$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/663f96fa-2ade-331e-9061-72f4a88645ab.roa File: 663f96fa-2ade-331e-9061-72f4a88645ab.roa (raw, json) Hash identifier: /uNMMG5dyA0wNECMMdxC3ksnrAP0+OQSrZDUIYtYxDo= Subject key identifier: C5:45:7E:F2:A4:DB:A2:8F:B0:6C:28:E5:63:8A:AB:A2:15:12:24:F3 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D24E032F407F39D1C9813F980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/663f96fa-2ade-331e-9061-72f4a88645ab.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 136.22.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:32:f4:07:f3:9d:1c:98:13:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=224da1e2-d066-487b-ad4f-b6b4d1cb91e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:05:3f:67:ae:0c:46:48:0e:4a:94:c8:6d: 30:df:a1:a9:e2:2d:18:43:d5:a3:33:7c:22:11:16: 4d:39:ae:2a:3a:56:88:a1:ec:46:d2:25:1e:f8:ff: 3e:51:94:d0:c9:6f:d7:38:43:c7:24:4d:96:01:7a: 2a:e3:2b:fd:f6:c2:27:d2:bf:b5:88:db:d7:d3:60: dd:e0:a3:17:22:23:de:a6:87:a5:15:45:aa:e8:8b: 04:66:19:f0:27:ed:b9:9d:99:f1:4d:29:42:9d:3b: 36:7c:57:98:d9:78:10:97:dd:e1:c5:29:bc:47:c2: f5:2f:cb:83:bf:74:74:d3:f5:7c:aa:ef:82:bd:ab: 4c:70:43:9f:f5:d5:56:b2:ca:6a:02:7e:d1:12:7d: 09:d7:6e:ff:71:9d:f3:be:5d:90:03:72:ca:f8:52: e8:b4:8f:31:a3:72:0b:ac:42:2c:60:d6:4e:05:4a: e2:00:66:82:4b:2e:08:75:3c:bb:be:39:df:87:1a: 45:75:78:6c:40:14:97:06:33:51:94:4c:d5:b3:c7: 52:15:92:99:32:20:19:b8:b5:ad:8d:72:26:f2:9d: 63:89:f6:49:15:b3:88:36:fc:12:23:b2:19:b2:f2: 95:b0:c7:6f:85:e0:09:64:cc:9b:07:c3:f3:7e:ad: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:7E:F2:A4:DB:A2:8F:B0:6C:28:E5:63:8A:AB:A2:15:12:24:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/663f96fa-2ade-331e-9061-72f4a88645ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:36:9b:94:ba:b2:1f:9b:67:74:02:d8:d7:71:20:6f:57:6b: 38:8e:b1:dd:e9:30:87:6a:e0:db:ff:2a:e4:74:d2:97:76:4f: eb:2b:e2:82:fa:c3:a5:c7:7b:29:fd:63:c9:06:7e:c6:89:ec: dc:6e:d3:75:30:fc:9c:3f:86:ef:b0:d6:e0:52:82:53:93:e1: ce:cf:e8:b0:9d:92:56:74:25:ba:b1:39:c2:7d:02:9c:ce:5a: 0b:0f:a0:28:79:f9:30:11:e6:af:9f:a1:07:45:48:d4:2b:2c: 57:43:05:fc:63:5c:e6:ca:70:6f:6b:a3:80:23:f0:ac:40:a6: 65:11:2a:f6:8d:64:63:91:57:fd:d7:c5:94:70:f0:5c:c3:95: 65:12:fb:33:75:76:48:f3:4a:60:d4:c7:5b:bb:aa:3d:95:f9: d7:85:73:77:14:97:63:70:02:c6:87:b2:b6:fb:af:4c:5b:a6: 4f:d5:d3:90:29:bb:88:f8:49:db:bb:10:d5:7f:24:d4:36:13: 90:08:3b:1d:18:83:c7:ef:bd:f2:0b:89:7f:98:67:a5:9c:06: 5a:23:b5:d3:34:25:85:79:13:13:83:73:1e:ea:a1:31:91:9c: db:13:a3:5a:95:6e:9f:c0:4c:ec:ed:4d:1e:b8:d4:20:0b:d4: cf:2a:b9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DL0B/OdHJgT+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjI0ZGExZTItZDA2Ni00ODdiLWFkNGYtYjZiNGQxY2I5MWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYgFP2euDEZIDkqUyG0w36Gp4i0YQ9WjM3wi ERZNOa4qOlaIoexG0iUe+P8+UZTQyW/XOEPHJE2WAXoq4yv99sIn0r+1iNvX02Dd 4KMXIiPepoelFUWq6IsEZhnwJ+25nZnxTSlCnTs2fFeY2XgQl93hxSm8R8L1L8uD v3R00/V8qu+CvatMcEOf9dVWsspqAn7REn0J127/cZ3zvl2QA3LK+FLotI8xo3IL rEIsYNZOBUriAGaCSy4IdTy7vjnfhxpFdXhsQBSXBjNRlEzVs8dSFZKZMiAZuLWt jXIm8p1jifZJFbOINvwSI7IZsvKVsMdvheAJZMybB8Pzfq3lRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVFfvKk26KPsGwo5WOKq6IVEiTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjYzZjk2ZmEtMmFkZS0z MzFlLTkwNjEtNzJmNGE4ODY0NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ2m5S6sh+bZ3QC2NdxIG9XaziOsd3pMIdq4Nv/KuR00pd2T+sr4oL6 w6XHeyn9Y8kGfsaJ7Nxu03Uw/Jw/hu+w1uBSglOT4c7P6LCdklZ0JbqxOcJ9ApzO WgsPoCh5+TAR5q+foQdFSNQrLFdDBfxjXObKcG9ro4Aj8KxApmURKvaNZGORV/3X xZRw8FzDlWUS+zN1dkjzSmDUx1u7qj2V+deFc3cUl2NwAsaHsrb7r0xbpk/V05Ap u4j4Sdu7ENV/JNQ2E5AIOx0Yg8fvvfILiX+YZ6WcBlojtdM0JYV5ExODcx7qoTGR nNsTo1qVbp/ATOztTR641CAL1M8qucE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:04:13 2026 by rpki-client