$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa File: 2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa (raw, json) Hash identifier: drKeDxYiIVDpPuMANhsaQJKeS1RaUn9xrPsWjtumwQg= Subject key identifier: B8:59:B2:AE:81:D1:2D:F5:9B:C1:3B:5E:DB:8B:87:8B:EA:46:43:E5 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584ECD3726D4FE4386A610973A80 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 20473 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:26:d4:fe:43:86:a6:10:97:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=3dac4fee-981a-4626-9e22-9ce6c0e9bdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:4c:e9:6e:66:aa:8f:4d:31:41:56:6a:40: a7:70:8b:1c:17:62:49:e0:01:6b:b7:d4:fb:b2:b8: c1:e9:1d:15:d3:a1:f0:f0:e0:c9:89:ec:b5:59:73: e3:f0:fb:08:0e:2b:84:f6:18:ca:ad:94:bb:51:da: 71:16:07:4e:92:6e:fa:28:22:5c:34:a3:67:a8:35: c0:46:34:4c:09:99:99:6d:74:b7:2f:ee:1d:e5:1c: 42:d3:78:b1:4f:eb:77:0a:e9:0f:6e:4a:31:fa:95: b4:10:d8:32:56:29:94:55:fa:22:ba:00:c1:d7:63: 1f:8f:8a:84:3e:2f:af:df:57:a9:fb:ab:41:aa:4c: 2c:83:a2:3e:2a:95:58:fb:4e:bb:f9:9e:c4:28:b1: 28:6b:60:b0:85:7b:7a:01:ca:60:c6:6c:28:4e:bc: 30:5a:44:ba:e9:ac:7e:bb:7a:20:07:e7:eb:22:c7: ed:7e:30:88:50:ea:1b:62:b5:2f:f2:6a:6b:e6:cd: d5:65:61:92:63:15:f0:02:9c:20:4b:72:a7:3f:32: a4:31:4f:51:62:75:71:7a:6f:39:a5:c9:fa:b8:ef: e2:2e:41:9b:eb:67:93:2f:73:7c:b4:bf:8d:72:16: fa:fd:31:c1:45:78:85:57:30:36:31:15:f5:a5:84: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:59:B2:AE:81:D1:2D:F5:9B:C1:3B:5E:DB:8B:87:8B:EA:46:43:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4a:6a:03:af:c9:55:b7:f3:e0:a1:27:87:32:54:3e:87:10: 99:38:3d:c6:c9:51:61:06:2d:c3:94:72:1a:68:ae:b0:76:0d: a0:5d:76:05:ad:c2:42:54:b9:dc:fa:dd:da:57:34:93:cd:54: d1:17:9c:10:2a:cb:05:7f:10:92:1f:30:0d:13:95:b8:33:05: 2e:a2:32:29:8a:9a:79:e0:f1:3b:36:61:0c:a9:75:97:42:db: 7a:43:c3:58:25:e6:6f:f8:b5:67:fc:51:2c:52:8b:15:54:bd: 8b:93:50:eb:2e:a2:02:6c:52:6f:d4:02:ce:d7:f2:fb:0f:dc: e1:2b:e5:4b:d4:71:44:b9:dc:d9:5f:8e:6c:25:81:fe:19:29: 02:a9:4d:fb:b2:e9:87:fd:2a:43:b7:3a:41:19:5e:8d:0d:6b: d9:01:40:1c:e9:bd:49:c2:55:1c:e6:34:a2:80:61:45:73:32: 2d:6a:ff:01:46:96:80:66:ac:bd:3e:b3:3c:2b:c2:c7:15:89: 96:a8:9b:0a:b6:c2:e1:73:4b:cb:c3:69:9a:c6:47:bd:43:c6: 0b:3a:32:0c:24:47:f8:b1:9e:96:21:86:3b:a0:df:ed:71:de: 3b:5a:a9:55:a5:25:75:e9:a1:86:46:ae:c3:d1:66:6f:8f:63: 89:71:02:6b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7NNybU/kOGphCXOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk M2RhYzRmZWUtOTgxYS00NjI2LTllMjItOWNlNmMwZTliZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLNM6W5mqo9NMUFWakCncIscF2JJ4AFrt9T7 srjB6R0V06Hw8ODJiey1WXPj8PsIDiuE9hjKrZS7UdpxFgdOkm76KCJcNKNnqDXA RjRMCZmZbXS3L+4d5RxC03ixT+t3CukPbkox+pW0ENgyVimUVfoiugDB12Mfj4qE Pi+v31ep+6tBqkwsg6I+KpVY+067+Z7EKLEoa2CwhXt6AcpgxmwoTrwwWkS66ax+ u3ogB+frIsftfjCIUOobYrUv8mpr5s3VZWGSYxXwApwgS3KnPzKkMU9RYnVxem85 pcn6uO/iLkGb62eTL3N8tL+Nchb6/THBRXiFVzA2MRX1pYTmIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLhZsq6B0S31m8E7XtuLh4vqRkPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMmIyNWM0ZWEtM2MzOS0z NzRkLWE4MjMtMmQ5MzYxZDc5ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD1KagOvyVW38+ChJ4cyVD6HEJk4PcbJUWEGLcOUchporrB2 DaBddgWtwkJUudz63dpXNJPNVNEXnBAqywV/EJIfMA0TlbgzBS6iMimKmnng8Ts2 YQypdZdC23pDw1gl5m/4tWf8USxSixVUvYuTUOsuogJsUm/UAs7X8vsP3OEr5UvU cUS53Nlfjmwlgf4ZKQKpTfuy6Yf9KkO3OkEZXo0Na9kBQBzpvUnCVRzmNKKAYUVz Mi1q/wFGloBmrL0+szwrwscViZaomwq2wuFzS8vDaZrGR71Dxgs6MgwkR/ixnpYh hjug3+1x3jtaqVWlJXXpoYZGrsPRZm+PY4lxAms= -----END CERTIFICATE-----Generated at Mon Sep 21 14:19:46 2026 by rpki-client