-b1a0-94ef8473244d.roa (raw, json) Hash identifier: dgR1ujMKQu/w93rIND9C8d4ygFSq6wukAphEpomXTX4= Subject key identifier: 3A:90:07:6F:B3:82:7A:6F:2D:31:39:5C:8E:6A:5F:53:35:C3:F7:B2 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D24E0372D7EAD2B43ED9CE5C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648c1f9c-0e88-399e-b1a0-94ef8473244d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 136.22.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:37:2d:7e:ad:2b:43:ed:9c:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=29b00d27-f42d-4898-94e3-8875d8e2dafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:07:b3:b0:30:82:04:c6:e7:4a:2b:6e:ed: 7a:e8:79:86:8b:cf:56:9a:f7:06:bb:bb:8d:82:5d: 2a:92:fe:77:35:e6:06:29:51:e1:8d:8a:de:d6:10: a2:6f:f2:1f:02:8f:04:bb:aa:b0:02:6a:e1:08:8c: 9d:4a:48:66:9c:60:0f:8e:3b:75:b2:60:cc:1f:59: 94:66:4e:a5:87:76:de:e2:a3:7b:cd:a9:5e:a5:be: 0f:a5:c1:48:bb:25:22:0a:c7:4e:63:b9:66:86:f1: 89:23:a1:02:51:7b:1f:bc:0e:46:d9:50:7b:0b:ef: ac:69:5f:b0:14:5e:80:a2:51:6c:a5:fe:64:59:a4: 1f:96:1c:a6:7c:fc:66:c2:c0:47:d7:fc:8d:54:fc: 07:71:4f:ac:50:70:99:4f:fe:f3:16:94:00:e3:e1: 10:d5:9c:40:03:40:10:01:ea:b2:f3:06:a9:25:4f: 8b:64:d9:c3:b5:9b:c1:33:74:9c:4d:33:c1:49:4a: 48:05:63:09:18:7b:55:28:21:06:84:0c:70:e3:91: 02:e3:72:05:06:f2:1f:45:4a:bf:17:2d:a5:e0:c4: bd:6d:d2:de:86:f1:55:16:b1:02:c3:ad:42:25:8f: c4:10:b2:f2:4a:48:ea:96:52:61:5b:90:35:15:bc: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:07:6F:B3:82:7A:6F:2D:31:39:5C:8E:6A:5F:53:35:C3:F7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648c1f9c-0e88-399e-b1a0-94ef8473244d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c2:37:5d:73:d7:d3:8a:28:4f:38:ba:5b:e0:e4:c7:df:8f: 5a:87:62:fa:b2:ac:22:26:e1:2a:f1:98:d5:8a:ce:09:c7:cb: e3:36:bd:b7:3b:46:8c:41:ed:01:2a:dc:fb:51:e2:84:b5:ca: 36:87:62:67:39:64:22:d3:8b:0f:5a:b8:a9:73:ea:ff:b5:8a: 11:5e:a7:da:90:b9:0b:c7:3e:85:a9:11:a3:50:4d:89:d4:02: 4c:44:d5:7f:14:16:0b:ca:65:07:4b:c5:d8:fb:d2:37:51:db: 43:6d:8d:4e:30:25:14:95:a4:c7:d9:e5:3e:57:dd:7b:67:c2: 78:5a:3b:80:64:ad:b2:79:07:58:d8:6d:c7:b5:eb:99:2b:2e: 01:98:c4:de:68:89:99:c2:18:8e:f7:9d:bc:b6:be:38:7b:aa: e1:1c:f1:26:3d:04:3d:60:6f:44:fa:d6:4b:2c:07:40:57:01: 5c:91:d7:38:a6:11:25:c7:1b:88:09:08:89:0f:e8:64:cd:61: d8:68:bc:8c:ac:ee:7d:71:d7:5b:bf:3b:d9:f9:a4:ce:ce:e3: 48:12:b8:9e:c6:6f:ae:d1:96:bb:90:99:f8:8a:e0:57:a8:ec: ba:2c:46:ee:4d:a3:33:4e:04:6f:c0:20:52:95:85:2f:9e:48: cd:14:c8:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Dctfq0rQ+2c5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjliMDBkMjctZjQyZC00ODk4LTk0ZTMtODg3NWQ4ZTJkYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmucHs7AwggTG50orbu166HmGi89WmvcGu7uN gl0qkv53NeYGKVHhjYre1hCib/IfAo8Eu6qwAmrhCIydSkhmnGAPjjt1smDMH1mU Zk6lh3be4qN7zalepb4PpcFIuyUiCsdOY7lmhvGJI6ECUXsfvA5G2VB7C++saV+w FF6AolFspf5kWaQflhymfPxmwsBH1/yNVPwHcU+sUHCZT/7zFpQA4+EQ1ZxAA0AQ Aeqy8wapJU+LZNnDtZvBM3ScTTPBSUpIBWMJGHtVKCEGhAxw45EC43IFBvIfRUq/ Fy2l4MS9bdLehvFVFrECw61CJY/EELLySkjqllJhW5A1Fbx5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqQB2+zgnpvLTE5XI5qX1M1w/eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjQ4YzFmOWMtMGU4OC0z OTllLWIxYTAtOTRlZjg0NzMyNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3CN11z19OKKE84ulvg5Mffj1qHYvqyrCIm4SrxmNWKzgnHy+M2vbc7 RoxB7QEq3PtR4oS1yjaHYmc5ZCLTiw9auKlz6v+1ihFep9qQuQvHPoWpEaNQTYnU AkxE1X8UFgvKZQdLxdj70jdR20NtjU4wJRSVpMfZ5T5X3XtnwnhaO4BkrbJ5B1jY bce165krLgGYxN5oiZnCGI73nby2vjh7quEc8SY9BD1gb0T61kssB0BXAVyR1zim ESXHG4gJCIkP6GTNYdhovIys7n1x11u/O9n5pM7O40gSuJ7Gb67RlruQmfiK4Feo 7LosRu5NozNOBG/AIFKVhS+eSM0UyAc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:18 2026 by rpki-client