$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa File: 5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa (raw, json) Hash identifier: +hqxHJ251T+tD+K/RM09P3SCyb3pLNwDFDjMZTOmjUs= Subject key identifier: E6:BE:93:C9:47:E6:5F:8C:F8:39:63:32:21:27:F5:C4:B4:30:7E:1F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAAC07A137230D29C2590 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 209.55.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:aa:c0:7a:13:72:30:d2:9c:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=662a6881-ed10-4f30-a74d-a68453d2f081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:35:9e:74:f3:49:fd:52:97:61:30:3d:27: cb:57:de:76:58:af:91:42:6d:e4:9b:46:ab:ad:ed: 1b:ca:d8:98:c2:82:b7:fa:4e:d0:7a:69:60:f6:b2: c1:59:cc:1f:82:13:a4:d6:f6:0c:e0:c7:59:0a:0e: 99:4f:bb:00:3b:f4:54:68:a6:90:6c:84:50:34:14: a1:87:94:65:9f:a3:a4:61:a0:2f:db:fc:64:6a:cd: 08:fa:08:24:e7:2c:51:c5:75:bc:f6:70:78:0a:bc: 8f:a1:96:10:90:de:4c:c3:8c:62:47:e7:ae:d1:ca: c2:01:d5:9a:11:89:1e:89:c1:05:f7:56:0b:d6:44: 5b:8f:39:b8:d2:2d:09:ee:36:0a:1f:7e:c3:8d:d3: 8b:72:72:a6:ea:d4:83:b6:8a:6f:c4:92:9d:f9:1a: 0d:d9:01:18:90:0f:1c:49:12:6b:af:34:60:78:9f: 96:a0:fd:98:53:bf:d7:38:2f:d2:89:a1:36:98:4b: c3:0a:42:56:db:23:e5:d0:35:e7:53:e8:23:38:06: 0a:83:a9:de:11:6a:d5:23:28:17:fa:fd:ec:19:f0: 5c:f2:aa:b8:85:26:a8:c7:82:39:96:60:37:23:29: 1d:75:5e:33:28:62:d0:71:5e:2c:f3:99:cf:eb:af: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BE:93:C9:47:E6:5F:8C:F8:39:63:32:21:27:F5:C4:B4:30:7E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c7:8e:63:be:79:31:1c:6b:8b:4f:ce:49:24:7e:b2:92:3f: c2:45:c9:bc:c5:82:89:93:21:4f:28:c1:d0:1e:4b:1e:72:e0: 5a:14:f6:c3:85:ca:16:d7:05:9a:0e:35:00:33:9f:96:ec:fb: d8:72:8d:32:e0:ec:8f:1d:7e:40:5d:bb:58:4d:2c:ec:d3:40: e0:2b:28:fd:ea:86:08:bb:40:44:e5:b2:58:cb:cd:98:16:b6: e6:2b:c3:69:6f:1d:25:65:db:2a:62:3f:26:1b:27:69:bb:51: 96:ed:5b:28:9f:c9:23:e0:d6:ac:d2:6c:9a:c0:db:ed:ce:5a: a8:55:20:ba:f4:91:13:19:68:c1:ac:a9:7d:a3:e1:72:b2:01: 87:48:e8:f2:be:89:ac:ff:79:32:3c:43:a9:88:1f:c7:5a:20: 88:45:e5:1f:5c:63:6e:c5:49:84:ba:1e:8b:f4:e4:5a:02:11: 25:13:1a:61:b1:46:ae:37:2a:a5:d2:19:6f:6b:f4:33:49:3f: c4:a9:5c:f5:74:99:2d:b3:04:06:93:18:d2:d0:d3:20:5d:7c: d4:96:20:f2:69:fb:c3:06:c9:c4:d8:b7:92:9e:b5:48:fd:e2: 4c:d4:37:ef:1d:0e:12:60:97:25:0a:72:4f:0b:ad:d4:e3:b6: f0:ee:db:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6rAehNyMNKcJZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NjYyYTY4ODEtZWQxMC00ZjMwLWE3NGQtYTY4NDUzZDJmMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HY1nnTzSf1Sl2EwPSfLV952WK+RQm3km0ar re0bytiYwoK3+k7Qemlg9rLBWcwfghOk1vYM4MdZCg6ZT7sAO/RUaKaQbIRQNBSh h5Rln6OkYaAv2/xkas0I+ggk5yxRxXW89nB4CryPoZYQkN5Mw4xiR+eu0crCAdWa EYkeicEF91YL1kRbjzm40i0J7jYKH37DjdOLcnKm6tSDtopvxJKd+RoN2QEYkA8c SRJrrzRgeJ+WoP2YU7/XOC/SiaE2mEvDCkJW2yPl0DXnU+gjOAYKg6neEWrVIygX +v3sGfBc8qq4hSaox4I5lmA3IykddV4zKGLQcV4s85nP66++PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa+k8lH5l+M+DljMiEn9cS0MH4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWY5Zjg5MTAtM2ZkNy0z NjE2LWIwOTUtNDE1YjJlMmUwZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3HjmO+eTEca4tPzkkkfrKSP8JFybzFgomTIU8owdAeSx5y4FoU9sOF yhbXBZoONQAzn5bs+9hyjTLg7I8dfkBdu1hNLOzTQOArKP3qhgi7QETlsljLzZgW tuYrw2lvHSVl2ypiPyYbJ2m7UZbtWyifySPg1qzSbJrA2+3OWqhVILr0kRMZaMGs qX2j4XKyAYdI6PK+iaz/eTI8Q6mIH8daIIhF5R9cY27FSYS6Hov05FoCESUTGmGx Rq43KqXSGW9r9DNJP8SpXPV0mS2zBAaTGNLQ0yBdfNSWIPJp+8MGycTYt5KetUj9 4kzUN+8dDhJglyUKck8LrdTjtvDu22A= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:00 2026 by rpki-client