$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa File: 2a6bf328-cf96-3ace-bda5-7008e51790d7.roa (raw, json) Hash identifier: KK+rX6Z5oV8QhrSbaKCSIYhwIijE1u+t23FxJBymKrU= Subject key identifier: 90:EE:68:0D:91:02:C5:6D:91:77:4C:09:26:D4:10:32:22:CE:80:DA Certificate issuer: /CN=fd41a5ea-0768-429c-8541-83d829a5518c Certificate serial: 010D0C9F4328584D7B6A91BA6E9F659642CF0680 Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 1239 IP address blocks: 139.64.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:91:ba:6e:9f:65:96:42:cf:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=7f3b3964-eb2b-41c6-849e-b6c06ffe0ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:69:3d:51:13:c4:dc:96:fc:e5:9e:06:a9: 17:b9:a7:9d:59:6f:72:f3:e1:42:61:9b:2e:62:33: bb:70:a0:e9:e4:8d:24:7f:47:fe:91:31:95:13:e8: 1c:c3:1a:f4:35:0f:1a:1d:eb:67:53:51:76:ad:86: 1b:14:90:da:8f:b0:1d:ae:5d:3a:56:64:85:d8:35: 5e:27:dd:ca:7b:18:cb:c3:0e:a2:51:b2:20:37:a8: 94:16:03:b7:1e:3f:e5:84:c4:c7:25:1c:ad:e4:e1: 03:e7:d9:d4:1c:fa:4f:b9:bb:13:2a:6a:0c:27:8b: 16:83:8e:a4:78:25:24:57:1a:b2:c8:23:ca:f7:9d: 02:05:d8:10:23:83:99:ba:a5:01:c3:68:91:26:8d: 3c:cf:c1:f3:1d:f3:15:f7:f2:b3:55:f9:94:54:1f: 96:81:11:f0:55:e2:97:f5:3b:a9:73:36:0e:8b:32: 46:42:52:b3:bc:2a:3b:88:7c:b7:c2:85:62:9c:32: 7b:a6:9c:6a:94:cb:72:a8:91:f5:9f:fc:3d:9d:a8: 5f:71:52:20:25:2e:74:a8:8f:37:9b:fc:c7:31:8a: 30:54:75:3c:d9:a0:1a:59:25:52:4e:92:3b:2c:30: 89:42:c3:a6:1c:60:71:31:b6:4b:3e:82:7c:7f:d0: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EE:68:0D:91:02:C5:6D:91:77:4C:09:26:D4:10:32:22:CE:80:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl X509v3 Authority Key Identifier: keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer sbgp-ipAddrBlock: critical IPv4: 139.64.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:dc:1c:89:30:82:62:27:aa:dc:64:c4:60:29:de:22:89:b8: f4:74:39:a6:fb:f4:95:14:6c:82:cd:21:42:40:20:38:48:e4: 69:57:b8:67:53:56:b3:4b:5b:04:9e:55:3e:44:0f:0e:b2:8c: e3:bb:81:a1:e6:99:35:3c:b8:9b:d9:5a:a7:1f:42:40:a5:18: b3:19:b7:b1:4d:aa:3d:65:26:0d:5b:de:b9:68:0c:3f:33:f3: 78:d1:3e:09:a6:64:0f:72:4e:0b:eb:c8:78:07:17:c5:c0:f5: a0:5b:a0:7c:25:93:f1:0c:bd:57:04:df:b1:9d:dc:44:2a:34: 44:f3:d4:d4:0e:20:9a:86:ad:54:c4:7f:7e:d2:a0:c8:ba:98: e1:69:f3:0e:f7:ce:03:ce:61:73:1f:c0:47:57:ef:b3:56:69: 0d:9b:ae:38:e7:63:e2:e7:9d:de:ba:9a:99:0c:d7:d1:30:50: 77:4a:a6:02:b0:16:ee:e6:52:1c:a4:61:00:ba:9b:e2:05:fc: 26:92:34:68:fd:c9:70:59:64:40:f3:d2:02:cb:c3:6c:e1:8b: 9a:85:bc:54:2b:83:b2:38:a4:f2:48:0c:90:89:04:62:f1:7b: 05:a4:91:72:fb:df:d8:c9:15:5f:83:03:d5:a9:86:9f:ef:9d: bf:03:44:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apG6bp9llkLPBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ0MWE1ZWEtMDc2OC00MjljLTg1NDEtODNkODI5YTU1 MThjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk N2YzYjM5NjQtZWIyYi00MWM2LTg0OWUtYjZjMDZmZmUwY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHZpPVETxNyW/OWeBqkXuaedWW9y8+FCYZsu YjO7cKDp5I0kf0f+kTGVE+gcwxr0NQ8aHetnU1F2rYYbFJDaj7Adrl06VmSF2DVe J93KexjLww6iUbIgN6iUFgO3Hj/lhMTHJRyt5OED59nUHPpPubsTKmoMJ4sWg46k eCUkVxqyyCPK950CBdgQI4OZuqUBw2iRJo08z8HzHfMV9/KzVfmUVB+WgRHwVeKX 9TupczYOizJGQlKzvCo7iHy3woVinDJ7ppxqlMtyqJH1n/w9nahfcVIgJS50qI83 m/zHMYowVHU82aAaWSVSTpI7LDCJQsOmHGBxMbZLPoJ8f9BsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDuaA2RAsVtkXdMCSbUEDIizoDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQx YTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4MjlhNTUxOGMvMmE2YmYzMjgtY2Y5Ni0z YWNlLWJkYTUtNzAwOGU1MTc5MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQ0MWE1ZWEtMDc2OC00MjljLTg1 NDEtODNkODI5YTU1MThjL2ZkNDFhNWVhLTA3NjgtNDI5Yy04NTQxLTgzZDgyOWE1 NTE4Yy5jcmwwHwYDVR0jBBgwFoAU820DKve7/3fBl4oa0MkJUZI8pyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQxYTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4 MjlhNTUxOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXcHIkwgmInqtxkxGAp3iKJuPR0Oab79JUUbILNIUJAIDhI5GlXuGdT VrNLWwSeVT5EDw6yjOO7gaHmmTU8uJvZWqcfQkClGLMZt7FNqj1lJg1b3rloDD8z 83jRPgmmZA9yTgvryHgHF8XA9aBboHwlk/EMvVcE37Gd3EQqNETz1NQOIJqGrVTE f37SoMi6mOFp8w73zgPOYXMfwEdX77NWaQ2brjjnY+Lnnd66mpkM19EwUHdKpgKw Fu7mUhykYQC6m+IF/CaSNGj9yXBZZEDz0gLLw2zhi5qFvFQrg7I4pPJIDJCJBGLx ewWkkXL739jJFV+DA9Wphp/vnb8DRBA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:09 2026 by rpki-client