$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28f971b7-05b5-3e55-aa1a-eba5c026a515.roa File: 28f971b7-05b5-3e55-aa1a-eba5c026a515.roa (raw, json) Hash identifier: 5wnQcGZk8OiOZ2+rqLbd2dUIusysLa66NrgJckudEfE= Subject key identifier: CB:21:BF:6D:A6:2F:FD:8A:7D:AF:DD:EF:D6:94:90:21:F3:26:C0:7E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F94AA5E3007801C172580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28f971b7-05b5-3e55-aa1a-eba5c026a515.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 53813 IP address blocks: 209.55.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:94:aa:5e:30:07:80:1c:17:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=c13c767a-a70d-4a02-8fec-425df20b67b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:ef:c6:09:30:a1:3c:fb:6e:b9:bb:73:8d: 6b:ee:92:d4:82:dc:09:e3:f1:57:8d:0f:3f:6b:3f: 30:69:b6:b4:cf:ef:5b:66:10:88:ac:bb:ff:a5:93: 23:74:32:fb:25:c3:3d:97:b5:6b:39:ee:a3:df:9a: bc:38:2b:34:22:b5:c9:a0:be:23:49:67:d2:c6:17: 79:3c:f4:26:f2:71:eb:4a:1a:a5:e9:5e:7e:df:8b: f5:ee:87:e4:b2:74:59:39:9a:eb:d2:01:6c:0c:5d: 89:96:9c:16:09:3d:34:5a:f1:47:23:5e:b5:bc:fb: 00:14:72:46:0c:1b:ac:13:c1:64:c1:8d:4d:13:c1: fc:50:a3:b9:09:78:af:8d:fe:2c:78:b0:3c:90:92: 8d:12:71:62:f0:ba:ef:a4:0f:e4:1a:5c:8e:fa:39: 4a:70:62:c5:c8:e8:cf:1d:35:da:10:d1:2c:6c:08: c6:b7:1d:4e:be:7f:57:b9:ff:d5:d9:37:b7:cd:0a: 74:b9:2d:92:fd:eb:1d:32:ea:b3:fb:0c:1b:df:41: 17:4b:b5:64:f7:ab:54:e7:f2:c9:57:84:af:2d:e5: d4:67:e1:61:cc:04:a6:36:0a:92:65:5a:2f:68:c3: b2:42:de:92:fd:f6:6b:4b:29:7e:c3:cd:c3:79:37: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:BF:6D:A6:2F:FD:8A:7D:AF:DD:EF:D6:94:90:21:F3:26:C0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28f971b7-05b5-3e55-aa1a-eba5c026a515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:55:7d:a9:cb:02:68:4c:18:7f:31:61:d3:6c:b7:47:d7:cf: c0:44:4a:d8:37:64:b1:3c:21:83:6b:89:e4:e1:30:9a:9e:03: 54:55:c4:b0:f6:94:cc:2d:7c:d6:3d:f4:2b:35:ae:0f:67:11: 01:8a:6c:cf:4b:fb:31:20:21:86:6a:69:8d:43:dc:92:11:85: c7:0d:b3:fa:36:28:20:80:95:96:9c:89:c2:71:4a:3f:af:2b: 75:5d:de:fc:b1:c2:7d:b5:5d:3f:77:10:2c:d3:67:81:82:44: 89:42:79:39:e5:c9:8d:15:26:8b:02:82:c7:f7:d1:ed:b3:78: a3:65:0b:9c:18:5c:5e:4c:36:f5:6c:1a:f7:29:c7:20:03:ac: 75:a1:05:95:49:d3:bd:15:b6:e6:93:3f:a0:04:e1:b5:b0:d2: 35:22:dc:83:c7:68:e5:f5:ff:e1:35:90:b7:45:4f:a4:b4:38: bc:96:44:33:8d:4a:ad:94:b8:41:b9:a1:d0:d9:af:58:ce:54: 4f:60:80:e4:74:3d:85:4a:af:81:98:32:e1:93:dd:4d:28:7e: fa:df:9f:ff:68:e5:32:fd:9d:46:e3:4b:7d:07:00:0e:a6:7b: d8:97:79:65:42:d0:11:61:b3:a0:19:78:7b:1e:c9:b5:c3:89: a8:58:7c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5SqXjAHgBwXJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YzEzYzc2N2EtYTcwZC00YTAyLThmZWMtNDI1ZGYyMGI2N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooLvxgkwoTz7brm7c41r7pLUgtwJ4/FXjQ8/ az8waba0z+9bZhCIrLv/pZMjdDL7JcM9l7VrOe6j35q8OCs0IrXJoL4jSWfSxhd5 PPQm8nHrShql6V5+34v17ofksnRZOZrr0gFsDF2JlpwWCT00WvFHI161vPsAFHJG DBusE8FkwY1NE8H8UKO5CXivjf4seLA8kJKNEnFi8LrvpA/kGlyO+jlKcGLFyOjP HTXaENEsbAjGtx1Ovn9Xuf/V2Te3zQp0uS2S/esdMuqz+wwb30EXS7Vk96tU5/LJ V4SvLeXUZ+FhzASmNgqSZVovaMOyQt6S/fZrSyl+w83DeTcSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMshv22mL/2Kfa/d79aUkCHzJsB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjhmOTcxYjctMDViNS0z ZTU1LWFhMWEtZWJhNWMwMjZhNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9VfanLAmhMGH8xYdNst0fXz8BEStg3ZLE8IYNrieThMJqeA1RVxLD2 lMwtfNY99Cs1rg9nEQGKbM9L+zEgIYZqaY1D3JIRhccNs/o2KCCAlZacicJxSj+v K3Vd3vyxwn21XT93ECzTZ4GCRIlCeTnlyY0VJosCgsf30e2zeKNlC5wYXF5MNvVs GvcpxyADrHWhBZVJ070VtuaTP6AE4bWw0jUi3IPHaOX1/+E1kLdFT6S0OLyWRDON Sq2UuEG5odDZr1jOVE9ggOR0PYVKr4GYMuGT3U0ofvrfn/9o5TL9nUbjS30HAA6m e9iXeWVC0BFhs6AZeHseybXDiahYfOg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:19:51 2026 by rpki-client