$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa File: dcd6626c-1861-32f9-8607-92a02a22b123.roa (raw, json) Hash identifier: SgnengTI0IOiPklBxAneIg6S64sv3Na2pTsVTkR2hPU= Subject key identifier: 13:C4:27:C2:E7:61:10:B2:37:01:DD:06:DA:20:4C:78:0B:43:89:33 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584D59EA59692AD8A9B5A4960DE0 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 399107 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:59:69:2a:d8:a9:b5:a4:96:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=52b699eb-7271-4b7a-81a9-67202eec270e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:06:48:03:5f:fa:c3:66:0f:af:5d:e1:71: 92:44:f5:2f:f9:bb:1d:50:18:44:f7:dd:ec:7f:24: ae:6e:10:00:4d:6b:d6:b0:21:c5:21:fa:57:b5:2e: 3d:46:5d:11:6c:9a:a5:20:35:ae:f7:2c:4d:7d:22: 12:01:be:1b:a6:1a:99:95:f1:b5:41:2e:6e:d7:53: 79:71:0a:72:08:22:aa:9f:4d:cc:43:26:81:e4:0e: d1:60:a4:fd:97:00:9c:06:35:fa:24:f7:ed:71:2c: 97:9e:da:a9:f3:85:ec:6a:36:8d:c8:bb:b2:c5:b1: eb:3e:cf:47:61:ee:f4:18:a0:04:68:b6:9a:98:08: 55:ab:fe:4b:cb:30:c8:8c:30:9c:d5:8b:2f:4c:d8: f1:b6:c4:42:3c:37:c4:a8:d0:fd:87:26:b5:06:6b: 95:42:fb:20:44:dd:b8:a8:17:4e:09:b4:b6:30:50: 03:07:73:83:fa:7c:c0:a3:7e:c1:45:72:e0:b8:82: ed:8b:77:ac:c8:85:09:23:88:97:c8:8d:d9:a4:fd: 54:6c:fc:83:6d:a4:55:a7:f7:f8:f3:ee:64:68:1c: 93:a9:55:0e:b0:1d:e4:f4:3f:10:a2:15:5b:70:c1: 15:59:4b:3b:e8:b7:9a:96:13:43:6c:e1:4e:5f:c3: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C4:27:C2:E7:61:10:B2:37:01:DD:06:DA:20:4C:78:0B:43:89:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d5:85:2b:db:ad:f6:9b:89:f9:46:ad:99:3a:77:3e:d4:e0: 3b:d0:60:ca:a1:f9:4d:d1:ea:dc:7f:1e:0f:d9:83:6b:60:41: f3:91:f3:8c:79:f6:c6:84:d7:a9:a8:24:57:2b:fe:81:99:68: 01:db:e2:2c:f2:82:aa:92:a9:bd:ce:46:ed:5e:d3:61:d8:9e: 9f:95:90:ef:e5:d9:aa:cd:ed:8b:68:96:97:cc:51:cf:27:41: 63:af:01:11:5a:64:4b:13:85:cd:25:c1:7c:c5:12:f2:67:f3: a2:05:02:74:fe:e3:d1:7e:1f:83:c2:5d:25:7c:f6:9c:ff:d9: b6:08:50:1e:00:54:e0:fc:c3:f8:88:60:3e:ec:3b:39:46:31: ea:f1:91:47:30:78:4f:a4:59:bb:ed:f6:a8:c8:91:82:ea:98: 7e:43:55:7f:45:12:fb:0a:9c:22:b3:b0:c2:5b:df:dc:f8:32: ac:9b:77:33:38:9b:44:78:2f:49:1d:26:90:dd:ba:8b:b3:72: 68:b0:85:48:66:cc:17:ed:50:37:eb:e5:c3:88:8f:74:0b:72: df:c0:d1:e9:33:82:03:d9:77:9e:ee:31:0e:d3:ce:8f:0f:7a: 04:13:1f:0b:8f:a3:a3:f8:be:ce:a2:2a:65:e4:e5:6a:13:4e: d2:a2:64:66 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1Z6llpKtiptaSWDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTJiNjk5ZWItNzI3MS00YjdhLTgxYTktNjcyMDJlZWMyNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sEGSANf+sNmD69d4XGSRPUv+bsdUBhE993s fySubhAATWvWsCHFIfpXtS49Rl0RbJqlIDWu9yxNfSISAb4bphqZlfG1QS5u11N5 cQpyCCKqn03MQyaB5A7RYKT9lwCcBjX6JPftcSyXntqp84XsajaNyLuyxbHrPs9H Ye70GKAEaLaamAhVq/5LyzDIjDCc1YsvTNjxtsRCPDfEqND9hya1BmuVQvsgRN24 qBdOCbS2MFADB3OD+nzAo37BRXLguILti3esyIUJI4iXyI3ZpP1UbPyDbaRVp/f4 8+5kaByTqVUOsB3k9D8QohVbcMEVWUs76LealhNDbOFOX8O3RQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBPEJ8LnYRCyNwHdBtogTHgLQ4kzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvZGNkNjYyNmMtMTg2MS0z MmY5LTg2MDctOTJhMDJhMjJiMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH3VhSvbrfabiflGrZk6dz7U4DvQYMqh+U3R6tx/Hg/Zg2tg QfOR84x59saE16moJFcr/oGZaAHb4izygqqSqb3ORu1e02HYnp+VkO/l2arN7Yto lpfMUc8nQWOvARFaZEsThc0lwXzFEvJn86IFAnT+49F+H4PCXSV89pz/2bYIUB4A VOD8w/iIYD7sOzlGMerxkUcweE+kWbvt9qjIkYLqmH5DVX9FEvsKnCKzsMJb39z4 MqybdzM4m0R4L0kdJpDduouzcmiwhUhmzBftUDfr5cOIj3QLct/A0ekzggPZd57u MQ7Tzo8PegQTHwuPo6P4vs6iKmXk5WoTTtKiZGY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:54:12 2026 by rpki-client