$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16783be5-0b80-3010-b5f6-7f90fcd5a497.roa File: 16783be5-0b80-3010-b5f6-7f90fcd5a497.roa (raw, json) Hash identifier: Af9h5KYBDZNMNfBXZjt1OgkvzLkTFNnhWNTdbDhltss= Subject key identifier: 0B:3C:07:55:C5:3A:72:7B:34:8C:95:71:E0:FE:E1:82:20:4B:97:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584DBA3AF16D97BDCE5E7C57E122 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16783be5-0b80-3010-b5f6-7f90fcd5a497.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 396982 IP address blocks: 136.109.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:f1:6d:97:bd:ce:5e:7c:57:e1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=1b3dcbf2-3fe2-4287-8778-c8bcf3f80bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:58:d6:69:45:ed:42:e6:0c:aa:0a:d0:17: b9:ed:db:29:2c:2b:91:fe:dd:cc:ac:a9:6b:70:6e: 44:84:8c:dd:da:b4:55:5e:0c:b4:35:f6:1c:d7:fa: aa:0c:01:ef:bf:72:9e:9f:05:7e:b0:98:a2:09:34: 7b:2c:28:9b:b8:3d:ee:59:d9:73:06:c1:48:a1:b0: 32:2b:b9:60:79:89:87:ab:fc:a2:a5:96:6b:8b:8c: da:a9:b3:79:18:59:4a:06:b0:c9:5c:4c:db:0d:be: 21:d6:ab:bb:7f:53:60:f7:54:7a:c2:ac:31:13:f5: 2c:17:23:a2:3c:0e:01:08:f2:95:9b:d5:3f:c7:f0: 35:aa:7b:b9:c1:2d:8a:09:e5:95:0f:f2:51:70:ec: 2d:56:0d:b7:a7:5d:f6:88:40:e1:67:31:42:7c:ee: 0a:c4:3d:aa:7d:f1:ed:05:98:19:b3:8c:42:86:a1: 8f:0f:92:bd:f5:e9:8d:4e:7a:e4:b9:10:70:2e:cd: 83:07:3d:a0:8a:5c:95:08:70:14:d0:a2:d1:af:64: ad:1e:85:29:bf:bb:08:a5:74:fb:8d:ad:e7:0e:f9: 44:1c:ed:94:8c:d3:d9:c5:3f:75:12:a2:07:b3:92: fb:23:6b:7f:99:e0:04:f8:ca:da:54:93:dd:8b:47: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3C:07:55:C5:3A:72:7B:34:8C:95:71:E0:FE:E1:82:20:4B:97:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16783be5-0b80-3010-b5f6-7f90fcd5a497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.109.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fb:e9:72:17:6a:fc:72:cd:ab:b7:13:3a:79:a9:72:1b:41: 63:24:d2:01:ee:4f:d1:79:0b:13:ab:76:d1:f6:5f:29:2a:b3: bd:a6:f9:dd:f6:1f:91:b8:90:80:c9:38:0e:aa:d9:c6:89:cb: 18:c9:07:77:72:e8:37:3e:aa:c9:97:b4:3c:70:d3:1e:6d:95: 1c:17:62:2b:da:47:18:8a:f4:39:2d:eb:ac:f2:21:28:a6:eb: 53:52:bc:dd:8b:68:e8:d8:7a:08:d9:e8:7d:09:76:fd:5e:48: d9:fc:d6:09:7e:8a:ca:c1:7d:9f:ab:4e:51:0a:68:76:aa:92: e2:46:08:a0:b2:8c:39:27:dc:7a:d4:9a:8c:2c:b1:1c:66:93: 50:0e:bf:eb:2b:9f:c8:5b:52:7f:d5:19:bf:ec:ff:43:73:1e: 7a:9a:d7:a9:f0:5d:d4:84:db:0e:ad:8e:43:6f:aa:2e:a3:c3: 29:77:d0:c7:b0:a9:a5:a4:56:63:1e:34:10:b9:0a:16:89:a0: 82:77:8b:89:59:89:b0:09:1c:29:62:96:6b:ac:16:f8:1e:6e: ed:2c:19:61:c0:38:97:e4:00:b0:4c:6c:41:24:a4:71:a6:c8: e6:d3:f7:1a:5d:da:9a:5f:37:6e:41:ca:cd:7e:b1:71:58:99: df:f0:76:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OvFtl73OXnxX4SIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MWIzZGNiZjItM2ZlMi00Mjg3LTg3NzgtYzhiY2YzZjgwYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8hY1mlF7ULmDKoK0Be57dspLCuR/t3MrKlr cG5EhIzd2rRVXgy0NfYc1/qqDAHvv3KenwV+sJiiCTR7LCibuD3uWdlzBsFIobAy K7lgeYmHq/yipZZri4zaqbN5GFlKBrDJXEzbDb4h1qu7f1Ng91R6wqwxE/UsFyOi PA4BCPKVm9U/x/A1qnu5wS2KCeWVD/JRcOwtVg23p132iEDhZzFCfO4KxD2qffHt BZgZs4xChqGPD5K99emNTnrkuRBwLs2DBz2gilyVCHAU0KLRr2StHoUpv7sIpXT7 ja3nDvlEHO2UjNPZxT91EqIHs5L7I2t/meAE+MraVJPdi0cYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs8B1XFOnJ7NIyVceD+4YIgS5fIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTY3ODNiZTUtMGI4MC0z MDEwLWI1ZjYtN2Y5MGZjZDVhNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiG0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn76XIXavxyzau3Ezp5qXIbQWMk0gHuT9F5CxOrdtH2Xykqs72m+d32 H5G4kIDJOA6q2caJyxjJB3dy6Dc+qsmXtDxw0x5tlRwXYivaRxiK9Dkt66zyISim 61NSvN2LaOjYegjZ6H0Jdv1eSNn81gl+isrBfZ+rTlEKaHaqkuJGCKCyjDkn3HrU mowssRxmk1AOv+srn8hbUn/VGb/s/0NzHnqa16nwXdSE2w6tjkNvqi6jwyl30Mew qaWkVmMeNBC5ChaJoIJ3i4lZibAJHClilmusFvgebu0sGWHAOJfkALBMbEEkpHGm yObT9xpd2ppfN25Bys1+sXFYmd/wdmM= -----END CERTIFICATE-----Generated at Wed May 13 15:35:19 2026 by rpki-client