$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa File: 2a6b35d8-8539-3c36-9a9a-42084d63216c.roa (raw, json) Hash identifier: aaYoK9MihCzd1o7gsHg713f/buDBG4gNihEIAIa7SkE= Subject key identifier: 87:F0:83:39:FD:6A:CE:77:42:D2:8E:A6:DB:8D:E4:C8:AB:B2:13:73 Certificate issuer: /CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Certificate serial: 010D0C9F4328584D1B1A60AC04F544B8A73DC400 Authority key identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 139.187.0.0/16 maxlen: 24 156.117.0.0/16 maxlen: 24 192.138.138.0/24 maxlen: 24 192.138.139.0/24 maxlen: 24 192.138.140.0/24 maxlen: 24 192.138.141.0/24 maxlen: 24 192.138.142.0/24 maxlen: 24 192.138.143.0/24 maxlen: 24 192.138.144.0/24 maxlen: 24 192.138.145.0/24 maxlen: 24 192.138.146.0/24 maxlen: 24 192.138.147.0/24 maxlen: 24 192.226.8.0/21 maxlen: 21 192.226.8.0/22 maxlen: 22 192.226.8.0/23 maxlen: 23 192.226.8.0/24 maxlen: 24 192.226.9.0/24 maxlen: 24 192.226.10.0/23 maxlen: 23 192.226.10.0/24 maxlen: 24 192.226.11.0/24 maxlen: 24 192.226.12.0/22 maxlen: 22 192.226.12.0/23 maxlen: 23 192.226.12.0/24 maxlen: 24 192.226.13.0/24 maxlen: 24 192.226.14.0/23 maxlen: 23 192.226.14.0/24 maxlen: 24 192.226.15.0/24 maxlen: 24 192.226.16.0/20 maxlen: 20 192.226.16.0/21 maxlen: 21 192.226.16.0/22 maxlen: 22 192.226.16.0/23 maxlen: 23 192.226.16.0/24 maxlen: 24 192.226.17.0/24 maxlen: 24 192.226.18.0/23 maxlen: 23 192.226.18.0/24 maxlen: 24 192.226.19.0/24 maxlen: 24 192.226.20.0/22 maxlen: 22 192.226.20.0/23 maxlen: 23 192.226.20.0/24 maxlen: 24 192.226.21.0/24 maxlen: 24 192.226.22.0/23 maxlen: 23 192.226.22.0/24 maxlen: 24 192.226.23.0/24 maxlen: 24 192.226.24.0/22 maxlen: 22 192.226.24.0/23 maxlen: 23 192.226.24.0/24 maxlen: 24 192.226.25.0/24 maxlen: 24 192.226.26.0/23 maxlen: 23 192.226.26.0/24 maxlen: 24 192.226.27.0/24 maxlen: 24 192.226.28.0/22 maxlen: 22 192.226.28.0/23 maxlen: 23 192.226.28.0/24 maxlen: 24 192.226.29.0/24 maxlen: 24 192.226.30.0/23 maxlen: 23 192.226.30.0/24 maxlen: 24 192.226.31.0/24 maxlen: 24 199.120.176.0/23 maxlen: 23 199.120.176.0/24 maxlen: 24 199.120.177.0/24 maxlen: 24 199.120.178.0/24 maxlen: 24 199.245.247.0/24 maxlen: 24 199.249.226.0/24 maxlen: 24 204.52.153.0/24 maxlen: 24 204.52.201.0/24 maxlen: 24 2620:9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:60:ac:04:f5:44:b8:a7:3d:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=6f6e9ab3-4620-482c-8556-d4aaf5f8a554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:19:d0:50:83:63:7d:2f:3c:7e:12:7a:96: 56:b3:6d:a9:60:ff:37:76:83:20:42:9b:2d:58:ac: 94:c3:72:8a:17:e7:19:c4:5a:47:ab:5b:6c:92:db: d4:9d:f0:b7:9a:03:5e:65:27:b8:48:98:a3:f1:f4: bc:49:a5:28:af:b7:56:50:61:b2:d4:ee:18:9e:c6: 59:e1:bc:9f:ed:3a:ee:a3:86:73:df:a7:75:11:75: 32:9a:d5:5e:0b:43:de:34:43:0b:84:b3:9a:ca:11: b3:38:6e:5b:a0:ed:b5:29:37:42:db:f3:76:3f:24: 81:67:f3:50:77:12:36:33:c4:e9:c6:05:36:b6:a3: 92:72:11:b9:e6:b5:1e:9f:0b:4d:ba:76:1b:a7:1b: a4:9e:2c:18:98:9c:5b:26:df:28:93:06:aa:c7:01: 35:42:47:01:d5:12:f5:92:00:3f:70:31:0c:f4:f7: b9:e7:f9:e4:9f:4d:99:d5:4a:56:19:f6:b4:d2:9c: 3e:4d:16:67:1c:2c:1e:b2:04:68:8d:c8:c9:45:06: bc:a6:f7:71:6d:97:49:82:b2:50:8a:c4:01:80:ab: 0f:2e:78:8a:a3:bb:67:51:c8:53:0a:27:45:85:62: