$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa File: 2a6b35d8-8539-3c36-9a9a-42084d63216c.roa (raw, json) Hash identifier: LpXL1M6B5fvsQQHVOuLE93TztDDN93roOkuKc19jEhA= Subject key identifier: 23:B5:4E:47:3B:C6:36:18:09:6E:01:15:09:BD:F8:31:19:C2:9B:F5 Certificate issuer: /CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Certificate serial: 010D0C9F4328584DFBD622BFA8DB7D50ADA6E900 Authority key identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 0 IP address blocks: 139.187.0.0/16 maxlen: 24 156.117.0.0/16 maxlen: 24 192.138.138.0/24 maxlen: 24 192.138.139.0/24 maxlen: 24 192.138.140.0/24 maxlen: 24 192.138.141.0/24 maxlen: 24 192.138.142.0/24 maxlen: 24 192.138.143.0/24 maxlen: 24 192.138.144.0/24 maxlen: 24 192.138.145.0/24 maxlen: 24 192.138.146.0/24 maxlen: 24 192.138.147.0/24 maxlen: 24 192.226.8.0/21 maxlen: 21 192.226.8.0/22 maxlen: 22 192.226.8.0/23 maxlen: 23 192.226.8.0/24 maxlen: 24 192.226.9.0/24 maxlen: 24 192.226.10.0/23 maxlen: 23 192.226.10.0/24 maxlen: 24 192.226.11.0/24 maxlen: 24 192.226.12.0/22 maxlen: 22 192.226.12.0/23 maxlen: 23 192.226.12.0/24 maxlen: 24 192.226.13.0/24 maxlen: 24 192.226.14.0/23 maxlen: 23 192.226.14.0/24 maxlen: 24 192.226.15.0/24 maxlen: 24 192.226.16.0/20 maxlen: 20 192.226.16.0/21 maxlen: 21 192.226.16.0/22 maxlen: 22 192.226.16.0/23 maxlen: 23 192.226.16.0/24 maxlen: 24 192.226.17.0/24 maxlen: 24 192.226.18.0/23 maxlen: 23 192.226.18.0/24 maxlen: 24 192.226.19.0/24 maxlen: 24 192.226.20.0/22 maxlen: 22 192.226.20.0/23 maxlen: 23 192.226.20.0/24 maxlen: 24 192.226.21.0/24 maxlen: 24 192.226.22.0/23 maxlen: 23 192.226.22.0/24 maxlen: 24 192.226.23.0/24 maxlen: 24 192.226.24.0/22 maxlen: 22 192.226.24.0/23 maxlen: 23 192.226.24.0/24 maxlen: 24 192.226.25.0/24 maxlen: 24 192.226.26.0/23 maxlen: 23 192.226.26.0/24 maxlen: 24 192.226.27.0/24 maxlen: 24 192.226.28.0/22 maxlen: 22 192.226.28.0/23 maxlen: 23 192.226.28.0/24 maxlen: 24 192.226.29.0/24 maxlen: 24 192.226.30.0/23 maxlen: 23 192.226.30.0/24 maxlen: 24 192.226.31.0/24 maxlen: 24 199.120.176.0/23 maxlen: 23 199.120.176.0/24 maxlen: 24 199.120.177.0/24 maxlen: 24 199.120.178.0/24 maxlen: 24 199.245.247.0/24 maxlen: 24 199.249.226.0/24 maxlen: 24 204.52.153.0/24 maxlen: 24 204.52.201.0/24 maxlen: 24 2620:9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:22:bf:a8:db:7d:50:ad:a6:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=7c289303-c551-4092-bc88-ceee2e087b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:93:d6:50:3d:ee:51:cf:2b:69:ed:f5:26: ee:08:d6:28:29:b3:17:fc:9b:bd:fe:8f:18:40:59: 54:c6:e8:af:d6:00:e5:98:82:04:c1:8e:16:dd:44: 04:61:ce:8b:39:b1:0c:09:ac:88:82:30:27:00:a1: 51:78:d6:68:0f:6a:46:6a:e4:29:de:1b:71:e9:d5: e2:f6:6c:36:3b:7f:c8:61:64:66:1a:0c:2d:21:a9: 37:37:37:85:e5:90:d3:a9:6e:d8:44:81:40:38:64: f6:b5:f6:ee:8e:2c:50:66:3d:bc:28:78:6f:84:f7: 5d:53:9f:77:38:33:d2:07:a2:0b:af:e1:ef:62:01: d6:c4:ca:e8:e6:e3:b3:42:7b:2b:06:18:62:f1:02: a3:e6:07:d0:98:cc:6c:38:4e:b4:b4:1a:c3:9f:3d: 6b:43:c3:b8:a2:cb:3f:a7:f6:cb:a8:5f:bc:1e:41: 7c:fd:75:ec:94:42:30:b7:4a:d0:54:d7:ba:16:b6: 35:04:f5:d5:fc:a7:33:d6:dc:c0:02:5a:e6:8f:22: 54:00:e6:32:21:76:01:37:18:cf:df:a6:1d:4d:48: aa:a0:9e:c7:c9:b2:0f:25:57:c0:40:da:04:f7:97: 