$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa File: 2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa (raw, json) Hash identifier: 6NYQC9mq3EquLBh0w5Wlzj4HeA/5Yl3OQmgAbpgcMqs= Subject key identifier: C1:10:DC:7E:DC:BC:6D:0A:C5:CA:6E:BD:ED:B3:84:E3:55:4F:FE:9E Certificate issuer: /CN=5028ee72-1629-4552-a11f-947b5a925519 Certificate serial: 010D0C9F4328584E858F8CE7180C1D9F7C9D5900 Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 13737 IP address blocks: 204.136.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:8c:e7:18:0c:1d:9f:7c:9d:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519 Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=94c4d06e-68ff-4a6f-badd-2ccf00ad2b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:4f:42:39:e7:51:1e:78:27:2d:6a:b1:7e: 3c:fb:01:c6:ac:22:bd:b5:d1:11:1f:4c:04:64:fd: 97:b4:d3:8d:69:32:60:58:6d:23:b4:a7:49:d8:88: ad:4b:12:75:64:2f:92:48:4b:d9:9d:d6:f7:08:80: ab:bd:91:08:5f:e6:8d:17:32:c8:93:31:ec:36:a6: d8:39:4b:2c:49:e0:ce:b9:58:3e:07:92:23:94:c3: a7:11:b0:63:30:60:32:ac:44:5f:cd:1b:f3:3e:63: d7:18:72:03:27:43:7a:71:d8:b1:9f:1f:e7:06:22: 7d:be:6c:6c:8f:e9:94:a0:85:54:cf:63:d8:bf:b1: 90:bf:6b:c7:cb:ba:b6:b5:1d:be:e6:27:16:cb:90: 2c:a5:bc:02:82:44:b9:90:98:40:44:67:21:1d:fa: 67:fc:08:2d:b2:55:73:81:71:42:6f:62:40:3c:ee: b9:8e:69:21:34:2c:38:02:47:9a:2a:82:f8:24:2c: 7e:4b:a9:f6:8a:e3:a9:4e:1f:05:5f:df:17:2e:92: 8f:dd:5f:99:57:fd:d6:f1:18:8e:9f:4c:94:04:7a: 00:7b:22:2a:a5:f3:7c:59:79:95:b9:88:96:cf:17: 0e:65:60:6a:64:a3:ce:e6:55:c4:e9:2d:39:85:94: f2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:10:DC:7E:DC:BC:6D:0A:C5:CA:6E:BD:ED:B3:84:E3:55:4F:FE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/2a1fb8db-cb97-31c3-a7a0-ba29d64d2598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl X509v3 Authority Key Identifier: keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer sbgp-ipAddrBlock: critical IPv4: 204.136.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c6:0a:b6:f3:c5:c9:1c:6c:db:b5:77:71:64:d7:8a:52:3a: b3:8a:5e:9f:18:29:7d:87:ef:f9:ca:4a:64:11:8a:88:82:3c: 9b:4b:c4:cb:86:d0:ff:05:3f:6a:36:ee:35:cd:f5:b5:4e:66: a0:46:ce:0b:64:7e:67:a7:37:03:bd:18:13:1e:d0:00:0b:c2: 38:e4:fc:4e:b3:7b:43:cd:f6:7a:0f:7f:31:38:f9:ea:0d:f8: c2:8b:d4:49:49:54:3e:65:20:ee:be:a5:b6:31:b6:02:c1:7a: 4e:e2:3b:c8:5b:e4:54:54:48:ff:c1:8b:70:c3:ef:e0:fb:cf: 01:6f:c9:fe:a9:d9:f8:4f:cf:ff:22:79:4e:83:a1:7d:53:eb: 17:56:67:8d:3f:30:8f:8a:38:cf:d6:09:df:cc:1a:f0:bd:23: 8e:22:68:e6:3b:33:b6:17:35:68:37:1c:e9:8e:b2:da:a8:3d: f9:af:3a:89:c9:de:30:6a:56:9f:d1:cf:72:bd:20:28:b3:66: 06:1b:71:96:4e:a5:47:0d:69:64:81:6c:71:a1:14:5a:68:68: fd:97:3c:9c:eb:d6:35:c1:30:47:f8:77:16:5f:e0:06:37:ea: 6b:0d:4a:ac:ba:d3:53:b9:00:b1:a6:b5:df:04:c6:c1:3d:a5: ed:6f:24:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj4znGAwdn3ydWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAyOGVlNzItMTYyOS00NTUyLWExMWYtOTQ3YjVhOTI1 NTE5MB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk OTRjNGQwNmUtNjhmZi00YTZmLWJhZGQtMmNjZjAwYWQyYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcdPQjnnUR54Jy1qsX48+wHGrCK9tdERH0wE ZP2XtNONaTJgWG0jtKdJ2IitSxJ1ZC+SSEvZndb3CICrvZEIX+aNFzLIkzHsNqbY OUssSeDOuVg+B5IjlMOnEbBjMGAyrERfzRvzPmPXGHIDJ0N6cdixnx/nBiJ9vmxs j+mUoIVUz2PYv7GQv2vHy7q2tR2+5icWy5AspbwCgkS5kJhARGchHfpn/AgtslVz gXFCb2JAPO65jmkhNCw4AkeaKoL4JCx+S6n2iuOpTh8FX98XLpKP3V+ZV/3W8RiO n0yUBHoAeyIqpfN8WXmVuYiWzxcOZWBqZKPO5lXE6S05hZTyCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEQ3H7cvG0Kxcpuve2zhONVT/6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MDI4 ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5MjU1MTkvMmExZmI4ZGItY2I5Ny0z MWMzLWE3YTAtYmEyOWQ2NGQyNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTAyOGVlNzItMTYyOS00NTUyLWEx MWYtOTQ3YjVhOTI1NTE5LzUwMjhlZTcyLTE2MjktNDU1Mi1hMTFmLTk0N2I1YTky NTUxOS5jcmwwHwYDVR0jBBgwFoAUtUCIPF1c+2ZFhKxzVLTW+QgdeOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdi NWE5MjU1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXGCrbzxckcbNu1d3Fk14pSOrOKXp8YKX2H7/nKSmQRioiCPJtLxMuG 0P8FP2o27jXN9bVOZqBGzgtkfmenNwO9GBMe0AALwjjk/E6ze0PN9noPfzE4+eoN +MKL1ElJVD5lIO6+pbYxtgLBek7iO8hb5FRUSP/Bi3DD7+D7zwFvyf6p2fhPz/8i eU6DoX1T6xdWZ40/MI+KOM/WCd/MGvC9I44iaOY7M7YXNWg3HOmOstqoPfmvOonJ 3jBqVp/Rz3K9ICizZgYbcZZOpUcNaWSBbHGhFFpoaP2XPJzr1jXBMEf4dxZf4AY3 6msNSqy601O5ALGmtd8ExsE9pe1vJJA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:46:18 2026 by rpki-client