$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/f5ad0dde-a733-3deb-81db-42293449a543.roa File: f5ad0dde-a733-3deb-81db-42293449a543.roa (raw, json) Hash identifier: gi/AH8WX+k+6zmdHOrNncT4sgqLVc42wgnFlMNJcz5g= Subject key identifier: 10:8C:16:9D:97:A4:DF:33:CF:D1:7B:3D:95:17:B5:C0:C8:D3:DD:5D Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Certificate serial: 010D0C9F4328584D91C009AB0161D36CD8E95800 Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/f5ad0dde-a733-3deb-81db-42293449a543.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396052 IP address blocks: 139.60.128.0/20 maxlen: 24 139.180.232.0/21 maxlen: 24 198.17.52.0/24 maxlen: 24 208.69.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:09:ab:01:61:d3:6c:d8:e9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=f91a02c1-c1ed-40c7-bfed-c7229ce41de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:60:25:b7:d3:ce:3f:c0:7e:eb:ff:b8:1f: 8d:23:b1:ff:39:56:a3:03:98:53:b8:a1:6a:4e:31: 19:68:3e:ca:ff:ee:e9:fb:3c:7a:c6:b2:b0:58:14: 55:4f:af:16:87:b8:6a:e5:a2:17:b7:9b:9d:c5:a1: df:cb:bb:33:d2:a0:57:d3:75:d2:16:2e:71:73:a3: 78:41:4a:8e:a6:22:27:ae:8d:1d:d9:b9:13:7e:a4: 86:58:1a:8a:c3:ef:a9:92:21:08:54:d2:62:cd:b6: 50:b4:a2:a8:9b:57:cc:c1:e4:7b:12:5b:15:94:d5: f4:b9:59:93:48:71:a6:ed:7d:87:70:5c:87:6e:03: c5:84:46:6f:9b:24:59:36:08:b5:9f:cb:8b:2c:fd: 19:04:60:0d:41:af:e8:5b:cb:6c:87:e5:71:13:7c: 55:68:ff:c5:47:13:d0:21:4c:27:d4:27:fd:23:a6: c9:87:a0:09:4a:72:d0:8a:d9:1c:6e:fe:2e:d1:6e: cb:50:ad:b7:6a:77:a1:60:44:cb:b0:4f:03:0a:42: dc:0e:c8:07:87:d7:a3:2a:85:1e:9a:ec:e7:04:c6: 2d:43:09:a7:38:ad:12:ef:f5:5b:57:6c:0f:b0:5e: c1:2a:4b:18:25:29:31:05:a4:c1:a7:2a:ff:cc:6f: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8C:16:9D:97:A4:DF:33:CF:D1:7B:3D:95:17:B5:C0:C8:D3:DD:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/f5ad0dde-a733-3deb-81db-42293449a543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl X509v3 Authority Key Identifier: keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer sbgp-ipAddrBlock: critical IPv4: 139.60.128.0/20 139.180.232.0/21 198.17.52.0/24 208.69.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:77:16:d5:db:81:57:b0:ce:4b:dc:65:54:cd:73:d2:30:67: d6:21:09:c5:c3:00:7e:d8:62:66:64:5d:a2:b6:15:28:53:1b: 3a:af:32:01:4e:04:69:96:df:cd:9b:47:ac:2e:43:7c:be:95: 2e:aa:9f:82:b3:21:a6:50:cf:7d:12:bd:17:f0:aa:42:7b:2b: 30:fe:e7:21:3a:65:6a:2d:2f:e5:a2:5f:12:60:1f:22:57:ee: a4:84:01:82:b3:17:10:c5:af:3f:34:d7:ca:2f:61:6a:45:96: ef:fa:f2:05:a4:4f:e0:01:1e:d9:48:c8:b8:36:af:9c:6c:39: b9:ac:c2:5c:6b:6c:f5:e2:a7:be:c0:74:e0:bc:f7:04:0c:55: 14:66:ae:a9:8e:3c:15:34:28:c3:d4:4f:d2:14:2b:e6:31:f5: ec:50:1e:fc:01:c3:8b:ab:d2:d6:36:4c:5c:9b:48:4b:1a:4f: 32:e0:b3:0a:79:0c:39:d5:f0:3c:eb:f4:a2:f9:7a:24:99:89: 3e:33:ab:fe:51:63:a0:11:be:f5:0c:f7:e3:40:a4:ae:b2:e1: 00:95:31:e0:ce:a6:1a:82:89:2c:12:42:d3:74:ed:b5:9c:99: 62:45:16:97:68:c9:f1:97:16:40:1f:52:ce:5b:5f:72:1b:44: 59:96:20:93 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE2RwAmrAWHTbNjpWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5 MTM3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZjkxYTAyYzEtYzFlZC00MGM3LWJmZWQtYzcyMjljZTQxZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XRgJbfTzj/Afuv/uB+NI7H/OVajA5hTuKFq TjEZaD7K/+7p+zx6xrKwWBRVT68Wh7hq5aIXt5udxaHfy7sz0qBX03XSFi5xc6N4 QUqOpiInro0d2bkTfqSGWBqKw++pkiEIVNJizbZQtKKom1fMweR7ElsVlNX0uVmT SHGm7X2HcFyHbgPFhEZvmyRZNgi1n8uLLP0ZBGANQa/oW8tsh+VxE3xVaP/FRxPQ IUwn1Cf9I6bJh6AJSnLQitkcbv4u0W7LUK23anehYETLsE8DCkLcDsgHh9ejKoUe muznBMYtQwmnOK0S7/VbV2wPsF7BKksYJSkxBaTBpyr/zG/5vQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFBCMFp2XpN8zz9F7PZUXtcDI091dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Ni OWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvZjVhZDBkZGUtYTczMy0z ZGViLTgxZGItNDIyOTM0NDlhNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjYjllZDAtNzg3MC00YTRhLWJm MjgtY2I4NmJjYTQ5MTM3LzNjY2I5ZWQwLTc4NzAtNGE0YS1iZjI4LWNiODZiY2E0 OTEzNy5jcmwwHwYDVR0jBBgwFoAUkqh+NuEq47kCrc17zepC77GNICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2 YmNhNDkxMzcuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEizyAAwQD i7ToAwQAxhE0AwQD0EUwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIB3FtXbgVewzkvcZVTNc9IwZ9YhCcXD AH7YYmZkXaK2FShTGzqvMgFOBGmW382bR6wuQ3y+lS6qn4KzIaZQz30SvRfwqkJ7 KzD+5yE6ZWotL+WiXxJgHyJX7qSEAYKzFxDFrz8018ovYWpFlu/68gWkT+ABHtlI yLg2r5xsObmswlxrbPXip77AdOC89wQMVRRmrqmOPBU0KMPUT9IUK+Yx9exQHvwB w4ur0tY2TFybSEsaTzLgswp5DDnV8Dzr9KL5eiSZiT4zq/5RY6ARvvUM9+NApK6y 4QCVMeDOphqCiSwSQtN07bWcmWJFFpdoyfGXFkAfUs5bX3IbRFmWIJM= -----END CERTIFICATE-----Generated at Mon Apr 27 11:21:06 2026 by rpki-client