$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/3d3e98de-5572-3032-83d9-a5a0462e683e.roa File: 3d3e98de-5572-3032-83d9-a5a0462e683e.roa (raw, json) Hash identifier: A9BjhbCOhnIHW1JftHN1bmoDpz5XdPwAwl6oyKiQSa4= Subject key identifier: 39:60:E0:A6:0C:F3:96:20:86:F0:3F:72:D0:12:22:25:E0:3B:94:93 Certificate issuer: /CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Certificate serial: 010D0C9F4328584D9E500937BAE68BDDE6F11680 Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/3d3e98de-5572-3032-83d9-a5a0462e683e.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 400329 IP address blocks: 136.175.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:09:37:ba:e6:8b:dd:e6:f1:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=22358bd8-97e7-468f-8376-402a18d79a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:14:c1:82:df:80:b2:fb:a5:52:fb:27:04: f2:40:30:1b:fe:3f:30:94:52:17:dd:41:83:1f:69: c7:59:32:5e:f6:9d:14:05:a1:4e:9a:81:90:9d:9c: 7d:5a:ad:00:eb:66:5c:48:52:03:72:76:2b:09:fc: ae:0a:8e:9e:a3:01:32:4e:10:11:83:00:0d:30:ec: 96:06:86:05:98:eb:ad:b4:46:cf:66:a1:a7:ff:80: 71:9f:cb:2a:0e:1a:73:ad:a2:0c:80:5b:95:30:a2: bc:af:64:0d:06:1a:5d:0e:b9:58:e5:f0:03:91:de: d7:57:62:71:3c:63:ce:30:fe:cc:73:b3:e8:7b:5c: ad:14:64:92:b3:81:11:3d:ad:48:3f:e5:71:1c:f4: 17:d8:57:7a:44:eb:a0:f6:d6:b0:5c:bf:56:f7:a3: ba:4c:d3:0c:5c:f7:72:b1:e5:3f:cf:ba:af:57:82: b3:28:c0:2e:17:16:84:ec:7b:95:3d:ad:43:99:90: b3:15:36:12:ce:ac:ad:2b:b3:61:5a:a3:06:2f:6f: 95:60:46:75:78:f8:3e:18:f2:d8:7a:dd:de:f8:df: d8:a3:28:ca:db:89:b8:b0:f0:3c:da:6e:ff:42:03: df:c9:c0:04:e6:18:bf:06:be:ce:92:ad:14:3e:0c: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:E0:A6:0C:F3:96:20:86:F0:3F:72:D0:12:22:25:E0:3B:94:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/3d3e98de-5572-3032-83d9-a5a0462e683e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl X509v3 Authority Key Identifier: keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer sbgp-ipAddrBlock: critical IPv4: 136.175.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:78:9d:11:0a:ad:0e:46:3f:0a:bc:b6:6b:45:c8:14:3f:12: 32:69:53:2a:7b:02:ee:80:84:bb:37:fd:2a:92:1e:e0:d3:47: c8:1b:09:9a:34:b2:41:f4:56:4d:ae:73:48:e7:c8:9c:53:f6: fc:51:09:9c:7a:1a:dd:4a:01:26:f8:81:09:dd:c4:33:2f:81: 5d:69:d1:5b:a7:e9:b0:44:dd:f0:fe:a5:4a:1a:e4:82:c3:0e: 4c:66:ee:de:30:eb:e9:d9:7d:e3:f2:9d:dc:8d:36:05:cc:ac: ad:b6:30:27:d0:97:bd:17:7f:49:1f:61:b6:ee:6c:60:6a:91: e9:37:b9:55:f7:e4:df:f9:c4:76:b2:1d:02:93:ad:5d:64:36: 39:a6:43:54:d6:6e:a3:2d:af:79:f3:42:98:42:ac:72:80:d9: 6b:cf:5a:93:44:0e:0a:da:67:49:ab:3a:a2:af:96:ba:90:04: 3e:b7:f0:b2:76:1c:25:f6:da:15:16:e5:7e:7a:a3:8b:4c:71: b0:c4:18:4a:a1:fb:58:eb:7b:7b:ed:8c:46:40:3a:58:6d:6d: 4b:3a:76:2d:3c:6c:35:71:eb:70:9d:a6:1b:47:fc:db:c0:22: 17:75:16:5e:d7:92:ad:57:4a:b2:75:eb:8a:ff:4e:89:96:10: 7c:8a:18:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAk3uuaL3ebxFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz ZmM1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjIzNThiZDgtOTdlNy00NjhmLTgzNzYtNDAyYTE4ZDc5YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcIUwYLfgLL7pVL7JwTyQDAb/j8wlFIX3UGD H2nHWTJe9p0UBaFOmoGQnZx9Wq0A62ZcSFIDcnYrCfyuCo6eowEyThARgwANMOyW BoYFmOuttEbPZqGn/4Bxn8sqDhpzraIMgFuVMKK8r2QNBhpdDrlY5fADkd7XV2Jx PGPOMP7Mc7Poe1ytFGSSs4ERPa1IP+VxHPQX2Fd6ROug9tawXL9W96O6TNMMXPdy seU/z7qvV4KzKMAuFxaE7HuVPa1DmZCzFTYSzqytK7NhWqMGL2+VYEZ1ePg+GPLY et3e+N/YoyjK24m4sPA82m7/QgPfycAE5hi/Br7Okq0UPgzZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlg4KYM85YghvA/ctASIiXgO5STMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvM2QzZTk4ZGUtNTU3Mi0z MDMyLTgzZDktYTVhMDQ2MmU2ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1 M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF4nREKrQ5GPwq8tmtFyBQ/EjJpUyp7Au6AhLs3/SqSHuDTR8gbCZo0 skH0Vk2uc0jnyJxT9vxRCZx6Gt1KASb4gQndxDMvgV1p0Vun6bBE3fD+pUoa5ILD Dkxm7t4w6+nZfePyndyNNgXMrK22MCfQl70Xf0kfYbbubGBqkek3uVX35N/5xHay HQKTrV1kNjmmQ1TWbqMtr3nzQphCrHKA2WvPWpNEDgraZ0mrOqKvlrqQBD638LJ2 HCX22hUW5X56o4tMcbDEGEqh+1jre3vtjEZAOlhtbUs6di08bDVx63CdphtH/NvA Ihd1Fl7Xkq1XSrJ164r/TomWEHyKGMI= -----END CERTIFICATE-----Generated at Wed May 13 08:34:09 2026 by rpki-client