$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa File: 2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa (raw, json) Hash identifier: 47TopUvrWRU+hJFqxM9PXpFDrFtmXH+Pv9pYxCwA4cs= Subject key identifier: 32:F3:00:E8:6D:81:E5:CC:3C:92:D8:D5:20:56:08:29:81:FB:22:45 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F8CA45B0215D523D15E00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 53813 IP address blocks: 209.55.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:8c:a4:5b:02:15:d5:23:d1:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=f4244ba0-d7f7-4e0e-b1e2-fec35dd74df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:6e:4b:bc:5c:b3:04:88:39:da:b9:84:07: bb:ad:bc:ba:97:e8:0e:65:75:00:f6:b8:f1:31:75: 33:91:d4:ee:11:7f:b5:02:92:68:ae:c4:eb:89:b0: 94:05:0a:cf:30:70:c8:23:3d:f7:39:b4:cb:ed:72: 3d:ef:66:54:d2:0e:ae:58:46:c9:0d:57:dd:ef:ae: 43:ac:00:7a:78:10:2c:e1:81:22:1e:b4:01:22:bf: e5:b5:c8:a7:5d:1b:db:14:f3:28:98:93:67:65:05: 10:e0:13:bd:ac:cc:73:96:aa:6b:d6:21:fd:3f:6a: 67:ab:5f:cd:14:29:1a:96:e3:88:4d:e0:39:8f:8c: 04:c6:cf:47:bf:8c:2e:a5:cc:b4:91:ad:47:b6:be: a3:31:3c:5c:14:a9:83:e4:47:29:9e:09:e8:23:0e: c9:29:48:e1:a7:c8:ca:d4:bf:2b:73:93:ef:30:02: 29:da:6a:31:e9:c8:6c:f9:6f:73:a9:1a:50:91:47: 4d:b9:f3:81:a0:18:79:40:f3:52:f6:76:1a:bb:7c: 8c:84:55:c7:c7:f5:2d:f7:2d:7b:f7:02:f7:47:f9: ef:95:76:57:00:23:66:e2:2f:c0:2b:6c:de:f4:16: 4a:e9:3f:03:ef:ac:84:82:af:92:db:12:d2:5e:f2: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:00:E8:6D:81:E5:CC:3C:92:D8:D5:20:56:08:29:81:FB:22:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1b:37:ee:20:cd:12:11:64:2b:e9:70:47:6f:61:21:99:08: e7:f0:03:b9:f5:e3:cb:85:62:05:52:e2:52:23:b9:52:02:a6: ed:fc:40:6d:ca:bc:54:e3:29:ea:ec:87:28:ca:60:2a:c3:f3: 33:86:92:6d:7a:25:81:13:df:d9:3c:03:86:71:51:e3:82:9c: e4:93:22:bb:64:c7:27:33:19:ca:7f:1b:fa:49:ce:11:fc:ae: fe:59:9a:51:83:76:ee:e7:8a:39:58:ca:5d:94:21:3d:4e:4b: 3c:44:3c:b2:0f:22:62:71:e9:5e:3d:56:cc:6c:98:2e:81:e5: 0d:16:82:ec:49:35:d4:83:a7:a8:e9:7e:74:14:ab:00:b3:79: ae:ef:05:9a:61:f6:9d:a8:14:2f:29:bf:d8:3e:76:d3:62:6b: 49:69:20:49:5f:93:d1:43:fe:98:ca:0c:eb:ec:2a:d1:7a:a9: 5c:92:d9:74:ac:c7:65:a1:9a:7f:73:6a:db:13:b5:8d:b5:16: 76:d3:a7:cc:43:4c:c9:c1:cd:fb:69:3c:45:2c:2c:3e:0f:83: de:9c:2b:4d:24:3d:77:44:e8:db:c9:03:43:ac:31:2b:31:16: f7:76:60:81:e4:5a:fc:5a:ce:4b:ec:aa:14:0c:8d:c4:7d:2a: 95:5e:30:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT4ykWwIV1SPRXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZjQyNDRiYTAtZDdmNy00ZTBlLWIxZTItZmVjMzVkZDc0ZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOluS7xcswSIOdq5hAe7rby6l+gOZXUA9rjx MXUzkdTuEX+1ApJorsTribCUBQrPMHDIIz33ObTL7XI972ZU0g6uWEbJDVfd765D rAB6eBAs4YEiHrQBIr/ltcinXRvbFPMomJNnZQUQ4BO9rMxzlqpr1iH9P2pnq1/N FCkaluOITeA5j4wExs9Hv4wupcy0ka1Htr6jMTxcFKmD5EcpngnoIw7JKUjhp8jK 1L8rc5PvMAIp2mox6chs+W9zqRpQkUdNufOBoBh5QPNS9nYau3yMhFXHx/Ut9y17 9wL3R/nvlXZXACNm4i/AK2ze9BZK6T8D76yEgq+S2xLSXvKWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLzAOhtgeXMPJLY1SBWCCmB+yJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmNiNmU2MjktOWZkMi0z MWE3LTlmM2ItNGY2MTJjM2NlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAobN+4gzRIRZCvpcEdvYSGZCOfwA7n148uFYgVS4lIjuVICpu38QG3K vFTjKershyjKYCrD8zOGkm16JYET39k8A4ZxUeOCnOSTIrtkxyczGcp/G/pJzhH8 rv5ZmlGDdu7nijlYyl2UIT1OSzxEPLIPImJx6V49VsxsmC6B5Q0WguxJNdSDp6jp fnQUqwCzea7vBZph9p2oFC8pv9g+dtNia0lpIElfk9FD/pjKDOvsKtF6qVyS2XSs x2Whmn9zatsTtY21FnbTp8xDTMnBzftpPEUsLD4Pg96cK00kPXdE6NvJA0OsMSsx Fvd2YIHkWvxazkvsqhQMjcR9KpVeMJU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:54 2026 by rpki-client