$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa File: 2a6b35d8-8539-3c36-9a9a-42084d63216c.roa (raw, json) Hash identifier: cgeqZZulDGbm0oFIv1yDX/v5ewg7y9vDBdMyQTgaAyQ= Subject key identifier: DB:9A:C3:9D:2E:76:4C:A0:0E:1F:41:2A:9A:8C:4D:C1:13:96:39:50 Certificate issuer: /CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Certificate serial: 010D0C9F4328584EA799844CF2818FE8FE32F500 Authority key identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 0 IP address blocks: 139.187.0.0/16 maxlen: 24 156.117.0.0/16 maxlen: 24 192.138.138.0/24 maxlen: 24 192.138.139.0/24 maxlen: 24 192.138.140.0/24 maxlen: 24 192.138.141.0/24 maxlen: 24 192.138.142.0/24 maxlen: 24 192.138.143.0/24 maxlen: 24 192.138.144.0/24 maxlen: 24 192.138.145.0/24 maxlen: 24 192.138.146.0/24 maxlen: 24 192.138.147.0/24 maxlen: 24 192.226.8.0/21 maxlen: 21 192.226.8.0/22 maxlen: 22 192.226.8.0/23 maxlen: 23 192.226.8.0/24 maxlen: 24 192.226.9.0/24 maxlen: 24 192.226.10.0/23 maxlen: 23 192.226.10.0/24 maxlen: 24 192.226.11.0/24 maxlen: 24 192.226.12.0/22 maxlen: 22 192.226.12.0/23 maxlen: 23 192.226.12.0/24 maxlen: 24 192.226.13.0/24 maxlen: 24 192.226.14.0/23 maxlen: 23 192.226.14.0/24 maxlen: 24 192.226.15.0/24 maxlen: 24 192.226.16.0/20 maxlen: 20 192.226.16.0/21 maxlen: 21 192.226.16.0/22 maxlen: 22 192.226.16.0/23 maxlen: 23 192.226.16.0/24 maxlen: 24 192.226.17.0/24 maxlen: 24 192.226.18.0/23 maxlen: 23 192.226.18.0/24 maxlen: 24 192.226.19.0/24 maxlen: 24 192.226.20.0/22 maxlen: 22 192.226.20.0/23 maxlen: 23 192.226.20.0/24 maxlen: 24 192.226.21.0/24 maxlen: 24 192.226.22.0/23 maxlen: 23 192.226.22.0/24 maxlen: 24 192.226.23.0/24 maxlen: 24 192.226.24.0/22 maxlen: 22 192.226.24.0/23 maxlen: 23 192.226.24.0/24 maxlen: 24 192.226.25.0/24 maxlen: 24 192.226.26.0/23 maxlen: 23 192.226.26.0/24 maxlen: 24 192.226.27.0/24 maxlen: 24 192.226.28.0/22 maxlen: 22 192.226.28.0/23 maxlen: 23 192.226.28.0/24 maxlen: 24 192.226.29.0/24 maxlen: 24 192.226.30.0/23 maxlen: 23 192.226.30.0/24 maxlen: 24 192.226.31.0/24 maxlen: 24 199.120.176.0/23 maxlen: 23 199.120.176.0/24 maxlen: 24 199.120.177.0/24 maxlen: 24 199.120.178.0/24 maxlen: 24 199.245.247.0/24 maxlen: 24 199.249.226.0/24 maxlen: 24 204.52.153.0/24 maxlen: 24 204.52.201.0/24 maxlen: 24 2620:9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:84:4c:f2:81:8f:e8:fe:32:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4ac6fbc5-5ed0-4f19-9876-93f3bf551d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:e0:d5:f0:c9:e2:e7:5f:f4:20:39:2c:42: a0:ec:6f:be:48:2e:f6:31:94:1c:fc:09:4d:c1:e5: 95:e1:8b:0a:ea:e4:1d:ba:71:48:4a:78:8c:b9:18: 37:b5:46:3f:4a:15:af:6f:fa:86:15:9d:9d:21:52: e8:53:9f:b8:16:5b:7f:f1:7c:5e:5b:0e:76:b4:35: d8:ef:3a:42:48:55:c4:c1:78:c2:71:1a:cb:a5:03: e0:69:79:47:c0:36:43:b3:a0:af:7e:b8:0c:aa:98: 70:e2:4e:e1:a7:3b:ad:98:03:22:37:32:c1:ef:10: 2f:3b:01:42:21:0f:34:15:12:be:a5:9f:ba:63:81: be:da:60:0c:d7:ac:80:4b:11:0b:21:7a:36:ea:81: 00:9a:f5:f4:bf:36:6e:5f:8b:ac:60:01:76:54:c7: c6:db:ff:65:ce:a2:c2:65:da:de:af:cf:ef:3b:37: ba:34:f9:c5:20:47:74:22:8a:e7:4d:0b:82:53:ae: 09:99:0c:8d:27:3d:69:42:2b:bf:ac:e0:1e:a6:db: a8:ad:e4:f2:4a:4c:2f:b4:d6:35:34:b9:69:50:44: 0b:2a:a5:92:69:74:e2:40:91:b2:08:6f:f4:63:20: 