$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa File: c21afaab-be50-3b57-ba91-da332dfb82c7.roa (raw, json) Hash identifier: 3ndRIzbWYA6uCCwsyt1G28Gn59DbAD1rFoJPr5l89OY= Subject key identifier: 63:2C:CE:BC:E2:63:1A:69:06:4D:C3:47:37:9F:06:5C:29:AE:20:5C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D7E353A259C28716E1A6BEB80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 20001 IP address blocks: 139.60.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:3a:25:9c:28:71:6e:1a:6b:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=d440e4b8-0cc3-43ef-afce-364111521a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:cf:9f:9c:c2:89:15:35:37:7e:03:06:2b: 4a:46:54:c6:de:0d:42:09:a0:8b:f5:02:b6:11:62: f9:bb:02:77:6e:99:6d:e3:3f:e7:4a:cc:e1:2e:18: 17:95:75:4e:fc:ec:5e:41:68:33:fc:27:ef:66:29: db:54:93:a3:99:5c:7b:17:16:6f:bb:2a:a2:03:ba: 46:78:5a:08:ae:cf:de:f7:40:fc:cd:ca:8d:2c:ba: fd:22:f6:4f:c3:2d:1d:f3:51:bb:05:06:56:05:ef: 63:6c:ad:57:3e:38:e2:a8:f0:41:98:68:5b:60:21: 4e:6d:7b:ce:25:0e:e8:74:35:58:3b:4c:4d:4c:cb: 08:33:1a:e8:54:be:09:c4:bb:0a:6e:46:62:c9:4f: 5a:a3:6d:74:48:44:81:19:a3:9c:26:6d:ea:9d:7f: 8c:0a:c0:22:62:c0:e7:e9:6b:c7:4e:6a:87:59:60: f5:c2:27:74:41:9e:7f:04:1c:8c:b8:55:a4:37:42: 64:61:57:76:e0:46:4d:65:cf:c8:f6:e4:41:af:3f: e1:29:d7:47:a9:76:ce:77:b5:a0:10:61:1b:a0:eb: e8:c8:0a:64:c3:bc:61:94:21:34:09:45:8d:e4:ad: 9e:1c:ea:0f:ce:11:7e:d4:08:bb:47:b8:89:3f:13: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2C:CE:BC:E2:63:1A:69:06:4D:C3:47:37:9F:06:5C:29:AE:20:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 139.60.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5b:cc:58:60:e2:e6:11:0e:e4:a3:b1:75:f1:dc:e2:a0:eb: c4:9a:b7:15:b9:91:88:1c:4e:c9:35:62:02:7a:31:a2:96:e2: ec:77:8c:e7:c1:68:0d:79:de:22:84:ec:a0:a3:b3:6b:e3:85: 91:8a:e7:14:67:bf:0e:a2:ce:d5:b1:38:56:7a:c1:db:4c:46: 28:02:4b:da:f1:7e:55:d9:23:e8:ff:21:b9:43:ce:51:05:67: 31:f3:75:d6:8c:88:38:da:e1:ae:f1:ec:74:2b:20:fa:7d:0a: b7:7d:07:38:86:83:46:e4:44:01:81:bb:10:d8:70:de:f2:74: ce:45:df:86:ef:c8:31:8f:5c:fb:81:9a:49:0a:1d:1a:01:65: 3a:cd:10:24:fe:00:c9:6f:82:d6:2c:8d:01:20:98:bf:78:76: 31:e4:2f:20:92:b5:3a:c4:74:f5:ec:23:c7:83:96:fa:16:6b: 24:a8:37:09:ce:51:b1:e7:21:75:a2:7a:e6:c8:2e:75:5e:26: ca:2c:cd:34:c3:7f:97:77:23:a5:7a:5e:80:56:a1:1e:01:5e: 44:9b:97:76:e0:f1:1c:01:e1:b5:4f:bb:27:20:59:b1:d2:8e: 81:d6:9b:de:73:71:a2:f2:c2:41:68:ac:6f:44:02:e5:0d:ff: f9:08:64:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NTolnChxbhpr64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDQ0MGU0YjgtMGNjMy00M2VmLWFmY2UtMzY0MTExNTIxYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6LPn5zCiRU1N34DBitKRlTG3g1CCaCL9QK2 EWL5uwJ3bplt4z/nSszhLhgXlXVO/OxeQWgz/CfvZinbVJOjmVx7FxZvuyqiA7pG eFoIrs/e90D8zcqNLLr9IvZPwy0d81G7BQZWBe9jbK1XPjjiqPBBmGhbYCFObXvO JQ7odDVYO0xNTMsIMxroVL4JxLsKbkZiyU9ao210SESBGaOcJm3qnX+MCsAiYsDn 6WvHTmqHWWD1wid0QZ5/BByMuFWkN0JkYVd24EZNZc/I9uRBrz/hKddHqXbOd7Wg EGEboOvoyApkw7xhlCE0CUWN5K2eHOoPzhF+1Ai7R7iJPxPAfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMszrziYxppBk3DRzefBlwpriBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzIxYWZhYWItYmU1MC0z YjU3LWJhOTEtZGEzMzJkZmI4MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizxlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlbzFhg4uYRDuSjsXXx3OKg68SatxW5kYgcTsk1YgJ6MaKW4ux3jOfB aA153iKE7KCjs2vjhZGK5xRnvw6iztWxOFZ6wdtMRigCS9rxflXZI+j/IblDzlEF ZzHzddaMiDja4a7x7HQrIPp9Crd9BziGg0bkRAGBuxDYcN7ydM5F34bvyDGPXPuB mkkKHRoBZTrNECT+AMlvgtYsjQEgmL94djHkLyCStTrEdPXsI8eDlvoWaySoNwnO UbHnIXWieubILnVeJsoszTTDf5d3I6V6XoBWoR4BXkSbl3bg8RwB4bVPuycgWbHS joHWm95zcaLywkForG9EAuUN//kIZOE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:24:23 2026 by rpki-client