$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa File: a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa (raw, json) Hash identifier: 92RS9gCU/ItKThxteBa3Z3kuoiYDdQhV1yJuOoeowBY= Subject key identifier: 12:3A:63:4A:CD:66:8F:47:C1:D9:F0:27:2D:92:72:AD:E7:1E:55:97 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584DE150756B0E1C8557BAD7F800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 136.226.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:75:6b:0e:1c:85:57:ba:d7:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=8de39be5-8e48-4acf-80f5-b97c68cf715c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:cc:84:54:17:94:b6:a4:66:86:12:2a:05: c0:49:9b:c0:b6:36:02:d4:5d:c0:bf:c6:28:53:d7: 16:75:50:64:63:c4:4d:79:99:59:e9:ec:e2:f6:10: eb:17:15:c3:1e:ca:ca:12:e4:0a:0c:1a:91:3d:1b: aa:ed:ae:90:36:c1:2e:71:86:06:5e:73:ab:16:49: 4a:44:f2:b2:41:34:fd:80:9b:2c:85:a7:06:b6:15: 77:6a:c5:79:ae:5c:99:eb:98:e4:8c:28:ae:e4:c7: 7b:43:18:73:22:fd:c4:87:17:a5:28:79:5b:e5:fe: 72:05:a6:53:ea:59:62:ba:b5:42:f8:62:cf:a2:cd: 4a:c0:9e:42:1e:53:5c:27:1b:d4:a6:c2:c2:0b:e6: 35:f6:7a:f1:5a:c8:96:fc:3d:5b:97:3d:3a:d2:bd: d3:5d:c0:7f:f5:4b:be:b3:24:53:4d:bd:6f:5e:24: 8b:e3:0b:b6:ef:26:11:d5:53:a1:fd:71:03:bc:46: b4:d0:a4:18:77:fb:33:24:3a:15:53:bd:bc:78:89: ac:0c:f5:6c:3c:b6:08:5b:e2:32:e0:08:3a:bb:33: 36:91:c8:a3:be:cd:59:9a:e2:59:6c:77:09:ad:7b: ca:95:39:0b:3f:66:03:28:fc:a7:56:f7:bd:52:43: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3A:63:4A:CD:66:8F:47:C1:D9:F0:27:2D:92:72:AD:E7:1E:55:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7e:22:c8:e4:13:88:36:40:3e:93:be:a3:85:a7:ce:ed:57: 5e:a7:2f:a0:e1:ba:7f:cf:98:99:99:9c:9c:7b:5b:fb:4e:94: a7:dd:cc:0b:19:f0:3e:1a:74:f8:41:fb:62:f0:24:38:0f:70: 7c:7d:4b:25:0c:81:8b:d5:d5:43:38:3d:51:35:99:51:db:cf: 8b:07:f1:66:5f:9e:0f:6e:37:70:5c:90:5a:6f:8e:1a:31:5a: 8b:b6:52:2f:7e:dd:08:49:1b:d9:d5:0a:92:2e:06:22:58:da: ac:64:3e:36:b9:1d:33:9b:f6:fa:28:b0:eb:82:f4:81:af:f9: df:67:82:b1:ab:e5:e3:0a:99:61:67:0f:84:d8:13:87:5a:25: b9:c1:c8:1b:a3:61:37:21:e4:c1:22:ca:04:6b:09:e1:78:8b: 4c:37:b5:bc:01:e8:d3:9f:44:22:6e:1c:b5:5c:3b:67:02:d5: 2b:3b:03:7a:4a:93:40:f2:75:f0:ef:3a:a5:c4:fa:9e:a4:fc: fe:d5:b6:09:8f:36:24:3b:75:67:ea:7f:3a:a6:b2:f3:55:82: 42:48:44:4b:21:cd:cf:a1:e7:01:6e:90:f0:00:9d:bc:b7:87: e5:de:12:25:ad:d4:4f:5b:a3:23:17:08:08:86:4a:b4:3c:96: fc:48:f0:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUHVrDhyFV7rX+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OGRlMzliZTUtOGU0OC00YWNmLTgwZjUtYjk3YzY4Y2Y3MTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdDMhFQXlLakZoYSKgXASZvAtjYC1F3Av8Yo U9cWdVBkY8RNeZlZ6ezi9hDrFxXDHsrKEuQKDBqRPRuq7a6QNsEucYYGXnOrFklK RPKyQTT9gJsshacGthV3asV5rlyZ65jkjCiu5Md7QxhzIv3EhxelKHlb5f5yBaZT 6lliurVC+GLPos1KwJ5CHlNcJxvUpsLCC+Y19nrxWsiW/D1blz060r3TXcB/9Uu+ syRTTb1vXiSL4wu27yYR1VOh/XEDvEa00KQYd/szJDoVU728eImsDPVsPLYIW+Iy 4Ag6uzM2kcijvs1ZmuJZbHcJrXvKlTkLP2YDKPynVve9UkNpUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI6Y0rNZo9HwdnwJy2Scq3nHlWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTZiNTJiZmQtZGQ1ZC0z MmY3LWEzMDYtMGY4MzA3NGQ1YWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ+IsjkE4g2QD6TvqOFp87tV16nL6Dhun/PmJmZnJx7W/tOlKfdzAsZ 8D4adPhB+2LwJDgPcHx9SyUMgYvV1UM4PVE1mVHbz4sH8WZfng9uN3BckFpvjhox Wou2Ui9+3QhJG9nVCpIuBiJY2qxkPja5HTOb9voosOuC9IGv+d9ngrGr5eMKmWFn D4TYE4daJbnByBujYTch5MEiygRrCeF4i0w3tbwB6NOfRCJuHLVcO2cC1Ss7A3pK k0DydfDvOqXE+p6k/P7VtgmPNiQ7dWfqfzqmsvNVgkJIREshzc+h5wFukPAAnby3 h+XeEiWt1E9boyMXCAiGSrQ8lvxI8LU= -----END CERTIFICATE-----Generated at Fri May 22 14:21:07 2026 by rpki-client