60:43:ab:e7:cd:be:a5:20:fe:19:77:6d:e6:08:42: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9A:C3:9D:2E:76:4C:A0:0E:1F:41:2A:9A:8C:4D:C1:13:96:39:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl X509v3 Authority Key Identifier: keyid:A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer sbgp-ipAddrBlock: critical IPv4: 139.187.0.0/16 156.117.0.0/16 192.138.138.0-192.138.147.255 192.226.8.0-192.226.31.255 199.120.176.0-199.120.178.255 199.245.247.0/24 199.249.226.0/24 204.52.153.0/24 204.52.201.0/24 IPv6: 2620:9e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4f:df:18:17:62:34:46:12:3c:10:5a:fd:1d:f1:25:e6:d2: c3:7d:e8:57:2f:5c:99:7a:79:e2:4a:8c:d6:6d:ac:c3:79:e1: 64:35:14:f9:98:a1:1f:a9:0d:b1:95:0a:76:59:50:fe:b3:47: 91:37:18:a8:7b:05:0b:6a:58:99:4b:58:9c:b2:e9:de:b3:c2: 41:23:21:c8:9c:80:72:23:76:88:d4:79:22:98:af:52:56:42: f5:2d:45:c6:d2:42:18:34:4a:c5:13:c3:d4:8f:bb:30:db:71: 2f:cb:71:0f:e5:ad:37:6c:ca:87:33:f4:ba:27:80:d3:c1:fd: 8f:ae:b1:51:27:b9:39:6d:e0:72:52:d1:d5:f7:3b:78:a5:f3: 27:11:db:48:d9:4e:be:c3:ba:86:15:48:96:01:64:ee:68:68: 49:e5:2d:82:9c:6e:f8:f1:e2:d2:1c:76:73:fd:45:63:41:79: f9:f8:1b:d6:ea:86:77:f4:0d:78:63:ce:24:9b:e0:f3:4c:77: 84:1e:58:aa:6d:31:3f:7d:82:d8:ea:63:51:f5:fb:16:73:51: b6:95:16:7b:10:a7:e9:bd:53:12:ed:e0:2e:f2:fb:1d:79:65: 1a:7b:86:1b:36:f6:c9:6a:07:92:38:eb:41:1e:61:d4:20:71: 71:4f:38:00 -----BEGIN CERTIFICATE----- MIIGmjCCBYKgAwIBAgIUAQ0Mn0MoWE6nmYRM8oGP6P4y9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJiYmNjYWYtZWI0NC00MDgwLTg4ZGUtOGY0Y2M2OTM4 Y2U2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGFjNmZiYzUtNWVkMC00ZjE5LTk4NzYtOTNmM2JmNTUxZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl7g1fDJ4udf9CA5LEKg7G++SC72MZQc/AlN weWV4YsK6uQdunFISniMuRg3tUY/ShWvb/qGFZ2dIVLoU5+4Flt/8XxeWw52tDXY 7zpCSFXEwXjCcRrLpQPgaXlHwDZDs6CvfrgMqphw4k7hpzutmAMiNzLB7xAvOwFC IQ80FRK+pZ+6Y4G+2mAM16yASxELIXo26oEAmvX0vzZuX4usYAF2VMfG2/9lzqLC Zdrer8/vOze6NPnFIEd0IornTQuCU64JmQyNJz1pQiu/rOAeptuoreTySkwvtNY1 NLlpUEQLKqWSaXTiQJGyCG/0YyBgQ6vnzb6lIP4Zd23mCEKJVwIDAQABo4IDrDCC A6gwHQYDVR0OBBYEFNuaw50udkygDh9BKpqMTcETljlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJi Y2NhZi1lYjQ0LTQwODAtODhkZS04ZjRjYzY5MzhjZTYvMmE2YjM1ZDgtODUzOS0z YzM2LTlhOWEtNDIwODRkNjMyMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJiYmNjYWYtZWI0NC00MDgwLTg4 ZGUtOGY0Y2M2OTM4Y2U2LzJiYmJjY2FmLWViNDQtNDA4MC04OGRlLThmNGNjNjkz OGNlNi5jcmwwHwYDVR0jBBgwFoAUoPkp5NNmgD0d4/BgQHBYHi5lHr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJiY2NhZi1lYjQ0LTQwODAtODhkZS04ZjRj YzY5MzhjZTYuY2VyMHYGCCsGAQUFBwEHAQH/BGcwZTBSBAIAATBMAwMAi7sDAwCc dTAMAwQBwIqKAwQCwIqQMAwDBAPA4ggDBAXA4gAwDAMEBMd4sAMEAMd4sgMEAMf1 9wMEAMf54gMEAMw0mQMEAMw0yTAPBAIAAjAJAwcAJiAAngAAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACBP 3xgXYjRGEjwQWv0d8SXm0sN96FcvXJl6eeJKjNZtrMN54WQ1FPmYoR+pDbGVCnZZ UP6zR5E3GKh7BQtqWJlLWJyy6d6zwkEjIcicgHIjdojUeSKYr1JWQvUtRcbSQhg0 SsUTw9SPuzDbcS/LcQ/lrTdsyocz9LongNPB/Y+usVEnuTlt4HJS0dX3O3il8ycR 20jZTr7DuoYVSJYBZO5oaEnlLYKcbvjx4tIcdnP9RWNBefn4G9bqhnf0DXhjziSb 4PNMd4QeWKptMT99gtjqY1H1+xZzUbaVFnsQp+m9UxLt4C7y+x15ZRp7hhs29slq B5I460EeYdQgcXFPOAA= -----END CERTIFICATE-----Generated at Fri Aug 21 02:50:09 2026 by rpki-client