$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/49c119e4-ff58-329f-8d61-1e88442a944f.roa File: 49c119e4-ff58-329f-8d61-1e88442a944f.roa (raw, json) Hash identifier: ZRslntSBAiBjKp89t333t9w3ZXauuGc4msPJa6ewxMM= Subject key identifier: 29:98:66:20:66:C0:15:67:7E:4E:D4:EA:FD:60:85:6E:C1:F1:3D:BD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAA20930A928AB6CC3740 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/49c119e4-ff58-329f-8d61-1e88442a944f.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 136.226.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:aa:20:93:0a:92:8a:b6:cc:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=c3f8f5ba-bbcd-41a4-ab53-71d1fa09c224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:34:44:f8:8e:fa:cf:3b:0b:f6:de:fc:7f: 9f:cc:92:7d:5a:85:9c:81:d2:a7:0b:c6:dd:14:fd: e5:9f:61:a9:ca:8c:dd:27:0d:b5:fa:14:d5:7e:40: 11:ef:c9:52:38:7b:4f:d9:b5:c2:e1:26:17:6c:f6: b1:8c:46:56:dc:ff:4d:62:89:94:9c:e1:d8:b2:be: 33:17:33:8e:ab:a8:e1:32:a2:5d:3e:a5:77:03:d7: 07:bb:fb:85:dc:ec:5d:fd:2c:a6:bf:e0:b7:2f:0c: 6d:9b:9d:1f:51:94:d0:06:09:1e:48:08:d8:39:dd: bb:27:67:e9:f0:3a:45:1c:26:86:3b:fc:3d:d7:a0: f5:1d:6a:92:32:8e:14:91:01:54:fe:73:df:c8:9c: 92:d1:a9:7b:60:1c:87:53:d8:77:a2:4d:17:bb:ce: 6d:15:54:15:a1:b0:ac:4d:b7:27:25:f4:df:e4:f8: d2:b7:34:d9:4a:1c:04:04:7b:30:40:f1:97:1c:05: 12:f4:d7:1d:ba:51:ea:84:88:7c:a2:5c:e2:c5:6b: de:23:4c:39:c6:1b:1d:ad:95:11:a6:76:70:b0:b3: 50:69:a9:fa:9f:5e:16:1a:64:8c:f5:a5:db:d0:3f: 99:0d:ca:c2:a4:29:5a:bf:05:3d:3d:1d:19:03:bb: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:98:66:20:66:C0:15:67:7E:4E:D4:EA:FD:60:85:6E:C1:F1:3D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/49c119e4-ff58-329f-8d61-1e88442a944f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:92:2f:da:6c:2d:60:6f:96:00:23:a5:66:33:51:16:64:21: d6:28:ab:fd:f9:dc:b3:6f:1f:a9:7b:d6:5f:11:57:43:77:4a: 3e:3f:47:d3:bb:2a:a8:02:42:44:bf:a3:8c:15:79:ae:d1:f2: 11:82:6f:ff:1f:cc:76:91:86:fc:99:d8:ec:39:02:1a:ac:b4: f4:d1:55:ba:66:22:ca:03:77:a9:f2:36:2e:e2:38:9f:6c:c3: 26:7e:d6:eb:44:77:5b:e6:f0:f4:ac:93:6b:f2:d5:c0:ea:89: 49:7f:a1:c7:60:9e:db:1c:45:cc:e5:bf:26:37:cf:06:b5:95: 7b:90:68:19:b3:1d:41:26:54:02:82:ea:0e:f9:26:1f:92:db: 6e:2d:b4:5a:65:ba:58:3f:0f:df:ee:b6:c8:65:ca:3d:31:a2: ff:7a:cf:5c:43:0c:76:c6:45:c2:a8:de:f5:12:f2:71:0f:3b: 68:85:f6:3d:43:70:75:17:cf:7a:fa:c3:22:33:86:e8:34:e1: 7f:c4:a8:2a:52:d8:cd:60:5f:48:04:8a:50:a0:79:37:2d:3e: 1e:49:0b:38:95:b2:63:6d:88:1c:ae:12:c4:a3:fd:33:f6:e8: c5:26:37:fd:32:16:15:0b:43:d8:e0:81:10:8b:83:6f:74:3d: d4:e4:5b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6ogkwqSirbMN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YzNmOGY1YmEtYmJjZC00MWE0LWFiNTMtNzFkMWZhMDljMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6E0RPiO+s87C/be/H+fzJJ9WoWcgdKnC8bd FP3ln2GpyozdJw21+hTVfkAR78lSOHtP2bXC4SYXbPaxjEZW3P9NYomUnOHYsr4z FzOOq6jhMqJdPqV3A9cHu/uF3Oxd/Symv+C3Lwxtm50fUZTQBgkeSAjYOd27J2fp 8DpFHCaGO/w916D1HWqSMo4UkQFU/nPfyJyS0al7YByHU9h3ok0Xu85tFVQVobCs TbcnJfTf5PjStzTZShwEBHswQPGXHAUS9NcdulHqhIh8olzixWveI0w5xhsdrZUR pnZwsLNQaan6n14WGmSM9aXb0D+ZDcrCpClavwU9PR0ZA7vpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmYZiBmwBVnfk7U6v1ghW7B8T29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDljMTE5ZTQtZmY1OC0z MjlmLThkNjEtMWU4ODQ0MmE5NDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6SL9psLWBvlgAjpWYzURZkIdYoq/353LNvH6l71l8RV0N3Sj4/R9O7 KqgCQkS/o4wVea7R8hGCb/8fzHaRhvyZ2Ow5AhqstPTRVbpmIsoDd6nyNi7iOJ9s wyZ+1utEd1vm8PSsk2vy1cDqiUl/ocdgntscRczlvyY3zwa1lXuQaBmzHUEmVAKC 6g75Jh+S224ttFplulg/D9/utshlyj0xov96z1xDDHbGRcKo3vUS8nEPO2iF9j1D cHUXz3r6wyIzhug04X/EqCpS2M1gX0gEilCgeTctPh5JCziVsmNtiByuEsSj/TP2 6MUmN/0yFhULQ9jggRCLg290PdTkWwo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:04 2026 by rpki-client