$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/1183c1c6-95fb-38e1-9015-a19485ab6501.roa File: 1183c1c6-95fb-38e1-9015-a19485ab6501.roa (raw, json) Hash identifier: HZi4uhQ9Oh2Jvde/Jas9Bf4K1kMbw/qEqySb7UMYxRU= Subject key identifier: 23:20:8E:BC:60:04:C0:BB:C2:F0:C5:65:7A:82:99:7F:04:60:43:9A Certificate issuer: /CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5 Certificate serial: 010D0C9F4328584D490FC1FF13C291FD1B10D2D0 Authority key identifier: 36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/1183c1c6-95fb-38e1-9015-a19485ab6501.roa Signing time: Wed 25 Mar 2026 12:07:20 +0000 ROA not before: Wed 25 Mar 2026 12:07:20 +0000 ROA not after: Tue 23 Jun 2026 12:07:20 +0000 asID: 46920 IP address blocks: 136.175.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0f:c1:ff:13:c2:91:fd:1b:10:d2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5 Validity Not Before: Mar 25 12:07:20 2026 GMT Not After : Jun 23 12:07:20 2026 GMT Subject: CN=ca2c16c5-a76f-4bbf-9e48-ddcb1e5327e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:92:61:0b:45:dd:04:3b:dc:2e:00:6d:0c: 6c:ef:53:75:79:6b:89:e6:39:72:14:76:0c:bd:86: 9b:2b:6a:eb:4d:c5:a3:51:7d:4f:15:96:cf:79:28: 80:60:89:43:e0:f4:ef:fb:66:5f:c5:15:35:e7:b9: dc:e3:31:a6:e8:3b:c5:3e:2d:af:22:0c:3a:6e:ea: 44:f9:bd:a6:b0:4a:56:81:f0:76:2c:ba:a2:89:2a: dd:4b:1b:95:8b:dd:84:f2:78:7a:75:80:e7:e5:66: 2c:24:d4:c8:33:b0:34:41:3c:41:53:d4:46:06:79: dd:66:30:5b:d3:17:b1:8b:2d:01:ea:00:eb:b1:cf: 13:6b:41:37:d8:8e:39:19:33:3d:e1:55:c6:a1:38: 69:86:4c:47:65:0b:f5:e4:78:8c:fe:4f:7b:e7:94: 95:50:6e:59:3e:6e:06:81:02:8c:2a:92:60:67:d0: e7:27:8c:7f:a3:14:b2:ca:88:84:1e:7c:4b:cd:54: 95:c8:62:6e:b0:53:af:40:2b:fc:b6:b0:32:60:24: 6e:22:2b:8c:96:e6:68:51:25:cd:b8:e2:fa:63:8d: bc:be:60:6c:24:5a:d3:b8:90:a9:c5:23:4c:ec:9a: 63:08:0a:0e:7a:74:26:5d:f7:b9:3c:5c:8d:81:c4: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:8E:BC:60:04:C0:BB:C2:F0:C5:65:7A:82:99:7F:04:60:43:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/1183c1c6-95fb-38e1-9015-a19485ab6501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl X509v3 Authority Key Identifier: keyid:36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer sbgp-ipAddrBlock: critical IPv4: 136.175.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:db:65:1e:2f:75:fc:89:a2:17:cf:91:95:48:d8:46:d1: a0:4b:85:34:79:ed:a5:f6:cc:f3:12:f9:ee:40:2c:9d:ef:57: 85:c8:6e:d6:79:48:99:66:f6:15:a6:1a:e9:db:15:90:42:e9: cd:1a:41:48:dc:76:07:fb:fd:74:1d:9c:82:9c:d1:bd:d6:e6: 31:87:b2:1f:82:d1:2c:fb:9e:b6:65:f6:dc:79:d2:44:39:0b: 34:1a:8c:b8:6f:5a:42:c9:29:f0:7a:99:af:2b:14:07:1d:2a: 74:8c:6e:73:4b:24:8d:8d:a9:3d:00:91:af:5e:62:5d:69:f6: 51:93:61:f4:3c:54:c7:68:50:81:f6:dd:0b:6a:16:d3:82:97: 71:49:d2:00:97:26:fe:d3:82:e8:9e:c3:43:9e:25:b7:40:6e: 79:e4:f5:2d:be:87:75:f8:1e:c5:33:54:da:f3:33:27:60:77: a5:94:99:85:6b:0f:ad:5b:86:45:51:55:18:07:90:a9:13:75: ea:a1:10:5f:8e:8b:9d:16:65:9e:a3:17:23:ac:63:30:66:e1: 9e:70:78:1b:a9:b8:05:2b:13:02:20:95:72:7a:49:5d:39:ef: aa:e7:6c:d9:af:a6:55:72:c1:c5:f8:e6:9e:18:9f:92:ef:11: 51:77:df:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JD8H/E8KR/RsQ0tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3MmE4MmYtZWI1Mi00NGJmLWIzOGYtZjA5ZmMzMTNk N2Q1MB4XDTI2MDMyNTEyMDcyMFoXDTI2MDYyMzEyMDcyMFowLzEtMCsGA1UEAxMk Y2EyYzE2YzUtYTc2Zi00YmJmLTllNDgtZGRjYjFlNTMyN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqaSYQtF3QQ73C4AbQxs71N1eWuJ5jlyFHYM vYabK2rrTcWjUX1PFZbPeSiAYIlD4PTv+2ZfxRU157nc4zGm6DvFPi2vIgw6bupE +b2msEpWgfB2LLqiiSrdSxuVi92E8nh6dYDn5WYsJNTIM7A0QTxBU9RGBnndZjBb 0xexiy0B6gDrsc8Ta0E32I45GTM94VXGoThphkxHZQv15HiM/k9755SVUG5ZPm4G gQKMKpJgZ9DnJ4x/oxSyyoiEHnxLzVSVyGJusFOvQCv8trAyYCRuIiuMluZoUSXN uOL6Y428vmBsJFrTuJCpxSNM7JpjCAoOenQmXfe5PFyNgcRyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMgjrxgBMC7wvDFZXqCmX8EYEOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83Njcy YTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlmYzMxM2Q3ZDUvMTE4M2MxYzYtOTVmYi0z OGUxLTkwMTUtYTE5NDg1YWI2NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzY3MmE4MmYtZWI1Mi00NGJmLWIz OGYtZjA5ZmMzMTNkN2Q1Lzc2NzJhODJmLWViNTItNDRiZi1iMzhmLWYwOWZjMzEz ZDdkNS5jcmwwHwYDVR0jBBgwFoAUNhNWEeaY5tisTL3f8+7a+xmsbQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83NjcyYTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlm YzMxM2Q3ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKV22UeL3X8iaIXz5GVSNhG0aBLhTR57aX2zPMS+e5ALJ3vV4XIbtZ5 SJlm9hWmGunbFZBC6c0aQUjcdgf7/XQdnIKc0b3W5jGHsh+C0Sz7nrZl9tx50kQ5 CzQajLhvWkLJKfB6ma8rFAcdKnSMbnNLJI2NqT0Aka9eYl1p9lGTYfQ8VMdoUIH2 3QtqFtOCl3FJ0gCXJv7Tguiew0OeJbdAbnnk9S2+h3X4HsUzVNrzMydgd6WUmYVr D61bhkVRVRgHkKkTdeqhEF+Oi50WZZ6jFyOsYzBm4Z5weBupuAUrEwIglXJ6SV05 76rnbNmvplVywcX45p4Yn5LvEVF33/c= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:00 2026 by rpki-client