$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b20e8c29-9100-365d-b5f6-909ccd1a77e4.roa File: b20e8c29-9100-365d-b5f6-909ccd1a77e4.roa (raw, json) Hash identifier: fSCvW2CBsCyA/6fnnRiIM4neAp7yj4VyK58LMa4pK5E= Subject key identifier: A4:8E:0D:03:42:01:13:16:05:8E:CE:F7:15:0A:13:8D:0F:03:D5:5F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAF32580214D5B9CE2F98 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b20e8c29-9100-365d-b5f6-909ccd1a77e4.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 136.226.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:af:32:58:02:14:d5:b9:ce:2f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=c9ff464d-925a-45d0-a35e-88cc680057bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:69:2b:18:b8:22:e5:1b:5b:a7:4a:2c:fb: d7:0f:a5:49:41:a3:2c:b5:ac:5e:84:e0:2a:7c:d1: 90:d6:10:00:ef:f9:d2:51:b1:c1:35:75:6c:66:45: 02:8a:eb:87:f9:77:03:63:96:11:3e:e6:7d:ab:38: 84:8d:0a:3b:d9:29:66:e7:91:de:fc:a2:3f:02:6b: 9a:9a:c6:c2:4f:90:b4:3d:5b:c7:5c:14:04:49:7c: eb:67:d9:00:15:fb:35:5f:99:04:28:9e:c1:a1:67: 9a:88:a3:bd:55:f0:21:94:d1:71:51:12:2d:3c:a3: 57:4c:44:7a:e0:06:83:53:bb:9c:d1:31:4e:80:f9: ff:13:7b:a7:28:d5:b5:97:22:d7:69:1a:72:0d:ac: 92:8a:9c:fa:b5:38:47:57:4d:75:e8:b4:9e:ac:77: 01:4d:e7:8f:a4:52:5d:7a:d8:b0:9b:8c:c9:26:a4: a6:48:c1:71:41:86:b2:38:8c:f5:d8:a1:0c:c5:89: e2:44:86:dc:01:9f:69:20:39:05:1d:23:96:6e:10: 78:2e:22:a5:99:15:33:f3:a6:6c:2f:1a:bc:bd:e9: 88:52:2d:20:85:c9:f6:7d:e7:5d:28:26:ee:52:2b: 8a:a7:72:c5:73:c6:ac:ea:f5:b3:dd:ea:70:de:30: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:0D:03:42:01:13:16:05:8E:CE:F7:15:0A:13:8D:0F:03:D5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b20e8c29-9100-365d-b5f6-909ccd1a77e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:57:b1:24:e6:9b:51:d4:ad:16:e7:bd:c4:c1:f0:b5:8d:85: b1:d9:5a:8a:90:d6:20:0e:54:7c:f7:0a:76:6e:2d:99:b0:f8: 7a:97:cd:e1:39:a0:62:ab:02:49:67:1e:d7:f6:7e:3c:fb:7c: 46:60:6a:99:20:45:80:ad:ef:80:a8:2c:b2:2f:61:c0:f4:26: ff:42:19:25:03:b6:e7:8f:bc:a8:48:f7:fa:3a:29:bf:ed:d3: b0:8d:40:4b:33:84:b0:ad:ac:08:93:ff:fc:e9:75:94:fc:05: 3f:7d:64:36:80:5f:0e:53:44:fd:0c:17:61:e3:4e:ae:4b:86: f7:fa:9f:91:fa:b2:da:4a:7f:34:56:42:0a:9f:72:af:06:b4: 23:3d:36:16:eb:e1:41:22:30:76:00:b7:6b:67:43:1b:ce:ea: 2f:e7:65:37:c8:ef:9e:b9:f9:0c:50:f7:ac:48:84:b3:a6:fe: cc:c4:7d:7d:9a:9a:e6:86:7b:77:ef:a1:12:ef:53:3e:d1:b4: d2:2a:fb:8a:b5:4b:ca:64:d7:70:8e:5c:4f:98:ff:0e:35:36: 05:b9:17:97:09:7d:3f:ce:1c:be:7e:8e:12:5b:31:8f:80:d6: f5:74:a8:8c:14:57:5c:69:14:4e:01:16:ac:4e:c0:8f:33:bd: 26:84:f2:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT68yWAIU1bnOL5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YzlmZjQ2NGQtOTI1YS00NWQwLWEzNWUtODhjYzY4MDA1N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeNpKxi4IuUbW6dKLPvXD6VJQaMstaxehOAq fNGQ1hAA7/nSUbHBNXVsZkUCiuuH+XcDY5YRPuZ9qziEjQo72Slm55He/KI/Amua msbCT5C0PVvHXBQESXzrZ9kAFfs1X5kEKJ7BoWeaiKO9VfAhlNFxURItPKNXTER6 4AaDU7uc0TFOgPn/E3unKNW1lyLXaRpyDaySipz6tThHV0116LSerHcBTeePpFJd etiwm4zJJqSmSMFxQYayOIz12KEMxYniRIbcAZ9pIDkFHSOWbhB4LiKlmRUz86Zs Lxq8vemIUi0ghcn2feddKCbuUiuKp3LFc8as6vWz3epw3jA9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSODQNCARMWBY7O9xUKE40PA9VfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjIwZThjMjktOTEwMC0z NjVkLWI1ZjYtOTA5Y2NkMWE3N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9XsSTmm1HUrRbnvcTB8LWNhbHZWoqQ1iAOVHz3CnZuLZmw+HqXzeE5 oGKrAklnHtf2fjz7fEZgapkgRYCt74CoLLIvYcD0Jv9CGSUDtuePvKhI9/o6Kb/t 07CNQEszhLCtrAiT//zpdZT8BT99ZDaAXw5TRP0MF2HjTq5Lhvf6n5H6stpKfzRW Qgqfcq8GtCM9Nhbr4UEiMHYAt2tnQxvO6i/nZTfI7565+QxQ96xIhLOm/szEfX2a muaGe3fvoRLvUz7RtNIq+4q1S8pk13COXE+Y/w41NgW5F5cJfT/OHL5+jhJbMY+A 1vV0qIwUV1xpFE4BFqxOwI8zvSaE8vo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:17 2026 by rpki-client