28:4f:85:f7:0f:49:4f:bb:06:9d:8e:79:cc:0c:a9: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B5:4E:47:3B:C6:36:18:09:6E:01:15:09:BD:F8:31:19:C2:9B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl X509v3 Authority Key Identifier: keyid:A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer sbgp-ipAddrBlock: critical IPv4: 139.187.0.0/16 156.117.0.0/16 192.138.138.0-192.138.147.255 192.226.8.0-192.226.31.255 199.120.176.0-199.120.178.255 199.245.247.0/24 199.249.226.0/24 204.52.153.0/24 204.52.201.0/24 IPv6: 2620:9e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:49:1b:8f:aa:ca:cd:64:c8:af:9b:3b:f8:ec:10:78:e5:8a: 27:c2:26:dc:9e:3e:6a:bd:f1:48:b3:f6:19:00:71:8c:ef:29: a7:24:f5:bb:da:50:b2:43:75:d8:64:16:2d:64:58:22:d4:e6: 3b:06:cb:75:0e:00:63:fa:17:d0:fa:c1:77:88:24:88:03:a0: de:40:06:53:e7:60:9e:f8:69:ae:b4:74:d4:35:20:0c:51:dd: 52:1f:55:f5:0e:bd:09:c6:6a:11:06:cf:ef:e2:00:ab:9f:ad: 71:c6:32:c3:70:11:3a:4d:60:89:c5:a3:91:7b:f3:42:bf:f1: de:8c:e4:25:69:2e:7e:d2:8f:ed:54:95:50:0e:0c:4f:6f:dc: ef:48:2e:dc:74:22:0e:24:ea:15:4f:9c:18:bd:6c:8a:b6:f8: ab:4a:3e:c3:d9:c2:0e:74:ac:db:be:2d:33:46:e9:c2:bf:cc: 17:19:f4:ca:a5:1e:8c:1f:9a:4e:6c:21:af:da:c8:5a:74:47: 0a:95:ab:a5:fe:ac:6d:e2:dd:f5:d8:17:68:65:ae:eb:b5:c2: df:ce:e0:4a:fa:8d:42:0c:7e:1c:cb:89:cd:dd:39:e9:e9:c4: 71:28:fb:26:a2:9a:9a:a2:52:f0:cb:ba:ee:15:af:6e:c0:66: a3:3c:8a:08 -----BEGIN CERTIFICATE----- MIIGmjCCBYKgAwIBAgIUAQ0Mn0MoWE371iK/qNt9UK2m6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJiYmNjYWYtZWI0NC00MDgwLTg4ZGUtOGY0Y2M2OTM4 Y2U2MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk N2MyODkzMDMtYzU1MS00MDkyLWJjODgtY2VlZTJlMDg3Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb2T1lA97lHPK2nt9SbuCNYoKbMX/Ju9/o8Y QFlUxuiv1gDlmIIEwY4W3UQEYc6LObEMCayIgjAnAKFReNZoD2pGauQp3htx6dXi 9mw2O3/IYWRmGgwtIak3NzeF5ZDTqW7YRIFAOGT2tfbujixQZj28KHhvhPddU593 ODPSB6ILr+HvYgHWxMro5uOzQnsrBhhi8QKj5gfQmMxsOE60tBrDnz1rQ8O4oss/ p/bLqF+8HkF8/XXslEIwt0rQVNe6FrY1BPXV/Kcz1tzAAlrmjyJUAOYyIXYBNxjP 36YdTUiqoJ7HybIPJVfAQNoE95coT4X3D0lPuwadjnnMDKm4bQIDAQABo4IDrDCC A6gwHQYDVR0OBBYEFCO1Tkc7xjYYCW4BFQm9+DEZwpv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJi Y2NhZi1lYjQ0LTQwODAtODhkZS04ZjRjYzY5MzhjZTYvMmE2YjM1ZDgtODUzOS0z YzM2LTlhOWEtNDIwODRkNjMyMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJiYmNjYWYtZWI0NC00MDgwLTg4 ZGUtOGY0Y2M2OTM4Y2U2LzJiYmJjY2FmLWViNDQtNDA4MC04OGRlLThmNGNjNjkz OGNlNi5jcmwwHwYDVR0jBBgwFoAUoPkp5NNmgD0d4/BgQHBYHi5lHr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJiY2NhZi1lYjQ0LTQwODAtODhkZS04ZjRj YzY5MzhjZTYuY2VyMHYGCCsGAQUFBwEHAQH/BGcwZTBSBAIAATBMAwMAi7sDAwCc dTAMAwQBwIqKAwQCwIqQMAwDBAPA4ggDBAXA4gAwDAMEBMd4sAMEAMd4sgMEAMf1 9wMEAMf54gMEAMw0mQMEAMw0yTAPBAIAAjAJAwcAJiAAngAAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE5J G4+qys1kyK+bO/jsEHjliifCJtyePmq98Uiz9hkAcYzvKack9bvaULJDddhkFi1k WCLU5jsGy3UOAGP6F9D6wXeIJIgDoN5ABlPnYJ74aa60dNQ1IAxR3VIfVfUOvQnG ahEGz+/iAKufrXHGMsNwETpNYInFo5F780K/8d6M5CVpLn7Sj+1UlVAODE9v3O9I Ltx0Ig4k6hVPnBi9bIq2+KtKPsPZwg50rNu+LTNG6cK/zBcZ9MqlHowfmk5sIa/a yFp0RwqVq6X+rG3i3fXYF2hlruu1wt/O4Er6jUIMfhzLic3dOenpxHEo+yaimpqi UvDLuu4Vr27AZqM8igg= -----END CERTIFICATE-----Generated at Sat Jun 13 18:23:36 2026 by rpki-client