$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa File: 2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa (raw, json) Hash identifier: My3FcrOn/LgdS+jokCkJ1VohuVmL3Jw1rt3mFEN+Tjw= Subject key identifier: A0:C6:5C:41:97:C3:33:F2:14:35:CA:01:A9:B4:7C:16:AD:5B:69:8B Certificate issuer: /CN=5028ee72-1629-4552-a11f-947b5a925519 Certificate serial: 010D0C9F4328584DA56F095141C31B2DAA2EE5C0 Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa Signing time: Mon 27 Apr 2026 14:13:41 +0000 ROA not before: Mon 27 Apr 2026 14:13:41 +0000 ROA not after: Sun 26 Jul 2026 14:13:41 +0000 asID: 13737 IP address blocks: 204.136.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:6f:09:51:41:c3:1b:2d:aa:2e:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519 Validity Not Before: Apr 27 14:13:41 2026 GMT Not After : Jul 26 14:13:41 2026 GMT Subject: CN=ab9f3ba9-15cf-4e10-ab31-905602d900c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:95:10:8e:62:01:0c:55:3e:06:ac:66:c7: 93:16:dc:27:16:0d:bc:2a:27:82:cb:43:0d:9d:89: 38:f8:44:62:0a:6e:c4:de:15:06:bc:d0:d5:fd:8b: 81:7d:bd:98:97:fd:b2:ab:f8:34:3d:da:a6:09:2c: ea:b2:6e:a4:2f:cf:44:b0:1e:a1:87:cb:8b:a5:2a: ba:51:4b:44:4e:88:60:1f:fd:20:4f:cf:eb:45:61: e8:9e:fe:e6:43:51:45:96:c0:51:51:9b:bd:31:73: cd:4a:b9:38:fc:66:56:5a:25:8c:24:c1:a8:c6:8a: da:00:8d:02:91:c1:46:23:be:6a:66:cf:d0:37:d0: 52:9b:eb:f4:1c:92:98:b3:e1:50:42:48:2b:df:1f: 19:1c:10:21:61:96:0e:94:e0:01:77:8f:5b:ef:98: 9d:a7:b9:13:16:2f:90:02:a8:f9:08:4f:eb:62:e7: ff:60:1b:51:54:a1:d5:b8:64:20:1f:3e:55:06:e2: c2:45:57:a0:48:db:68:42:b8:b0:cf:9b:c5:7d:2f: d7:fa:b7:49:41:53:f7:07:ad:90:23:98:45:b9:36: ad:f4:81:aa:52:18:e4:0c:37:fe:a4:47:51:de:bb: b9:c8:0e:f9:aa:e4:e9:b3:bd:8c:99:8c:3f:49:86: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:5C:41:97:C3:33:F2:14:35:CA:01:A9:B4:7C:16:AD:5B:69:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl X509v3 Authority Key Identifier: keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer sbgp-ipAddrBlock: critical IPv4: 204.136.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e7:60:dc:be:8e:c2:dc:f0:70:e4:11:80:a0:49:0f:b4:d3: ce:47:0c:4e:91:57:5f:b0:d1:cd:db:3c:86:b1:9f:10:ac:75: 9b:ea:3a:68:2d:e6:c7:57:e8:e2:61:25:bc:4f:d9:91:5a:e8: ba:f2:77:cb:05:7d:3f:1e:08:d5:ec:7c:2c:2f:fa:ab:88:68: ca:f9:c0:ef:eb:7f:d6:36:4e:d8:31:94:c6:12:0a:e4:97:56: 7e:8b:8d:18:50:99:59:3e:22:7f:4f:a2:f0:cb:e0:04:78:55: 4a:4d:6f:ae:00:9f:d1:44:2d:79:3a:d1:09:f7:79:90:e9:f4: 4c:0e:01:44:b5:3c:a2:90:71:95:9b:a9:f2:39:9c:bf:0f:66: ca:ce:a2:19:f9:e0:a7:e6:88:ef:75:eb:40:9d:ef:12:69:31: 64:95:52:58:00:83:d1:60:07:91:df:fd:70:66:cb:50:ad:e7: 1c:70:dc:55:48:a3:90:13:fd:a3:c5:f2:42:a0:a9:1d:9f:4f: 49:0e:c6:65:4c:af:db:a8:81:25:aa:6a:01:05:80:dd:57:73: 50:27:53:93:14:7a:06:a6:6e:4c:cc:1e:71:d8:4d:7c:f0:30: cf:6c:4d:d9:a7:91:48:dc:b8:4c:96:16:af:a6:db:81:1a:48: a1:13:75:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lbwlRQcMbLaou5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAyOGVlNzItMTYyOS00NTUyLWExMWYtOTQ3YjVhOTI1 NTE5MB4XDTI2MDQyNzE0MTM0MVoXDTI2MDcyNjE0MTM0MVowLzEtMCsGA1UEAxMk YWI5ZjNiYTktMTVjZi00ZTEwLWFiMzEtOTA1NjAyZDkwMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHWVEI5iAQxVPgasZseTFtwnFg28KieCy0MN nYk4+ERiCm7E3hUGvNDV/YuBfb2Yl/2yq/g0PdqmCSzqsm6kL89EsB6hh8uLpSq6 UUtETohgH/0gT8/rRWHonv7mQ1FFlsBRUZu9MXPNSrk4/GZWWiWMJMGoxoraAI0C kcFGI75qZs/QN9BSm+v0HJKYs+FQQkgr3x8ZHBAhYZYOlOABd49b75idp7kTFi+Q Aqj5CE/rYuf/YBtRVKHVuGQgHz5VBuLCRVegSNtoQriwz5vFfS/X+rdJQVP3B62Q I5hFuTat9IGqUhjkDDf+pEdR3ru5yA75quTps72MmYw/SYb5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDGXEGXwzPyFDXKAam0fBatW2mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MDI4 ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5MjU1MTkvMmExZmI4ZGItY2I5Ny0z MWMzLWE3YTAtYmEyOWQ2NGQyNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTAyOGVlNzItMTYyOS00NTUyLWEx MWYtOTQ3YjVhOTI1NTE5LzUwMjhlZTcyLTE2MjktNDU1Mi1hMTFmLTk0N2I1YTky NTUxOS5jcmwwHwYDVR0jBBgwFoAUtUCIPF1c+2ZFhKxzVLTW+QgdeOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdi NWE5MjU1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLnYNy+jsLc8HDkEYCgSQ+0085HDE6RV1+w0c3bPIaxnxCsdZvqOmgt 5sdX6OJhJbxP2ZFa6Lryd8sFfT8eCNXsfCwv+quIaMr5wO/rf9Y2TtgxlMYSCuSX Vn6LjRhQmVk+In9PovDL4AR4VUpNb64An9FELXk60Qn3eZDp9EwOAUS1PKKQcZWb qfI5nL8PZsrOohn54KfmiO9160Cd7xJpMWSVUlgAg9FgB5Hf/XBmy1Ct5xxw3FVI o5AT/aPF8kKgqR2fT0kOxmVMr9uogSWqagEFgN1Xc1AnU5MUegambkzMHnHYTXzw MM9sTdmnkUjcuEyWFq+m24EaSKETdXM= -----END CERTIFICATE-----Generated at Tue Apr 28 23:09:56 2026 by rpki-client