$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8d03e912-7153-3125-b7a3-e65dd3896c63.roa File: 8d03e912-7153-3125-b7a3-e65dd3896c63.roa (raw, json) Hash identifier: Dw/VgwLJV5YkMkRp/ja20/7FTCY+bIZc81j9UkSw778= Subject key identifier: 85:A4:A3:0F:97:4A:38:5C:01:05:38:F7:C2:FD:B9:FD:0C:D4:15:1C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F996D955779E6C210A280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8d03e912-7153-3125-b7a3-e65dd3896c63.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 209.55.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:99:6d:95:57:79:e6:c2:10:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=64995d18-f5a0-404b-8ef8-7269ae319e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:ee:65:72:fa:dd:de:4d:05:37:6d:8e:43: 5f:8a:47:99:a1:f7:c1:e9:93:c9:23:43:91:fd:45: ad:63:5a:64:b3:c0:a4:05:e3:61:fd:21:3c:90:cf: c2:f2:15:0a:41:81:b9:f9:7f:70:04:5f:54:33:d7: 9f:72:3a:e9:a8:6a:af:2a:90:0b:a0:b1:96:6c:9f: a1:9d:ee:95:5b:b3:83:c6:a3:56:e3:33:9a:94:f4: 4c:42:c3:03:86:f2:95:30:08:e2:5c:4b:3f:97:19: 46:bc:81:44:46:c5:0e:b9:bc:e9:36:9b:67:3b:f5: dd:69:b4:f7:3e:69:26:7e:17:5e:1c:21:f3:5d:27: 68:75:14:2e:28:69:85:ac:3f:f5:ed:bd:3f:1f:dc: 92:50:7c:4b:30:9d:e3:c9:82:06:d9:80:33:b3:01: 79:36:de:27:07:4e:34:7c:98:3a:c6:b6:79:0e:cc: 49:ef:27:89:32:76:05:4b:ed:62:b6:d2:d2:15:32: a6:f3:36:5c:79:93:5b:2c:cd:20:6f:9a:bf:d2:17: 86:01:66:6d:46:9e:6f:16:62:7d:c4:35:46:25:40: 1f:00:39:8b:e4:93:58:0e:40:0c:95:9b:51:86:5d: 6a:5c:fc:3f:18:a3:e4:aa:f8:ad:95:65:9e:0c:c2: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A4:A3:0F:97:4A:38:5C:01:05:38:F7:C2:FD:B9:FD:0C:D4:15:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8d03e912-7153-3125-b7a3-e65dd3896c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fb:18:5c:7d:96:6f:40:75:b8:fc:24:6d:95:d4:0c:f7:13: 27:8d:22:a0:e4:19:9d:8d:da:b3:d2:ed:45:a8:7a:a7:42:04: 0b:d4:31:4a:10:54:32:47:34:8f:9d:b3:5c:48:e1:a3:a8:78: db:77:44:4e:92:6e:4e:7a:9f:d8:f6:e9:36:8b:3f:05:75:bc: 5e:91:35:39:9b:b8:da:bb:eb:70:a3:a3:4c:3a:1c:00:bf:b7: 5e:10:d5:e1:b3:98:d7:69:08:e4:7b:20:7a:5c:7e:ad:f3:67: 16:50:52:8e:1f:a7:16:50:3a:45:05:ec:6e:f0:ae:99:db:54: 68:05:08:c6:ac:f0:38:a8:61:7c:65:f0:22:e0:f3:fa:d8:c6: 74:f4:e0:4d:27:ad:82:9a:c2:45:81:e7:5a:87:13:84:10:0b: bd:3e:5e:6b:1f:67:b9:cb:b4:24:29:da:7b:c4:dc:a3:de:42: f4:f8:ee:30:9f:84:7e:01:76:fa:f3:3e:46:56:f7:5b:12:c9: d7:cd:41:f2:c1:9c:ec:ab:0a:48:de:9e:e6:52:bf:f4:35:2e: 0b:3b:aa:58:d3:05:9d:38:39:56:a7:06:53:5b:62:e1:47:06: fa:9c:dd:43:bc:aa:35:a7:dc:2a:aa:81:15:e3:79:06:a2:55: 7c:0a:79:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5ltlVd55sIQooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NjQ5OTVkMTgtZjVhMC00MDRiLThlZjgtNzI2OWFlMzE5ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLDuZXL63d5NBTdtjkNfikeZoffB6ZPJI0OR /UWtY1pks8CkBeNh/SE8kM/C8hUKQYG5+X9wBF9UM9efcjrpqGqvKpALoLGWbJ+h ne6VW7ODxqNW4zOalPRMQsMDhvKVMAjiXEs/lxlGvIFERsUOubzpNptnO/XdabT3 PmkmfhdeHCHzXSdodRQuKGmFrD/17b0/H9ySUHxLMJ3jyYIG2YAzswF5Nt4nB040 fJg6xrZ5DsxJ7yeJMnYFS+1ittLSFTKm8zZceZNbLM0gb5q/0heGAWZtRp5vFmJ9 xDVGJUAfADmL5JNYDkAMlZtRhl1qXPw/GKPkqvitlWWeDMJHhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWkow+XSjhcAQU498L9uf0M1BUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGQwM2U5MTItNzE1My0z MTI1LWI3YTMtZTY1ZGQzODk2YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD77GFx9lm9Adbj8JG2V1Az3EyeNIqDkGZ2N2rPS7UWoeqdCBAvUMUoQ VDJHNI+ds1xI4aOoeNt3RE6Sbk56n9j26TaLPwV1vF6RNTmbuNq763Cjo0w6HAC/ t14Q1eGzmNdpCOR7IHpcfq3zZxZQUo4fpxZQOkUF7G7wrpnbVGgFCMas8DioYXxl 8CLg8/rYxnT04E0nrYKawkWB51qHE4QQC70+XmsfZ7nLtCQp2nvE3KPeQvT47jCf hH4BdvrzPkZW91sSydfNQfLBnOyrCkjenuZSv/Q1Lgs7qljTBZ04OVanBlNbYuFH Bvqc3UO8qjWn3CqqgRXjeQaiVXwKeaA= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:10 2026 by rpki-client