$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa File: 0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa (raw, json) Hash identifier: 2Jh3pIugBiyCw+eqaevmu5+PidrYoOFbXRUHOu26VUo= Subject key identifier: 37:D9:FC:2E:23:86:DB:9A:58:ED:BA:AE:08:38:F1:1B:44:69:B6:C8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D80FFDAF95509201C8FAF1730 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 53813 IP address blocks: 209.55.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:da:f9:55:09:20:1c:8f:af:17:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=0dd21c08-3821-47f7-89a1-da1d39eb368e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:79:1b:2f:cd:a7:ca:0a:70:56:31:f9:c8: 3b:58:bd:6b:c7:bd:5f:ca:b3:05:62:c9:71:2b:4d: 93:59:c8:f6:11:0a:78:57:3e:c6:a7:45:fb:a9:29: 43:2b:9c:d3:77:26:b8:d7:09:49:cd:b8:27:3f:9d: a4:72:6e:84:2f:72:30:14:7c:22:6a:e9:88:a7:60: 76:62:c0:bd:39:bb:fd:b7:21:31:70:d9:2d:d9:71: 88:be:4f:ed:ed:48:45:7e:03:b2:fb:ad:23:8e:25: 0d:a0:70:dd:7a:96:18:d6:d6:4a:65:55:be:d0:c1: 49:69:f9:07:89:1d:9f:69:0d:1c:97:95:ab:ac:09: b9:b2:a3:b8:cc:b6:57:a8:d3:54:09:f2:45:5a:00: de:0f:26:ef:bf:57:f7:de:28:d0:79:98:73:0f:33: f0:80:64:aa:7b:e8:74:34:88:f9:f5:db:68:da:a6: ca:e2:79:7b:dc:8d:54:a5:1b:ec:86:6f:69:45:cc: cf:58:4e:95:fb:0b:15:f9:d3:02:f0:e4:b6:13:34: 17:78:7f:fe:02:aa:0f:b9:de:22:1d:8c:a5:e7:cb: 86:49:3b:c7:41:7b:b5:bf:80:47:99:f3:d7:51:0a: e5:8d:05:44:0c:56:e8:1d:f8:90:85:5f:e1:09:68: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:FC:2E:23:86:DB:9A:58:ED:BA:AE:08:38:F1:1B:44:69:B6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0f9a3968-1572-3d7a-af92-d15e80eb7fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:47:13:76:cb:59:30:7d:c9:2d:c7:b4:37:e7:22:19:29:c5: f6:d9:78:4c:2c:fe:4d:b7:5c:02:93:f6:5a:75:b5:a8:28:19: 39:7a:1a:bf:61:48:c3:cd:37:1f:a6:02:a6:26:7b:06:f4:70: 0f:17:d3:d3:f9:80:4e:9e:db:9d:44:5c:36:59:f1:b5:f8:79: af:50:0c:81:00:93:67:23:10:7e:15:10:ae:07:e9:ed:43:ab: 9e:ad:5f:cd:5a:34:58:63:f0:90:67:bc:c6:bc:72:d1:ab:5b: 8d:a8:bb:0c:94:a3:47:48:e6:9c:13:b9:ce:9c:b0:09:97:94: 9f:b8:a6:d7:eb:d5:dc:4c:bd:d0:8a:93:03:d2:16:b4:59:2a: a5:42:ed:ab:99:e0:28:f2:89:47:2a:94:bc:a0:03:63:b8:a1: f9:8b:d0:5f:b8:e5:7f:bd:62:c7:d5:37:8a:93:36:e2:e6:51: 0b:32:af:74:79:ee:9c:c6:c1:ed:e6:2b:9b:af:8d:f3:71:00: 66:26:fe:9e:fe:96:52:81:9c:56:61:f1:a3:89:70:3b:58:73: 4a:9b:f5:e2:b4:e5:c7:b0:ec:40:23:9f:ea:e7:98:d7:f9:6f: e9:a1:f4:83:67:f0:ba:3f:5a:19:45:65:03:fc:48:49:87:7d: 5f:02:66:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/9r5VQkgHI+vFzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MGRkMjFjMDgtMzgyMS00N2Y3LTg5YTEtZGExZDM5ZWIzNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+15Gy/Np8oKcFYx+cg7WL1rx71fyrMFYslx K02TWcj2EQp4Vz7Gp0X7qSlDK5zTdya41wlJzbgnP52kcm6EL3IwFHwiaumIp2B2 YsC9Obv9tyExcNkt2XGIvk/t7UhFfgOy+60jjiUNoHDdepYY1tZKZVW+0MFJafkH iR2faQ0cl5WrrAm5sqO4zLZXqNNUCfJFWgDeDybvv1f33ijQeZhzDzPwgGSqe+h0 NIj59dto2qbK4nl73I1UpRvshm9pRczPWE6V+wsV+dMC8OS2EzQXeH/+AqoPud4i HYyl58uGSTvHQXu1v4BHmfPXUQrljQVEDFboHfiQhV/hCWjCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfZ/C4jhtuaWO26rgg48RtEabbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGY5YTM5NjgtMTU3Mi0z ZDdhLWFmOTItZDE1ZTgwZWI3ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBHE3bLWTB9yS3HtDfnIhkpxfbZeEws/k23XAKT9lp1tagoGTl6Gr9h SMPNNx+mAqYmewb0cA8X09P5gE6e251EXDZZ8bX4ea9QDIEAk2cjEH4VEK4H6e1D q56tX81aNFhj8JBnvMa8ctGrW42ouwyUo0dI5pwTuc6csAmXlJ+4ptfr1dxMvdCK kwPSFrRZKqVC7auZ4CjyiUcqlLygA2O4ofmL0F+45X+9YsfVN4qTNuLmUQsyr3R5 7pzGwe3mK5uvjfNxAGYm/p7+llKBnFZh8aOJcDtYc0qb9eK05cew7EAjn+rnmNf5 b+mh9INn8Lo/WhlFZQP8SEmHfV8CZqI= -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:13 2026 by rpki-client