$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa File: d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa (raw, json) Hash identifier: xJ/Maj0q6/RdYSWn4Tw4SduNlCIA8IAFO6fA6VX37F4= Subject key identifier: 9D:C0:59:00:EC:27:B2:FA:3A:A6:BA:4D:7C:22:BE:DF:70:47:01:D7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D624A5EDEE14BC9D7B38FD480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 22616 IP address blocks: 205.220.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5e:de:e1:4b:c9:d7:b3:8f:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=60057b31-a9ce-4f3c-878b-98087730c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:e5:58:57:fc:51:b7:2a:26:37:26:8a:2d: 75:29:05:cc:36:b7:db:55:2b:4b:55:1c:83:cf:eb: 85:05:fa:e3:ea:31:62:9d:1a:4d:06:ce:fa:19:09: eb:e4:8b:44:ba:2c:0d:df:ad:9e:dd:e5:a7:5c:3c: 3a:f1:79:fb:7c:a7:2d:68:30:d6:65:a0:7d:f8:36: 62:06:ab:06:d3:61:68:83:55:14:00:b5:37:61:d9: bc:a5:18:45:cf:46:62:7c:dd:f8:71:32:d7:10:0a: 55:c4:c4:e2:89:a3:72:cf:11:bc:70:7a:29:3c:9a: 7a:46:13:c4:7a:99:be:8e:24:b8:5c:5f:fc:49:8f: 2b:7c:2b:66:34:27:17:91:10:28:55:ad:43:14:43: fb:ef:c9:f9:38:31:63:55:20:30:7e:aa:c1:4d:d2: e8:a0:15:64:74:ff:6f:04:e5:01:87:07:99:59:d1: 4f:9d:0f:22:80:e4:c5:47:8e:05:2e:35:fa:15:8d: 01:a2:ef:2a:62:40:64:66:d2:83:56:6b:be:f0:a9: 9c:f8:f2:ea:6c:17:b4:83:94:a1:71:13:b0:df:82: 83:d1:59:59:bd:be:0d:6a:a2:b6:8c:ea:62:86:ca: b1:a5:0a:a8:f8:38:62:d1:d7:dc:d9:c5:bb:df:8e: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:59:00:EC:27:B2:FA:3A:A6:BA:4D:7C:22:BE:DF:70:47:01:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1c:c2:1b:cf:5d:12:90:a0:6e:eb:db:d6:a3:3d:ff:f0:67: 9e:3a:e8:3d:eb:d9:20:6a:5b:03:35:4f:50:18:c7:13:52:0f: f1:6d:8d:5e:c1:6c:06:b0:31:67:91:d8:c6:a7:c9:0a:19:5b: ff:7c:2d:17:2d:74:66:4d:15:f9:a5:c7:30:99:a7:ce:84:b4: 46:c2:86:39:7f:db:ad:95:73:dc:b2:d7:96:ed:c6:43:f2:20: 6c:77:52:de:ac:aa:14:5c:43:9b:04:2e:40:e6:89:5a:e7:a8: 99:62:35:0c:28:da:82:56:b9:bc:75:03:2d:70:a1:7c:7b:ab: 27:89:35:77:c3:f4:66:77:de:9b:8a:29:61:fd:35:6f:d4:08: ec:79:18:b2:fe:29:a9:98:7f:63:bd:88:6a:3f:5a:ac:65:71: bb:a1:2f:ee:93:69:c4:da:cc:06:45:ed:c0:82:57:d6:37:dc: a6:3c:eb:5f:b4:2a:64:bf:9a:ce:33:1c:22:08:7f:91:b6:76: c9:af:69:47:56:49:0d:5d:50:35:9f:8f:91:97:07:77:02:df: ea:78:3e:7c:a3:a3:2c:ed:96:42:0c:f5:2c:3e:1e:94:1c:62: 71:66:9e:03:3d:c6:21:e8:1a:f4:2f:67:83:f7:77:01:03:39: e8:d3:14:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSl7e4UvJ17OP1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk NjAwNTdiMzEtYTljZS00ZjNjLTg3OGItOTgwODc3MzBjNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbLlWFf8UbcqJjcmii11KQXMNrfbVStLVRyD z+uFBfrj6jFinRpNBs76GQnr5ItEuiwN362e3eWnXDw68Xn7fKctaDDWZaB9+DZi BqsG02Fog1UUALU3Ydm8pRhFz0ZifN34cTLXEApVxMTiiaNyzxG8cHopPJp6RhPE epm+jiS4XF/8SY8rfCtmNCcXkRAoVa1DFEP778n5ODFjVSAwfqrBTdLooBVkdP9v BOUBhweZWdFPnQ8igOTFR44FLjX6FY0Bou8qYkBkZtKDVmu+8Kmc+PLqbBe0g5Sh cROw34KD0VlZvb4NaqK2jOpihsqxpQqo+Dhi0dfc2cW73456DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3AWQDsJ7L6Oqa6TXwivt9wRwHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDNiZGFiMTAtNmE5ZS0z ZjdkLTg5ODUtNmZhZDBhYjEwODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0cwhvPXRKQoG7r29ajPf/wZ5466D3r2SBqWwM1T1AYxxNSD/FtjV7B bAawMWeR2ManyQoZW/98LRctdGZNFfmlxzCZp86EtEbChjl/262Vc9yy15btxkPy IGx3Ut6sqhRcQ5sELkDmiVrnqJliNQwo2oJWubx1Ay1woXx7qyeJNXfD9GZ33puK KWH9NW/UCOx5GLL+KamYf2O9iGo/WqxlcbuhL+6TacTazAZF7cCCV9Y33KY861+0 KmS/ms4zHCIIf5G2dsmvaUdWSQ1dUDWfj5GXB3cC3+p4PnyjoyztlkIM9Sw+HpQc YnFmngM9xiHoGvQvZ4P3dwEDOejTFNw= -----END CERTIFICATE-----Generated at Fri Apr 17 16:41:58 2026 by rpki-client