$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa File: 0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa (raw, json) Hash identifier: OH9LHI3qJQ9iURpZA3N5Fh5s5l7oR1OjVBFZPnzCVnI= Subject key identifier: CC:7D:1A:8A:D8:5A:CF:45:DB:CD:95:BD:1E:67:9E:7F:E0:94:96:5D Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F4328584DF640AC31F7224AA03061FF00 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 25222 IP address blocks: 192.40.224.0/22 maxlen: 24 216.86.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:ac:31:f7:22:4a:a0:30:61:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=d825ee20-6d6a-49ee-9638-a7e48a94531c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:74:e0:88:cb:a3:d7:7e:b7:dd:0a:03:4a: 7e:b8:7e:d4:77:38:3d:d7:5a:4c:3e:c7:bb:7f:f2: 71:e8:26:95:d1:7b:ce:79:d1:4f:95:d0:7b:04:de: 94:7b:4b:fe:cc:a5:6a:40:0f:e3:f1:b6:db:91:fb: cb:51:de:04:5d:15:9d:43:0c:c1:f7:77:59:03:3f: 3b:31:4a:ac:36:ba:41:cc:37:86:f8:d3:fd:46:36: 36:6c:f7:05:25:50:9f:92:09:81:d4:72:a0:86:6d: 84:32:dd:3a:94:57:ce:5d:57:2e:52:29:84:17:3d: 82:42:38:b8:6b:22:ea:eb:c0:9b:2e:84:5a:8a:11: 60:6c:9c:7b:e1:98:ee:9e:ec:b5:c5:f5:f9:fd:7c: 63:41:3d:ff:48:20:8c:7e:1c:64:61:34:e5:18:60: ce:2b:a9:89:9a:93:10:0a:bc:a6:79:89:4b:4a:d2: 4c:02:8c:75:0f:ba:15:b1:35:b8:2b:4c:c4:7c:87: de:74:27:b9:28:b5:ee:1b:f1:4d:9b:5e:26:9a:61: 8b:35:b5:c8:21:f1:7f:f9:e7:83:58:f9:6f:0c:ac: 48:b6:3f:89:1a:0d:b3:fc:c6:fd:8a:da:5c:e3:46: 48:b1:fe:e1:fc:47:a3:64:ed:0f:66:e4:ff:92:7e: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7D:1A:8A:D8:5A:CF:45:DB:CD:95:BD:1E:67:9E:7F:E0:94:96:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv4: 192.40.224.0/22 216.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:45:c9:87:e9:76:9a:36:a8:e5:64:02:f1:ef:77:f7:04:27: 16:7f:10:c4:09:1b:0a:80:80:a5:48:3f:8c:15:56:e2:0c:7c: 89:ff:10:2e:70:0f:7e:8d:89:7c:98:30:f8:e5:08:a9:e6:3f: 66:9b:c7:3d:ac:91:dc:8d:dc:c7:21:69:42:6e:af:67:6d:bd: a8:2f:cf:d6:ce:be:1b:52:0f:6b:3c:bb:32:e5:dc:72:e1:38: 0e:08:5a:ee:a6:f1:75:70:aa:ff:60:f1:fd:d4:81:17:ac:5b: 53:27:f6:f6:b0:de:1c:43:46:74:80:f3:f9:9b:f3:0d:09:e4: 4b:cc:83:29:14:db:0b:bb:95:76:64:ab:3a:10:0c:7d:34:2c: 1f:7d:59:ed:ca:46:97:65:80:81:82:97:4f:e0:cc:e0:6b:a3: 8d:43:21:16:0d:90:ef:33:63:b8:2b:c7:70:7e:f9:a1:5a:27: 7d:73:75:7b:67:cd:fa:94:e2:18:3e:20:cb:74:c1:34:f3:a3: b0:20:47:07:e7:2a:3f:f0:6c:5d:c0:ff:d8:02:78:4b:e2:f7: 70:ed:05:5b:bc:72:b5:13:b8:f9:4a:5d:03:a1:d4:92:b0:51: d5:4c:d5:08:f4:36:45:7d:6e:a9:31:c1:55:d0:b2:61:63:30: 19:b9:06:87 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE32QKwx9yJKoDBh/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk ZDgyNWVlMjAtNmQ2YS00OWVlLTk2MzgtYTdlNDhhOTQ1MzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrp04IjLo9d+t90KA0p+uH7Udzg911pMPse7 f/Jx6CaV0XvOedFPldB7BN6Ue0v+zKVqQA/j8bbbkfvLUd4EXRWdQwzB93dZAz87 MUqsNrpBzDeG+NP9RjY2bPcFJVCfkgmB1HKghm2EMt06lFfOXVcuUimEFz2CQji4 ayLq68CbLoRaihFgbJx74Zjunuy1xfX5/XxjQT3/SCCMfhxkYTTlGGDOK6mJmpMQ CrymeYlLStJMAox1D7oVsTW4K0zEfIfedCe5KLXuG/FNm14mmmGLNbXIIfF/+eeD WPlvDKxItj+JGg2z/Mb9itpc40ZIsf7h/EejZO0PZuT/kn4f5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMx9GorYWs9F282VvR5nnn/glJZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvMGExYzM5MDctZjdkNy0z NjkxLTgwNDQtNmYxM2U2ZDFjZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwCjgAwQE 2FbwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABRFyYfpdpo2qOVkAvHvd/cEJxZ/EMQJGwqAgKVIP4wVVuIM fIn/EC5wD36NiXyYMPjlCKnmP2abxz2skdyN3MchaUJur2dtvagvz9bOvhtSD2s8 uzLl3HLhOA4IWu6m8XVwqv9g8f3UgResW1Mn9vaw3hxDRnSA8/mb8w0J5EvMgykU 2wu7lXZkqzoQDH00LB99We3KRpdlgIGCl0/gzOBro41DIRYNkO8zY7grx3B++aFa J31zdXtnzfqU4hg+IMt0wTTzo7AgRwfnKj/wbF3A/9gCeEvi93DtBVu8crUTuPlK XQOh1JKwUdVM1Qj0NkV9bqkxwVXQsmFjMBm5Boc= -----END CERTIFICATE-----Generated at Sat Jun 13 20:26:35 2026 by rpki-client