$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c3822b9-956a-3af2-b7ef-ade5740fce9d.roa File: 0c3822b9-956a-3af2-b7ef-ade5740fce9d.roa (raw, json) Hash identifier: hqJz9BfB7xPqk29F+pMOacSgQ2yfNmkFV+WgbIe0mx0= Subject key identifier: AE:6A:33:D9:6E:91:2C:12:89:C9:53:8D:1A:FB:22:5A:C4:04:E9:7D Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA9E241F83CE326C9B500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c3822b9-956a-3af2-b7ef-ade5740fce9d.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 53813 IP address blocks: 209.55.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a9:e2:41:f8:3c:e3:26:c9:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=f036c0e2-c4b6-4e4c-8cdb-473dbc3417b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b5:16:a2:f5:76:0b:c1:88:ac:fc:7c:2f:9f: bd:8f:e1:f1:e4:26:87:b4:bb:a7:28:bd:30:71:e8: 71:e7:89:ec:09:e3:e5:11:d5:3f:3f:77:50:94:53: 82:d4:58:5a:7a:8e:49:e5:d3:b9:67:53:e3:f0:0f: 2d:b5:c8:84:ae:05:6b:fe:af:54:75:63:f3:c0:2e: 66:ed:34:86:e4:a8:c9:ee:73:01:5d:2b:ac:a4:57: 19:6b:89:cb:a2:46:1e:ac:1d:d3:44:11:e2:25:af: f1:80:8e:2e:5f:b4:49:df:0b:62:a7:ed:5c:19:27: 96:dc:76:fe:52:ea:2b:36:79:ae:06:ea:33:1a:ea: 88:c5:98:49:c8:40:ff:38:51:b1:6a:82:76:96:11: 95:39:4d:86:fc:8d:19:4e:72:90:3c:3c:f0:df:7f: b9:5f:ed:aa:1e:ae:30:14:23:82:59:1e:9f:66:bd: 3c:91:28:b3:96:97:e8:af:99:e9:c8:29:56:a6:7e: 01:75:4d:18:95:0e:aa:54:56:54:b4:0f:81:cd:36: 0f:21:d2:66:fd:ea:52:1d:30:a6:0d:ad:fa:f0:e7: a1:28:ee:1e:7f:50:4e:78:b2:ea:d5:2b:68:57:26: 9b:1b:8b:48:9f:dc:15:cd:ca:f7:ab:f8:24:8f:e8: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6A:33:D9:6E:91:2C:12:89:C9:53:8D:1A:FB:22:5A:C4:04:E9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c3822b9-956a-3af2-b7ef-ade5740fce9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:63:4c:b1:6b:0b:20:8b:47:1b:61:2f:bc:2b:64:68:d9:ae: 53:44:a1:86:1f:f3:48:62:0c:73:b0:9f:13:24:e2:8e:d1:46: 7a:4e:ec:46:98:97:56:1f:06:b0:2e:23:4a:60:2b:f1:5a:70: 52:9a:9b:47:a1:9e:68:27:8a:a0:76:6e:fb:06:c6:d8:b1:b5: ce:6e:71:c0:14:3a:85:23:b4:aa:00:c0:8d:79:10:68:00:a1: 9a:75:b1:6a:d9:72:59:bc:6f:25:7b:00:f8:98:56:dc:56:53: f5:ab:57:15:fe:28:0f:27:4d:b3:de:64:b5:31:e5:fc:ba:bc: 24:07:18:e9:2e:29:85:e3:40:5c:96:9a:73:cb:8a:75:45:63: a7:e6:c7:40:a1:74:19:08:66:36:63:90:4a:d9:6f:0e:c5:fc: 7b:63:96:2d:8b:95:f5:29:95:19:27:36:ed:56:91:a4:82:e0: 07:f8:d3:55:4e:33:b3:e6:7e:52:7c:13:2c:b0:df:b2:a6:74: 7e:0d:ae:51:3e:b4:ff:a3:ed:09:22:75:80:cf:19:84:cb:55: 83:44:45:23:c9:c5:3e:79:ad:08:02:91:2f:d7:2c:18:18:5a: 68:e1:08:67:8a:32:bd:4f:a9:70:ef:b1:4e:3c:58:68:ef:c5: f7:9d:ac:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6niQfg84ybJtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZjAzNmMwZTItYzRiNi00ZTRjLThjZGItNDczZGJjMzQxN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUWovV2C8GIrPx8L5+9j+Hx5CaHtLunKL0w cehx54nsCePlEdU/P3dQlFOC1Fhaeo5J5dO5Z1Pj8A8ttciErgVr/q9UdWPzwC5m 7TSG5KjJ7nMBXSuspFcZa4nLokYerB3TRBHiJa/xgI4uX7RJ3wtip+1cGSeW3Hb+ UuorNnmuBuozGuqIxZhJyED/OFGxaoJ2lhGVOU2G/I0ZTnKQPDzw33+5X+2qHq4w FCOCWR6fZr08kSizlpfor5npyClWpn4BdU0YlQ6qVFZUtA+BzTYPIdJm/epSHTCm Da368OehKO4ef1BOeLLq1StoVyabG4tIn9wVzcr3q/gkj+jz8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5qM9lukSwSiclTjRr7IlrEBOl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGMzODIyYjktOTU2YS0z YWYyLWI3ZWYtYWRlNTc0MGZjZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtjTLFrCyCLRxthL7wrZGjZrlNEoYYf80hiDHOwnxMk4o7RRnpO7EaY l1YfBrAuI0pgK/FacFKam0ehnmgniqB2bvsGxtixtc5uccAUOoUjtKoAwI15EGgA oZp1sWrZclm8byV7APiYVtxWU/WrVxX+KA8nTbPeZLUx5fy6vCQHGOkuKYXjQFyW mnPLinVFY6fmx0ChdBkIZjZjkErZbw7F/Htjli2LlfUplRknNu1WkaSC4Af401VO M7PmflJ8Eyyw37KmdH4NrlE+tP+j7QkidYDPGYTLVYNERSPJxT55rQgCkS/XLBgY WmjhCGeKMr1PqXDvsU48WGjvxfedrPo= -----END CERTIFICATE-----Generated at Fri Apr 17 19:01:10 2026 by rpki-client