$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa File: 613fa299-8908-33cb-9007-d2458ea0cfaf.roa (raw, json) Hash identifier: br2kNGbkwu4gmgRrRzEhQhbgDDDVTKSNbNRJy9W9gCg= Subject key identifier: 95:31:EA:82:13:FA:A0:C4:EA:95:2C:32:CD:5E:C7:13:F4:BC:9C:5A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA1469920E6909203A0C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 209.55.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a1:46:99:20:e6:90:92:03:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=1e8eb546-5533-44a3-b674-58bfaeb60b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:8d:39:db:86:9e:71:15:98:af:01:85:d6: ea:e8:3a:8f:f6:e4:5f:ef:0e:3b:6e:c2:5b:d3:dc: ac:13:dc:4d:f9:ed:74:9c:41:9c:8a:ca:fa:06:a6: d2:1c:bd:0e:03:ec:16:47:50:04:9c:e9:6f:05:bc: 9e:ed:ab:a9:7d:39:c9:a7:47:69:96:87:4c:ba:38: f9:86:5e:e5:cb:b1:b5:cc:74:73:ef:06:8c:35:c2: 7a:9d:8a:5d:c1:87:b8:03:94:c2:73:e1:82:1b:fa: e7:85:1a:ff:f4:72:f2:90:37:08:4b:05:4b:30:db: ee:41:b2:a3:0a:33:fb:03:96:a2:fa:21:d8:63:fc: 47:7d:3a:e8:95:6a:e8:b6:1d:47:4a:02:de:95:72: c7:9a:6b:49:71:dc:24:88:b2:e4:c4:d0:73:13:b4: db:ba:19:51:58:f6:de:1f:3a:1a:e1:83:09:ef:4c: ba:f9:e7:98:74:7a:d4:ff:c1:b2:43:63:25:db:72: 17:c3:a7:62:85:7f:0e:e5:54:4e:7f:45:44:73:67: d4:5f:17:a4:26:e7:77:af:6e:98:14:b1:6d:c9:40: e3:3e:62:c7:64:f6:1d:bd:d9:56:99:35:87:72:ec: 1a:42:09:f2:1f:5d:18:6c:25:ea:d3:66:f8:e8:f0: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:31:EA:82:13:FA:A0:C4:EA:95:2C:32:CD:5E:C7:13:F4:BC:9C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/613fa299-8908-33cb-9007-d2458ea0cfaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2b:fa:7e:95:b8:c4:06:c7:4c:e8:8d:f1:c5:64:fa:e7:55: 3c:b5:2f:c1:ab:c9:70:8e:77:c7:64:a4:d9:28:32:de:80:01: 59:7f:14:68:72:52:b6:15:e5:0b:8c:7d:0e:92:3c:bf:2f:25: 33:ba:32:15:85:82:75:9c:2a:0b:f9:c0:e0:aa:d6:df:87:7d: 43:db:87:5b:c1:d5:12:14:a2:a4:63:b3:4c:67:d4:19:12:2d: c1:e2:4e:24:87:75:54:f2:06:03:ea:82:3c:ef:da:17:c5:de: b3:7b:2e:57:3f:6a:9e:8f:26:55:b8:0a:4d:21:49:ef:9f:ad: 58:10:e8:df:93:6e:19:e8:a2:43:e6:9e:33:69:d4:74:eb:1e: 6d:5a:fe:8d:5d:57:8b:86:dd:cc:f9:36:ff:3a:08:e6:ab:34: 4f:5e:b9:3d:05:d3:85:3f:51:ba:09:2e:48:78:67:3d:39:79: 1e:ce:d6:e3:b3:14:b7:29:ed:5e:f8:3b:63:8b:ad:11:bd:2f: 89:d6:a2:df:55:1b:fe:55:4d:88:ca:7f:c3:8c:61:71:9c:b7: 80:41:af:35:d7:77:1d:43:8b:74:8d:4a:58:1c:59:08:d7:99: 2c:94:df:45:fd:b0:1a:f0:8c:6a:ff:1a:e8:41:2a:4e:90:43: 71:95:41:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6FGmSDmkJIDoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MWU4ZWI1NDYtNTUzMy00NGEzLWI2NzQtNThiZmFlYjYwYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseSNOduGnnEVmK8Bhdbq6DqP9uRf7w47bsJb 09ysE9xN+e10nEGcisr6BqbSHL0OA+wWR1AEnOlvBbye7aupfTnJp0dplodMujj5 hl7ly7G1zHRz7waMNcJ6nYpdwYe4A5TCc+GCG/rnhRr/9HLykDcISwVLMNvuQbKj CjP7A5ai+iHYY/xHfTrolWroth1HSgLelXLHmmtJcdwkiLLkxNBzE7TbuhlRWPbe Hzoa4YMJ70y6+eeYdHrU/8GyQ2Ml23IXw6dihX8O5VROf0VEc2fUXxekJud3r26Y FLFtyUDjPmLHZPYdvdlWmTWHcuwaQgnyH10YbCXq02b46PD2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUx6oIT+qDE6pUsMs1exxP0vJxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjEzZmEyOTktODkwOC0z M2NiLTkwMDctZDI0NThlYTBjZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIr+n6VuMQGx0zojfHFZPrnVTy1L8GryXCOd8dkpNkoMt6AAVl/FGhy UrYV5QuMfQ6SPL8vJTO6MhWFgnWcKgv5wOCq1t+HfUPbh1vB1RIUoqRjs0xn1BkS LcHiTiSHdVTyBgPqgjzv2hfF3rN7Llc/ap6PJlW4Ck0hSe+frVgQ6N+TbhnookPm njNp1HTrHm1a/o1dV4uG3cz5Nv86COarNE9euT0F04U/UboJLkh4Zz05eR7O1uOz FLcp7V74O2OLrRG9L4nWot9VG/5VTYjKf8OMYXGct4BBrzXXdx1Di3SNSlgcWQjX mSyU30X9sBrwjGr/GuhBKk6QQ3GVQVk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:55 2026 by rpki-client