$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa File: dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa (raw, json) Hash identifier: Ed2GGpI0UCgzeyT8aDlX9ZDvH9drbADSTQVOH5pfaV8= Subject key identifier: 4C:EB:EF:D3:22:6E:8C:EF:20:2F:57:0A:A7:70:14:01:06:EF:91:F3 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D1F4A79F075FCBB663755A200 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36492 IP address blocks: 136.22.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:79:f0:75:fc:bb:66:37:55:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ced7ea8c-00e9-482c-8d8f-da0a38c46e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:a2:e5:0c:43:04:ca:83:16:8e:a7:44:a3: c3:25:00:66:f0:83:a0:a7:af:5d:64:cf:a5:98:5f: 9f:98:4b:fc:af:54:cd:c6:dc:94:8f:52:4f:62:cb: 77:c8:8c:8a:a8:7c:cc:f7:ec:a8:d2:b1:df:6a:e3: eb:1a:4e:b7:1f:bc:c2:f0:af:0c:81:cb:3a:bc:67: 62:f4:fe:26:83:5a:36:fc:f2:63:3a:5d:90:c6:9b: 10:f1:3c:c8:ea:18:7d:49:4f:13:e4:77:0d:47:95: bc:72:7d:bd:40:67:fe:94:2e:ff:47:41:95:be:20: 3d:d4:48:a0:b6:70:be:5b:23:6f:f4:af:98:75:e9: 2c:b7:0c:c7:38:2d:60:fc:ad:75:b8:64:5a:7e:09: 2b:bb:e6:6b:a4:52:b6:d7:94:52:d6:97:93:44:19: 62:1a:a3:b7:99:19:f1:cd:72:86:bf:cf:be:56:2a: ca:8d:04:ad:e7:49:ca:91:b1:12:72:1f:11:55:e5: 18:b4:79:52:cc:05:c9:e0:1e:6b:e7:19:de:de:38: f5:1e:d2:b3:43:67:56:23:25:ed:60:92:6d:ac:2f: 02:fa:01:2c:96:10:f5:cc:f1:d3:06:10:6b:3c:ad: e6:83:64:e2:05:45:ba:fb:2c:c7:ba:f4:44:f7:bf: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EB:EF:D3:22:6E:8C:EF:20:2F:57:0A:A7:70:14:01:06:EF:91:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:75:74:73:ad:e3:e4:e6:e8:0f:0b:1c:8c:6e:e7:4c:39:06: 63:82:36:cc:cf:3a:ed:69:0d:90:41:63:06:55:b5:1d:e1:4c: 9e:d4:22:9d:1f:7e:e4:79:85:5c:69:fd:a1:c9:ac:43:23:3f: 00:1b:7b:5b:0f:ed:93:c7:9e:25:dd:a9:e3:d3:0a:b6:54:49: 55:35:ff:fb:ed:2e:0f:0c:1f:f3:34:29:ca:27:9a:dd:d8:00: c4:5e:86:77:a0:bf:60:cb:d2:d4:d7:e7:53:40:6c:d7:d6:ad: 49:74:10:ee:71:db:02:e6:b7:1f:43:ef:cc:16:a9:4e:eb:93: 4c:e7:00:98:a3:8d:38:92:0d:ce:09:db:a4:a9:cb:7e:53:d8: 31:40:51:9c:e7:9d:22:8f:26:41:be:be:7f:65:09:aa:e9:41: 8a:a2:3a:f8:43:d0:6b:2d:44:19:f0:dd:02:f0:1b:66:4c:a3: 43:8d:5a:31:92:6c:be:5d:00:b5:ee:ba:3c:b3:9e:16:0a:5b: d3:97:1c:44:72:ab:ad:1b:14:ad:35:47:85:e9:4a:30:25:70: 5f:53:24:66:2e:50:00:2e:78:62:d1:a0:73:af:b8:f1:36:6d: de:68:f7:6f:5a:78:a6:30:db:63:f2:46:44:ea:b1:6a:e3:fd: 1f:ca:39:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnnwdfy7ZjdVogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk Y2VkN2VhOGMtMDBlOS00ODJjLThkOGYtZGEwYTM4YzQ2ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPei5QxDBMqDFo6nRKPDJQBm8IOgp69dZM+l mF+fmEv8r1TNxtyUj1JPYst3yIyKqHzM9+yo0rHfauPrGk63H7zC8K8Mgcs6vGdi 9P4mg1o2/PJjOl2QxpsQ8TzI6hh9SU8T5HcNR5W8cn29QGf+lC7/R0GVviA91Eig tnC+WyNv9K+YdekstwzHOC1g/K11uGRafgkru+ZrpFK215RS1peTRBliGqO3mRnx zXKGv8++VirKjQSt50nKkbESch8RVeUYtHlSzAXJ4B5r5xne3jj1HtKzQ2dWIyXt YJJtrC8C+gEslhD1zPHTBhBrPK3mg2TiBUW6+yzHuvRE979X1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzr79MibozvIC9XCqdwFAEG75HzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGZlOGI5NDMtNGQ4Ny0z NjIzLWI4N2EtOWI5MmUwNWEyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt1dHOt4+Tm6A8LHIxu50w5BmOCNszPOu1pDZBBYwZVtR3hTJ7UIp0f fuR5hVxp/aHJrEMjPwAbe1sP7ZPHniXdqePTCrZUSVU1//vtLg8MH/M0Kconmt3Y AMRehnegv2DL0tTX51NAbNfWrUl0EO5x2wLmtx9D78wWqU7rk0znAJijjTiSDc4J 26Spy35T2DFAUZznnSKPJkG+vn9lCarpQYqiOvhD0GstRBnw3QLwG2ZMo0ONWjGS bL5dALXuujyznhYKW9OXHERyq60bFK01R4XpSjAlcF9TJGYuUAAueGLRoHOvuPE2 bd5o929aeKYw22PyRkTqsWrj/R/KOXM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:52 2026 by rpki-client