$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa File: d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa (raw, json) Hash identifier: aQAy59cEgmZaJYw843S1aL3uh74d67IdmoDjSS+roao= Subject key identifier: B3:5D:2D:04:3B:62:7B:4C:3A:9D:90:C3:C1:0C:90:DC:8D:90:DA:83 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E428F2629E17C9E343844EC80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa Signing time: Mon 22 Jun 2026 21:00:12 +0000 ROA not before: Mon 22 Jun 2026 21:00:12 +0000 ROA not after: Sun 20 Sep 2026 21:00:12 +0000 asID: 22616 IP address blocks: 205.220.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:8f:26:29:e1:7c:9e:34:38:44:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 22 21:00:12 2026 GMT Not After : Sep 20 21:00:12 2026 GMT Subject: CN=3f1bd379-73a2-4e52-8050-8e918b57ed80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:94:8f:e1:c3:8d:df:ce:25:36:e8:ab:5c: dd:12:37:8f:03:fd:a7:91:b2:71:6e:12:bd:17:48: 6b:eb:e0:07:19:f8:11:33:5a:7d:5d:04:3c:89:bd: 24:8f:f6:87:a9:73:a8:04:0f:0d:b6:ea:72:25:9c: 32:be:e6:ff:d8:d9:b2:c0:98:96:06:9d:a6:95:cb: 02:6c:73:1f:65:5c:1d:45:d7:80:be:79:6d:cb:a2: cc:bf:d7:70:1b:2d:0d:77:fe:50:b4:14:f9:75:51: 4b:56:21:43:ef:1b:f5:0d:d7:04:60:52:fd:8e:20: cb:d8:f8:34:57:7a:c0:d2:f1:37:9f:e7:00:27:05: a4:53:f4:8c:52:df:e3:6b:37:d3:e7:93:a6:76:2b: c4:6d:2a:93:c0:9f:27:9b:09:52:bb:a5:37:cb:5c: 29:d2:73:c6:ae:ef:73:00:26:35:ee:bb:42:01:c1: a0:ce:65:a7:43:c0:28:82:86:d3:96:b6:c2:92:d7: 54:1c:47:da:2d:81:80:5d:46:d0:95:72:9c:99:df: ce:86:fb:a6:39:9c:14:f5:41:ad:92:5f:5f:1f:1b: 09:21:ff:00:0d:1b:40:37:a2:e7:c2:65:ba:77:df: df:f9:4b:80:f0:5a:48:ff:d2:62:a6:c4:fe:cc:f1: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5D:2D:04:3B:62:7B:4C:3A:9D:90:C3:C1:0C:90:DC:8D:90:DA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9f:dc:9f:22:b2:5c:03:c3:9d:eb:ef:c8:2c:c5:83:f0:53: 02:f8:42:0e:b8:6a:5a:eb:4f:c3:44:9b:88:6a:39:9a:d0:bb: 1a:47:50:74:16:4e:cd:8b:8c:d1:ff:04:33:2e:8b:df:e8:41: 2c:7e:8f:f3:90:af:cd:48:bd:cb:07:f0:d8:44:76:39:f9:32: ff:02:e0:15:15:86:db:6f:30:a5:d8:1e:f9:53:a4:3b:ab:f1: ca:ef:06:aa:12:5f:b9:76:f2:75:44:25:b4:d0:57:b1:47:19: 09:eb:22:64:c4:e2:be:9e:5d:e1:cd:78:8f:0a:a5:17:06:b9: a2:93:dc:0f:64:24:52:f2:09:06:93:ad:cb:6a:64:31:9e:33: 5e:df:af:28:51:4b:ab:f7:9a:89:b7:31:3f:4d:68:04:d5:2b: b5:dc:23:8b:5a:7e:96:76:bc:1c:eb:e0:46:37:78:f4:aa:40: 57:1b:cf:c5:0f:ea:b0:0c:b8:1f:8d:8f:c5:55:a3:2d:dc:2f: 1f:9a:8b:e5:8e:7e:ba:a1:57:7c:d3:20:a9:a2:12:77:75:19: 08:3f:28:e4:65:84:a8:26:4a:fa:4b:d2:d3:8c:55:ca:2b:bc: 6b:ad:87:40:0f:06:ab:0b:f0:02:02:c6:2d:5d:8c:0f:7a:7a: eb:39:4b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5CjyYp4XyeNDhE7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk M2YxYmQzNzktNzNhMi00ZTUyLTgwNTAtOGU5MThiNTdlZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnSUj+HDjd/OJTboq1zdEjePA/2nkbJxbhK9 F0hr6+AHGfgRM1p9XQQ8ib0kj/aHqXOoBA8NtupyJZwyvub/2NmywJiWBp2mlcsC bHMfZVwdRdeAvnlty6LMv9dwGy0Nd/5QtBT5dVFLViFD7xv1DdcEYFL9jiDL2Pg0 V3rA0vE3n+cAJwWkU/SMUt/jazfT55OmdivEbSqTwJ8nmwlSu6U3y1wp0nPGru9z ACY17rtCAcGgzmWnQ8AogobTlrbCktdUHEfaLYGAXUbQlXKcmd/OhvumOZwU9UGt kl9fHxsJIf8ADRtAN6LnwmW6d9/f+UuA8FpI/9JipsT+zPFPCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNdLQQ7YntMOp2Qw8EMkNyNkNqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDNiZGFiMTAtNmE5ZS0z ZjdkLTg5ODUtNmZhZDBhYjEwODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGif3J8islwDw53r78gsxYPwUwL4Qg64alrrT8NEm4hqOZrQuxpHUHQW Ts2LjNH/BDMui9/oQSx+j/OQr81IvcsH8NhEdjn5Mv8C4BUVhttvMKXYHvlTpDur 8crvBqoSX7l28nVEJbTQV7FHGQnrImTE4r6eXeHNeI8KpRcGuaKT3A9kJFLyCQaT rctqZDGeM17fryhRS6v3mom3MT9NaATVK7XcI4tafpZ2vBzr4EY3ePSqQFcbz8UP 6rAMuB+Nj8VVoy3cLx+ai+WOfrqhV3zTIKmiEnd1GQg/KORlhKgmSvpL0tOMVcor vGuth0APBqsL8AICxi1djA96eus5S5c= -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:50 2026 by rpki-client