$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa File: d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa (raw, json) Hash identifier: JkwSrk/2kGC1VYmdwQwuunE17oBezGNcMBhj5g0TgYk= Subject key identifier: 33:16:C9:59:1B:A4:C3:77:30:9B:95:AA:3A:76:E2:0A:5D:FE:3D:94 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D1F4A846782B94D3AAF17DE00 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36492 IP address blocks: 136.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:84:67:82:b9:4d:3a:af:17:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=855958fa-6ec0-47fa-9494-8459e8550024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:59:c1:23:22:68:22:9c:01:dc:3c:6e:d0: 48:91:43:fb:9b:30:65:ff:6b:92:18:ac:1b:e4:fd: 98:1b:d0:f4:9b:33:df:da:18:a3:6b:af:b3:8f:ce: 86:f3:4e:a5:0c:4d:0e:fb:e7:c9:87:13:e8:ea:db: 7d:7e:cb:2a:1b:dd:33:09:e9:33:87:42:4e:e8:a3: ae:6f:5b:ec:fe:8c:aa:47:a3:f8:91:05:f7:35:d2: 9f:4e:5c:77:f1:f3:c4:18:e4:eb:fe:30:66:6a:e0: 88:7a:19:9c:64:e0:fb:ed:ce:19:15:6a:38:2c:2b: 90:5c:55:39:9a:4f:0f:fa:5f:38:af:5d:0e:78:1a: 33:c8:92:c1:51:8a:89:8f:86:e4:04:60:1f:40:db: 59:cd:b8:9b:a1:31:3d:6d:20:0e:61:92:2b:fc:ca: e9:a2:84:92:a6:c2:07:f9:b1:5f:58:0d:40:ce:f5: 65:8e:84:bd:ee:1f:85:ca:28:fa:0d:d7:0a:f7:3d: ce:6b:66:a2:70:b3:df:d9:8f:2a:be:d1:94:4c:1f: 05:3d:d2:4f:b0:51:95:65:db:44:c9:9e:e0:84:43: 1d:55:5d:e6:67:ba:ae:64:c7:b9:f3:5d:b7:ac:b8: 87:2f:17:f9:7d:0f:8e:f2:b3:2f:71:09:04:c5:eb: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:C9:59:1B:A4:C3:77:30:9B:95:AA:3A:76:E2:0A:5D:FE:3D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:42:f0:4d:59:9e:14:94:a1:4f:9a:69:8d:a3:d4:3f:aa:64: 3a:5a:01:50:12:98:67:7b:47:b8:97:00:42:80:dd:dc:42:c7: 2c:3c:c8:1f:a6:8a:ee:78:4e:4e:96:34:15:95:e0:c6:72:ce: 8a:04:ce:92:51:a8:a8:bd:a5:ed:8b:4a:14:40:75:20:b9:c5: f6:a2:59:a3:40:ed:ff:bb:ff:6e:36:5f:6b:b5:73:4a:95:56: 25:73:75:6c:3c:99:85:78:00:b1:f4:5a:e7:a7:41:fa:63:3a: 4e:49:04:56:a4:88:91:24:b6:e4:6c:f3:2d:3a:b0:70:2e:71: 40:9b:cb:e7:7d:8f:fb:a7:6b:82:ca:6f:45:0c:2e:dc:6a:ca: f0:98:af:d5:68:7a:44:25:6b:5c:54:be:58:33:bb:7f:b0:06: a4:dd:50:5a:d7:14:68:92:6a:c0:a8:21:fe:ce:d2:93:d8:4d: 91:66:b9:15:2d:e6:ee:28:43:76:51:ba:22:5d:aa:d8:fc:f6: 86:ff:7f:6f:ca:2b:35:f7:fc:9e:74:d9:db:fa:83:27:66:fa: 95:51:42:76:b7:f4:c7:bc:43:95:a1:50:56:23:2e:c2:eb:e3: 04:ba:b6:48:2e:47:e8:c2:34:1f:dd:db:95:de:3b:18:6d:cf: 9b:2a:fc:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoRngrlNOq8X3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODU1OTU4ZmEtNmVjMC00N2ZhLTk0OTQtODQ1OWU4NTUwMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkRZwSMiaCKcAdw8btBIkUP7mzBl/2uSGKwb 5P2YG9D0mzPf2hija6+zj86G806lDE0O++fJhxPo6tt9fssqG90zCekzh0JO6KOu b1vs/oyqR6P4kQX3NdKfTlx38fPEGOTr/jBmauCIehmcZOD77c4ZFWo4LCuQXFU5 mk8P+l84r10OeBozyJLBUYqJj4bkBGAfQNtZzbiboTE9bSAOYZIr/MrpooSSpsIH +bFfWA1AzvVljoS97h+Fyij6DdcK9z3Oa2aicLPf2Y8qvtGUTB8FPdJPsFGVZdtE yZ7ghEMdVV3mZ7quZMe58123rLiHLxf5fQ+O8rMvcQkExeu0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMWyVkbpMN3MJuVqjp24gpd/j2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDk2YzdjN2YtMTg4OS0z ZWQ0LWIwZmItOTJiY2M3NWJlNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJC8E1ZnhSUoU+aaY2j1D+qZDpaAVASmGd7R7iXAEKA3dxCxyw8yB+m iu54Tk6WNBWV4MZyzooEzpJRqKi9pe2LShRAdSC5xfaiWaNA7f+7/242X2u1c0qV ViVzdWw8mYV4ALH0WuenQfpjOk5JBFakiJEktuRs8y06sHAucUCby+d9j/una4LK b0UMLtxqyvCYr9VoekQla1xUvlgzu3+wBqTdUFrXFGiSasCoIf7O0pPYTZFmuRUt 5u4oQ3ZRuiJdqtj89ob/f2/KKzX3/J502dv6gydm+pVRQna39Me8Q5WhUFYjLsLr 4wS6tkguR+jCNB/d25XeOxhtz5sq/N0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:31:01 2026 by rpki-client