$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/25501574-6b89-30c7-a805-b2c47c0bcfe4.roa File: 25501574-6b89-30c7-a805-b2c47c0bcfe4.roa (raw, json) Hash identifier: RYLF0t+fJhN6n7z40BkARPNXzQgpycAAaqXnGEb+foA= Subject key identifier: 5E:0F:53:AD:AA:2B:C3:49:AC:06:64:35:A4:72:C6:D7:E9:78:09:10 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F982CAB4153B028BDD380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/25501574-6b89-30c7-a805-b2c47c0bcfe4.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 136.226.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:98:2c:ab:41:53:b0:28:bd:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=e154d92d-7964-4b62-85a8-58dc1e694507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:8b:98:4e:35:64:a8:7b:85:e4:2a:b5:71: a9:8b:41:f5:49:3d:e7:ea:7d:40:03:35:3d:51:b9: b1:e5:b5:81:b5:0e:90:29:ea:e1:30:b5:c6:7d:15: c1:00:e3:5c:a1:8d:36:7a:ca:c5:13:47:8f:94:e7: 28:49:8d:22:fb:06:25:1c:d3:0c:85:76:de:e5:e9: 99:3d:59:ee:63:d0:00:74:96:82:be:ee:e4:24:1d: d6:4d:c8:d6:a3:df:d1:23:d6:97:53:0d:14:64:b6: 4b:72:e5:1c:3f:f7:46:ab:41:24:cc:f2:f1:d4:45: d9:e5:b1:d7:23:c1:27:02:5f:98:8c:9b:8b:e4:e8: a4:06:34:fc:d1:48:f6:f8:26:93:d7:31:08:21:14: f1:2c:6b:0d:97:6a:df:2b:46:23:49:a8:18:2e:1b: 1d:eb:0b:dc:44:7a:a7:33:ad:01:91:ee:d4:23:41: 7e:66:38:d3:d1:ca:86:25:69:6b:f7:03:70:20:b1: 7a:70:f3:5a:98:88:fa:6e:5a:58:32:ca:4b:c1:d3: 8f:4d:71:0e:96:ea:f9:5a:e0:78:50:68:1e:96:c1: 32:23:c6:cc:93:93:c0:7a:f4:15:d6:96:26:af:68: 99:83:dc:6c:ee:3d:cd:92:16:0c:ed:b7:39:b6:e1: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:53:AD:AA:2B:C3:49:AC:06:64:35:A4:72:C6:D7:E9:78:09:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/25501574-6b89-30c7-a805-b2c47c0bcfe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ec:ab:a7:7f:dc:32:4a:4c:a4:cd:a7:df:13:21:0d:50:b5: b9:1c:84:4d:aa:c5:1f:ac:69:45:5b:d2:89:0d:21:18:d3:e1: 0d:57:b1:be:cc:dd:db:64:1e:96:63:44:5e:3b:b2:c6:23:d3: 57:94:f5:15:d8:47:d9:76:32:88:01:ad:27:2c:ad:e1:68:81: f4:79:6a:cf:4d:22:97:34:74:98:ef:f5:94:ec:ca:69:0c:cd: 75:ee:9c:ff:de:65:40:05:7c:42:64:20:f0:1b:53:8b:3c:e7: 6b:e5:6a:6d:56:09:0f:ff:a1:78:5f:d0:f8:0d:f6:d0:bd:d9: ed:7d:d6:aa:98:60:2d:aa:de:f1:b9:64:4c:1a:04:7a:1e:90: 2b:3c:6a:8d:b6:b4:5a:55:db:98:76:38:5c:ac:b1:d8:06:8d: fc:8d:9e:4d:8f:ba:ca:d8:57:0a:78:37:83:28:51:46:86:dc: 81:6f:92:45:4d:ba:77:99:33:ae:b7:a6:fb:c6:72:63:81:b4: 66:0c:7f:f7:71:30:40:c9:b0:c1:dc:ae:a2:aa:61:23:da:2d: 4d:8d:ab:c2:c0:56:23:f6:76:b6:98:d1:a9:4e:6c:c7:e0:99: c1:7e:ed:a0:f4:18:40:ab:b1:e3:1c:33:15:51:4e:1e:cb:4f: e8:74:ca:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5gsq0FTsCi904AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZTE1NGQ5MmQtNzk2NC00YjYyLTg1YTgtNThkYzFlNjk0NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9SLmE41ZKh7heQqtXGpi0H1ST3n6n1AAzU9 Ubmx5bWBtQ6QKerhMLXGfRXBAONcoY02esrFE0ePlOcoSY0i+wYlHNMMhXbe5emZ PVnuY9AAdJaCvu7kJB3WTcjWo9/RI9aXUw0UZLZLcuUcP/dGq0EkzPLx1EXZ5bHX I8EnAl+YjJuL5OikBjT80Uj2+CaT1zEIIRTxLGsNl2rfK0YjSagYLhsd6wvcRHqn M60Bke7UI0F+ZjjT0cqGJWlr9wNwILF6cPNamIj6blpYMspLwdOPTXEOlur5WuB4 UGgelsEyI8bMk5PAevQV1pYmr2iZg9xs7j3NkhYM7bc5tuHIWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4PU62qK8NJrAZkNaRyxtfpeAkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjU1MDE1NzQtNmI4OS0z MGM3LWE4MDUtYjJjNDdjMGJjZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfsq6d/3DJKTKTNp98TIQ1QtbkchE2qxR+saUVb0okNIRjT4Q1Xsb7M 3dtkHpZjRF47ssYj01eU9RXYR9l2MogBrScsreFogfR5as9NIpc0dJjv9ZTsymkM zXXunP/eZUAFfEJkIPAbU4s852vlam1WCQ//oXhf0PgN9tC92e191qqYYC2q3vG5 ZEwaBHoekCs8ao22tFpV25h2OFyssdgGjfyNnk2PusrYVwp4N4MoUUaG3IFvkkVN uneZM663pvvGcmOBtGYMf/dxMEDJsMHcrqKqYSPaLU2Nq8LAViP2draY0alObMfg mcF+7aD0GECrseMcMxVRTh7LT+h0yjM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:41 2026 by rpki-client