a6:ca:a5:25:d7:60:ef:a9:c7:60:26:19:d5:24:74: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F0:83:39:FD:6A:CE:77:42:D2:8E:A6:DB:8D:E4:C8:AB:B2:13:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl X509v3 Authority Key Identifier: keyid:A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer sbgp-ipAddrBlock: critical IPv4: 139.187.0.0/16 156.117.0.0/16 192.138.138.0-192.138.147.255 192.226.8.0-192.226.31.255 199.120.176.0-199.120.178.255 199.245.247.0/24 199.249.226.0/24 204.52.153.0/24 204.52.201.0/24 IPv6: 2620:9e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1b:01:e4:67:c5:b0:a8:51:3d:0e:cb:f6:bd:5e:d1:bd:58: 71:9f:77:b2:12:a3:55:ee:6f:75:03:ca:fa:a2:6a:5c:a7:47: 83:55:a3:cf:e5:1d:e1:2f:5d:ba:f2:5a:24:f2:de:23:22:a4: e2:fa:14:ab:3d:c7:f4:7f:23:41:d8:b2:e6:98:72:62:87:ef: 38:d2:67:41:4b:ec:e3:5f:bd:98:89:8e:5f:2e:dd:01:d3:3d: 9c:69:d5:2e:c9:54:98:ab:7b:a3:55:3f:90:59:6e:61:41:80: 21:d7:2f:e2:2a:77:10:12:b5:0f:52:42:b8:e8:d0:34:05:f4: 9a:1a:61:1e:6a:65:3e:b8:b9:99:6b:6f:cf:32:76:06:e9:9d: 97:a9:8e:f8:8a:67:98:c0:fa:9f:82:c8:da:7d:76:03:da:21: a4:18:56:bb:48:65:29:2c:70:9b:c8:d6:7f:9e:c0:ee:2a:35: 24:8e:35:34:85:b4:01:fc:bb:d6:3c:9d:4e:51:e9:30:39:00: c1:35:9d:b0:a8:58:ad:42:d6:45:36:f3:64:01:69:02:1e:9e: 31:41:86:89:14:1f:66:aa:6f:c0:90:94:60:21:67:c9:5c:db: c2:0a:bc:31:69:04:ea:5c:f8:05:ea:8f:a6:96:62:05:5f:a6: a1:66:55:cd -----BEGIN CERTIFICATE----- MIIGmjCCBYKgAwIBAgIUAQ0Mn0MoWE0bGmCsBPVEuKc9xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJiYmNjYWYtZWI0NC00MDgwLTg4ZGUtOGY0Y2M2OTM4 Y2U2MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NmY2ZTlhYjMtNDYyMC00ODJjLTg1NTYtZDRhYWY1ZjhhNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNAZ0FCDY30vPH4SepZWs22pYP83doMgQpst WKyUw3KKF+cZxFpHq1tsktvUnfC3mgNeZSe4SJij8fS8SaUor7dWUGGy1O4YnsZZ 4byf7Truo4Zz36d1EXUymtVeC0PeNEMLhLOayhGzOG5boO21KTdC2/N2PySBZ/NQ dxI2M8TpxgU2tqOSchG55rUenwtNunYbpxukniwYmJxbJt8okwaqxwE1QkcB1RL1 kgA/cDEM9Pe55/nkn02Z1UpWGfa00pw+TRZnHCwesgRojcjJRQa8pvdxbZdJgrJQ isQBgKsPLniKo7tnUchTCidFhWKmyqUl12DvqcdgJhnVJHQ7OQIDAQABo4IDrDCC A6gwHQYDVR0OBBYEFIfwgzn9as53QtKOptuN5MirshNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJi Y2NhZi1lYjQ0LTQwODAtODhkZS04ZjRjYzY5MzhjZTYvMmE2YjM1ZDgtODUzOS0z YzM2LTlhOWEtNDIwODRkNjMyMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJiYmNjYWYtZWI0NC00MDgwLTg4 ZGUtOGY0Y2M2OTM4Y2U2LzJiYmJjY2FmLWViNDQtNDA4MC04OGRlLThmNGNjNjkz OGNlNi5jcmwwHwYDVR0jBBgwFoAUoPkp5NNmgD0d4/BgQHBYHi5lHr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJiY2NhZi1lYjQ0LTQwODAtODhkZS04ZjRj YzY5MzhjZTYuY2VyMHYGCCsGAQUFBwEHAQH/BGcwZTBSBAIAATBMAwMAi7sDAwCc dTAMAwQBwIqKAwQCwIqQMAwDBAPA4ggDBAXA4gAwDAMEBMd4sAMEAMd4sgMEAMf1 9wMEAMf54gMEAMw0mQMEAMw0yTAPBAIAAjAJAwcAJiAAngAAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABMb AeRnxbCoUT0Oy/a9XtG9WHGfd7ISo1Xub3UDyvqialynR4NVo8/lHeEvXbryWiTy 3iMipOL6FKs9x/R/I0HYsuaYcmKH7zjSZ0FL7ONfvZiJjl8u3QHTPZxp1S7JVJir e6NVP5BZbmFBgCHXL+IqdxAStQ9SQrjo0DQF9JoaYR5qZT64uZlrb88ydgbpnZep jviKZ5jA+p+CyNp9dgPaIaQYVrtIZSkscJvI1n+ewO4qNSSONTSFtAH8u9Y8nU5R 6TA5AME1nbCoWK1C1kU282QBaQIenjFBhokUH2aqb8CQlGAhZ8lc28IKvDFpBOpc +AXqj6aWYgVfpqFmVc0= -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:30 2026 by rpki-client