$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a881de11-acdd-3ca7-af5c-c98202304fc0.roa File: a881de11-acdd-3ca7-af5c-c98202304fc0.roa (raw, json) Hash identifier: NdlNjtx5gXrB2eE/A7s9mOZz92zfcd0GXC94X7qiPAY= Subject key identifier: 1C:E8:FA:90:20:10:C0:F6:63:7B:DD:49:65:DA:6D:47:A9:11:33:B0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9C144B07CA08349D5480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a881de11-acdd-3ca7-af5c-c98202304fc0.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 136.226.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9c:14:4b:07:ca:08:34:9d:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=441c0ff6-9100-4185-8560-855c70ccbcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:1a:cd:db:06:1f:29:6f:e9:e2:9c:50:fa: ea:ee:89:fc:d0:42:96:5b:10:a8:19:f4:6d:65:88: 62:36:dc:14:70:a8:58:fe:65:f8:db:24:f9:9e:42: 8d:41:38:12:6f:d3:3a:b5:61:0e:9f:11:96:e0:80: 82:4c:6d:c0:43:49:d0:bf:a7:25:6b:77:87:55:21: 29:86:ad:19:67:76:6d:a1:d3:5b:a5:aa:da:80:55: 90:87:47:41:05:fa:e3:76:a7:b5:85:f7:f9:23:5f: d4:ad:dc:87:68:ff:8f:dc:de:26:dc:c1:42:e0:2d: 11:e8:e4:7c:0d:13:48:60:6e:55:1a:95:5d:a5:88: 18:2d:84:4d:b8:fa:0d:9f:66:05:70:67:8a:f9:94: 65:04:01:92:1d:5a:e0:24:88:42:9b:0c:7c:7c:ce: 0d:0c:da:e3:31:55:f3:0f:e6:26:21:a5:e0:0f:45: 66:a3:5e:26:51:0e:0a:fc:6e:7a:3e:80:0c:ba:46: 82:44:3f:75:b2:bd:7a:f8:38:fa:ad:bc:4a:23:af: a8:54:a4:07:3e:b0:da:8a:b2:be:30:cb:75:9b:4b: 14:3f:fc:3f:6b:0e:16:41:67:98:7b:8d:b4:cc:d4: a0:e0:81:1f:c2:b9:2d:56:a2:3c:2a:ec:15:b7:2d: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E8:FA:90:20:10:C0:F6:63:7B:DD:49:65:DA:6D:47:A9:11:33:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a881de11-acdd-3ca7-af5c-c98202304fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a7:c7:22:cd:38:4b:93:2e:60:8e:20:c6:e8:38:17:e7:4f: cb:8b:fa:c3:c3:c3:03:a4:00:c9:c9:45:b3:6c:80:66:32:11: 5d:75:b3:e5:7f:b4:e1:93:93:2c:cb:f5:c8:5c:9c:d8:6b:d6: 55:e7:81:32:7f:d6:06:86:2e:67:af:32:8e:ff:eb:a6:db:5a: ae:23:9b:7c:f1:51:d9:f6:80:fc:a1:ad:6e:89:54:71:41:b9: 05:b4:2c:ea:56:07:db:e2:17:73:d0:32:af:3a:7f:1f:8d:bb: da:d7:c3:04:96:85:e3:d5:0c:bc:e4:67:a9:33:dd:b9:0f:15: 2e:71:fa:f4:3b:17:09:b9:8d:ee:7f:32:97:09:a6:c8:f5:6f: 7c:e7:4b:7b:be:0c:67:74:97:d2:d7:db:ee:c3:ba:a0:cd:4a: d1:fb:5a:0d:0b:ad:42:36:55:8b:00:ea:cf:c9:63:71:93:ea: 10:90:b5:a7:ed:10:60:a8:c2:09:13:f0:e9:f9:a5:58:a5:93: 80:b4:3a:f1:8f:44:52:78:df:8d:41:0b:5b:63:81:89:c2:29: 48:e5:c2:b9:db:11:78:a0:5c:e9:42:c9:0e:e7:5d:ad:78:00: e9:45:da:e5:4e:c6:14:df:35:e4:f4:1b:9c:68:ff:ef:cc:6b: 34:f7:4c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5wUSwfKCDSdVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NDQxYzBmZjYtOTEwMC00MTg1LTg1NjAtODU1YzcwY2NiY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+MazdsGHylv6eKcUPrq7on80EKWWxCoGfRt ZYhiNtwUcKhY/mX42yT5nkKNQTgSb9M6tWEOnxGW4ICCTG3AQ0nQv6cla3eHVSEp hq0ZZ3ZtodNbparagFWQh0dBBfrjdqe1hff5I1/UrdyHaP+P3N4m3MFC4C0R6OR8 DRNIYG5VGpVdpYgYLYRNuPoNn2YFcGeK+ZRlBAGSHVrgJIhCmwx8fM4NDNrjMVXz D+YmIaXgD0Vmo14mUQ4K/G56PoAMukaCRD91sr16+Dj6rbxKI6+oVKQHPrDairK+ MMt1m0sUP/w/aw4WQWeYe420zNSg4IEfwrktVqI8KuwVty2/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzo+pAgEMD2Y3vdSWXabUepETOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTg4MWRlMTEtYWNkZC0z Y2E3LWFmNWMtYzk4MjAyMzA0ZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGenxyLNOEuTLmCOIMboOBfnT8uL+sPDwwOkAMnJRbNsgGYyEV11s+V/ tOGTkyzL9chcnNhr1lXngTJ/1gaGLmevMo7/66bbWq4jm3zxUdn2gPyhrW6JVHFB uQW0LOpWB9viF3PQMq86fx+Nu9rXwwSWhePVDLzkZ6kz3bkPFS5x+vQ7Fwm5je5/ MpcJpsj1b3znS3u+DGd0l9LX2+7DuqDNStH7Wg0LrUI2VYsA6s/JY3GT6hCQtaft EGCowgkT8On5pVilk4C0OvGPRFJ4341BC1tjgYnCKUjlwrnbEXigXOlCyQ7nXa14 AOlF2uVOxhTfNeT0G5xo/+/MazT3TG0= -----END CERTIFICATE-----Generated at Fri Apr 17 13:22:42 2026 by rpki-client