$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0587f5dc-d336-361c-988d-bc7bc352ed99.roa File: 0587f5dc-d336-361c-988d-bc7bc352ed99.roa (raw, json) Hash identifier: X9xz5Dvramo2mB1l6VDonO15oE2iHgKw+f/l9NkPiNw= Subject key identifier: EC:BC:85:AE:F8:C8:D6:95:00:DB:39:DB:41:B2:D9:E2:BF:B2:B9:33 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9261FD3881A108443580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0587f5dc-d336-361c-988d-bc7bc352ed99.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 53813 IP address blocks: 209.55.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:92:61:fd:38:81:a1:08:44:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=21d29109-b6d7-4578-a1ab-f6eaf5aebc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:16:89:0a:70:65:81:ae:18:de:5e:8d:b8: 56:e9:3e:5f:4d:6a:23:bc:66:e3:1f:70:b1:57:4e: 8c:ea:20:a5:5f:8b:cc:87:68:ba:ee:27:1d:5c:cb: 6c:a7:03:9e:a7:cb:94:3d:cb:21:b8:77:81:18:4c: d7:35:d5:13:f1:15:e1:5a:91:69:79:68:31:90:89: 06:14:e4:07:81:80:85:cc:59:13:bb:38:9e:c0:16: e6:10:98:99:84:54:92:de:9d:71:3d:22:6a:f1:ae: 8e:c5:6b:ee:29:c4:40:b8:8e:36:13:8d:a3:f0:11: 1b:fd:f8:aa:0f:e6:56:2e:a7:3e:fe:47:ca:b0:df: 23:6d:73:29:ec:ea:42:7a:e8:1b:29:76:b8:8d:41: cb:55:39:f6:e4:d5:3d:00:41:a2:fa:37:5b:4c:7d: f2:3b:11:fb:4e:0b:d1:04:3a:0b:34:6d:65:c5:7a: 0a:87:e5:5f:fa:12:37:63:72:3d:4c:60:89:40:28: 5e:b0:fe:cd:90:40:89:2c:cf:df:dc:af:dd:73:85: 4e:cb:3f:db:08:59:1d:c6:0f:16:08:73:67:d1:f6: 84:68:24:e5:b9:6f:dc:2d:06:28:51:eb:a3:a1:6c: 9b:05:17:14:d9:a2:32:79:82:69:ac:aa:bd:83:24: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BC:85:AE:F8:C8:D6:95:00:DB:39:DB:41:B2:D9:E2:BF:B2:B9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0587f5dc-d336-361c-988d-bc7bc352ed99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:9c:85:6e:bd:b2:ca:a4:10:e2:6b:ae:be:16:2c:01:63:ef: d4:7b:fd:9b:6a:01:2a:a9:8e:03:6d:cc:6d:01:7d:b4:64:d0: ff:e8:38:b5:3b:05:29:c9:65:1c:75:be:d3:3c:fc:d5:5b:89: ed:49:27:65:64:01:30:57:cb:8b:d2:d4:35:ef:1b:64:da:42: 76:9c:0c:ae:39:39:61:75:15:b4:8a:21:2b:74:02:a9:d3:f4: 04:18:df:00:50:e7:3b:f1:fc:f3:35:b1:0c:5a:1d:be:33:da: de:5b:33:de:d3:66:18:af:06:dd:39:f6:fa:c7:af:70:a2:3b: e4:82:43:0f:16:97:d1:ab:67:68:d4:c7:aa:e1:f3:2d:b1:50: 96:56:86:9c:30:c5:f0:f7:7c:82:1d:ac:57:3b:8c:0d:05:2f: 4f:01:d9:c7:71:10:4a:5b:5f:d5:ce:1d:30:ad:28:7e:d8:0c: ab:a9:48:c3:93:f2:48:be:57:2a:b5:bf:c3:da:c1:97:23:81: 5f:18:49:0c:6d:8f:a1:b4:f6:86:89:0d:4f:49:6e:5e:1e:30: 2f:9f:e2:3d:ea:d9:e6:29:58:2a:80:ac:29:d6:64:fa:88:a2: b8:e2:31:d3:76:ff:a9:3d:fb:8f:28:a6:91:69:2e:fb:e2:6c: e4:97:d3:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5Jh/TiBoQhENYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MjFkMjkxMDktYjZkNy00NTc4LWExYWItZjZlYWY1YWViYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZwWiQpwZYGuGN5ejbhW6T5fTWojvGbjH3Cx V06M6iClX4vMh2i67icdXMtspwOep8uUPcshuHeBGEzXNdUT8RXhWpFpeWgxkIkG FOQHgYCFzFkTuziewBbmEJiZhFSS3p1xPSJq8a6OxWvuKcRAuI42E42j8BEb/fiq D+ZWLqc+/kfKsN8jbXMp7OpCeugbKXa4jUHLVTn25NU9AEGi+jdbTH3yOxH7TgvR BDoLNG1lxXoKh+Vf+hI3Y3I9TGCJQChesP7NkECJLM/f3K/dc4VOyz/bCFkdxg8W CHNn0faEaCTluW/cLQYoUeujoWybBRcU2aIyeYJprKq9gyQNLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOy8ha74yNaVANs520Gy2eK/srkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDU4N2Y1ZGMtZDMzNi0z NjFjLTk4OGQtYmM3YmMzNTJlZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALychW69ssqkEOJrrr4WLAFj79R7/ZtqASqpjgNtzG0BfbRk0P/oOLU7 BSnJZRx1vtM8/NVbie1JJ2VkATBXy4vS1DXvG2TaQnacDK45OWF1FbSKISt0AqnT 9AQY3wBQ5zvx/PM1sQxaHb4z2t5bM97TZhivBt059vrHr3CiO+SCQw8Wl9GrZ2jU x6rh8y2xUJZWhpwwxfD3fIIdrFc7jA0FL08B2cdxEEpbX9XOHTCtKH7YDKupSMOT 8ki+Vyq1v8PawZcjgV8YSQxtj6G09oaJDU9Jbl4eMC+f4j3q2eYpWCqArCnWZPqI orjiMdN2/6k9+48oppFpLvvibOSX00g= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:42 2026 by rpki-client