$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa File: 431d6262-5c18-3bbe-989a-e3bf39351b0f.roa (raw, json) Hash identifier: 7Frp0Sb35dzDs+A3NEVgnatO1OPSREkKkqh5lw7/rvY= Subject key identifier: 22:20:D6:32:DA:36:6E:6B:E3:77:09:7E:32:66:00:FC:AF:50:CB:E0 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584E3A2F1F18B52305B185087CC0 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 399106 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:1f:18:b5:23:05:b1:85:08:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=43d2b0f5-5fd8-481d-952d-68f9b28f0ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:17:a6:b9:01:7b:c9:ff:cc:b9:3b:f0:85: 4b:28:95:c7:2b:9a:d7:a6:44:07:96:ed:b6:9b:0f: 85:49:ac:56:70:13:ca:2f:57:86:4a:00:60:4a:c6: 0f:0a:dd:4b:5e:11:f3:aa:02:70:d7:0d:59:cf:b7: 8f:d5:d5:ba:a9:71:f0:21:58:20:de:90:ad:73:11: cb:8c:63:39:df:87:99:6e:64:45:01:15:e2:12:51: b0:11:70:75:28:4c:cd:7f:83:7f:11:43:6d:5e:38: be:6f:5f:99:03:5b:da:98:45:96:3e:bf:48:4f:86: df:51:c5:fc:3a:b6:2f:68:f7:98:70:8e:1b:91:f8: 4a:6b:94:92:53:41:8c:5d:8d:a0:1e:ab:b7:54:23: 33:ed:2f:67:ec:b1:18:bc:49:0d:e7:5f:4d:26:c6: 4d:33:dc:13:39:12:64:48:4b:23:a3:23:6d:6f:95: 17:16:9a:7a:e9:a2:1f:52:b7:b4:97:36:e1:67:44: 51:9a:05:7e:d1:e8:7f:4e:69:c5:1c:e9:a6:ab:1c: dc:bf:3d:cd:a5:9d:df:06:1a:30:2b:61:43:4a:bd: ab:99:92:2c:f9:52:ae:8b:66:48:c5:92:27:2a:66: a9:81:c1:a1:00:2f:66:2f:8d:ed:4e:66:c3:c6:21: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:20:D6:32:DA:36:6E:6B:E3:77:09:7E:32:66:00:FC:AF:50:CB:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:7b:0a:1b:50:fe:93:63:d3:20:f3:22:f8:da:57:4b:bb:15: bc:02:57:23:c2:9c:6b:f7:9f:62:63:be:4b:f2:a0:02:c4:cd: 50:fb:e9:6c:83:43:1f:08:d0:6c:7a:8e:c6:d6:09:d0:f2:5b: 16:45:d4:4a:a2:44:4e:37:e0:ee:20:0f:80:bb:51:26:5c:c5: e6:54:dc:77:35:a9:dc:51:e7:1d:9c:50:87:fa:9e:54:7f:b9: 66:f1:1b:9a:ce:f3:16:3b:a5:ab:d8:d3:39:84:eb:1f:72:24: 69:66:1c:e6:57:06:53:ae:dc:9b:fd:9c:7a:14:c4:a4:ce:02: 3e:15:a3:8f:26:38:5f:75:14:ea:e0:14:87:8e:41:61:d9:11: b7:71:cc:8b:ee:ff:34:a3:16:2f:f2:eb:b5:31:0d:5d:81:00: a8:24:e0:7c:ab:7d:db:ca:28:77:01:29:72:05:44:11:28:d8: 6a:8b:cc:0f:e4:09:28:a3:de:77:20:bb:c0:dd:5c:cf:a6:20: a9:28:78:3e:3f:f1:c5:16:93:53:03:26:3c:52:38:0e:51:7a: ef:79:f4:bc:ca:2b:0c:07:b7:ea:41:c4:eb:bb:c4:1b:d9:2a: 06:97:9d:73:e8:0f:7b:4c:ae:1c:a6:f9:76:1c:3a:8d:69:3b: 2f:33:88:b9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE46Lx8YtSMFsYUIfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NDNkMmIwZjUtNWZkOC00ODFkLTk1MmQtNjhmOWIyOGYwYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh4XprkBe8n/zLk78IVLKJXHK5rXpkQHlu22 mw+FSaxWcBPKL1eGSgBgSsYPCt1LXhHzqgJw1w1Zz7eP1dW6qXHwIVgg3pCtcxHL jGM534eZbmRFARXiElGwEXB1KEzNf4N/EUNtXji+b1+ZA1vamEWWPr9IT4bfUcX8 OrYvaPeYcI4bkfhKa5SSU0GMXY2gHqu3VCMz7S9n7LEYvEkN519NJsZNM9wTORJk SEsjoyNtb5UXFpp66aIfUre0lzbhZ0RRmgV+0eh/TmnFHOmmqxzcvz3NpZ3fBhow K2FDSr2rmZIs+VKui2ZIxZInKmapgcGhAC9mL43tTmbDxiFCOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCIg1jLaNm5r43cJfjJmAPyvUMvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvNDMxZDYyNjItNWMxOC0z YmJlLTk4OWEtZTNiZjM5MzUxYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKN7ChtQ/pNj0yDzIvjaV0u7FbwCVyPCnGv3n2JjvkvyoALE zVD76WyDQx8I0Gx6jsbWCdDyWxZF1EqiRE434O4gD4C7USZcxeZU3Hc1qdxR5x2c UIf6nlR/uWbxG5rO8xY7pavY0zmE6x9yJGlmHOZXBlOu3Jv9nHoUxKTOAj4Vo48m OF91FOrgFIeOQWHZEbdxzIvu/zSjFi/y67UxDV2BAKgk4HyrfdvKKHcBKXIFRBEo 2GqLzA/kCSij3ncgu8DdXM+mIKkoeD4/8cUWk1MDJjxSOA5Reu959LzKKwwHt+pB xOu7xBvZKgaXnXPoD3tMrhym+XYcOo1pOy8ziLk= -----END CERTIFICATE-----Generated at Tue Jun 23 02:46:56 2026 by rpki-client