$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa File: 8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa (raw, json) Hash identifier: u2+8X6Yx7UtLnZRRxlisTynRukcId8tcnl+O6I3vmWs= Subject key identifier: 83:FB:82:78:B0:FC:0D:DE:D4:C8:B9:9A:25:3A:5F:2A:A2:3E:21:F0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9440AC70A93C67991F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 209.55.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:94:40:ac:70:a9:3c:67:99:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=1c939e53-649f-48d6-a2b5-6c81e977bf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:2f:b8:65:d6:30:17:09:75:00:db:9b:65: fa:95:e5:ca:02:9d:ce:83:43:6f:84:89:eb:7c:80: 1e:1a:ed:87:82:d1:0f:9b:3d:e7:d4:26:c1:b0:e1: 6c:97:91:73:39:2c:50:9f:1b:8f:ce:c3:c8:e5:8a: 2b:6a:16:19:8b:25:54:5e:4e:21:48:cb:cd:af:1c: 75:c2:4d:57:7d:00:ac:53:2f:89:8c:e6:04:1b:88: 0a:9e:cf:11:50:e0:21:28:9c:f7:42:2b:34:31:80: 20:0b:cb:9d:f3:5d:36:73:25:d0:dd:0f:9f:79:24: 26:9e:04:8d:0a:32:c3:25:aa:af:f2:6b:6a:d3:1c: 8b:5e:84:14:80:40:f0:c3:9c:58:c1:92:2f:90:9e: fd:74:82:89:6d:ef:20:51:40:df:a9:93:69:52:27: 40:8d:89:63:ed:88:b3:c0:84:c3:12:57:41:aa:da: 75:40:5b:13:c5:6e:a7:59:7b:44:f5:5d:b3:ca:19: cd:d4:8b:b4:cd:61:4e:27:57:f9:bd:fe:78:9c:aa: 40:3c:2c:3c:7c:71:81:e2:72:6b:80:f6:30:7f:48: 6e:51:df:ec:54:fe:30:a4:d4:83:d1:08:e4:47:34: ee:de:32:58:1b:42:74:6b:e9:4f:5b:2e:73:1b:0a: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:82:78:B0:FC:0D:DE:D4:C8:B9:9A:25:3A:5F:2A:A2:3E:21:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:89:f3:9b:b2:78:5b:01:7e:fe:51:f3:fe:e8:b2:b2:48:ad: 4e:6c:4a:51:bc:2b:5d:57:c7:4a:85:be:19:30:25:7b:99:db: 23:13:8a:c0:4f:4c:16:8a:b1:e5:32:27:03:ce:45:64:38:1d: c3:ef:da:f6:b7:82:21:36:0e:22:86:73:98:55:73:4c:4e:19: de:b2:10:54:0c:f3:46:3f:95:8e:90:ee:41:e2:1f:cf:ec:b0: 02:c1:7e:1e:bf:69:04:cc:5c:2f:f1:99:ec:fe:58:02:80:f2: ab:3d:f7:08:f1:5b:49:77:1f:56:0b:8a:79:88:d7:2f:d5:48: c9:33:fc:00:7a:6a:2d:1d:dc:9b:04:0d:c7:3a:34:c8:4e:43: d6:5b:e7:f2:2f:f0:64:64:d2:40:97:36:28:e9:c2:84:2f:50: f3:be:6e:0e:16:81:a2:f3:09:16:62:bc:58:85:f2:56:d1:23: 6c:8f:8a:44:dd:30:04:ed:89:c2:0c:9f:d8:65:ba:37:c2:bb: aa:24:e1:f5:d8:ec:32:06:ac:21:1b:6d:44:11:7e:b6:7b:d7: ff:3f:58:07:3e:d2:14:b9:a4:84:55:02:2e:6a:01:15:1f:ba: 95:b4:79:9f:c0:6d:e0:80:4e:f2:02:ae:49:ed:63:24:5c:7d: d7:62:45:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5RArHCpPGeZH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MWM5MzllNTMtNjQ5Zi00OGQ2LWEyYjUtNmM4MWU5NzdiZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMgvuGXWMBcJdQDbm2X6leXKAp3Og0NvhInr fIAeGu2HgtEPmz3n1CbBsOFsl5FzOSxQnxuPzsPI5YorahYZiyVUXk4hSMvNrxx1 wk1XfQCsUy+JjOYEG4gKns8RUOAhKJz3Qis0MYAgC8ud8102cyXQ3Q+feSQmngSN CjLDJaqv8mtq0xyLXoQUgEDww5xYwZIvkJ79dIKJbe8gUUDfqZNpUidAjYlj7Yiz wITDEldBqtp1QFsTxW6nWXtE9V2zyhnN1Iu0zWFOJ1f5vf54nKpAPCw8fHGB4nJr gPYwf0huUd/sVP4wpNSD0QjkRzTu3jJYG0J0a+lPWy5zGwoQUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP7gniw/A3e1Mi5miU6XyqiPiHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGZkYmM5ZTMtNzNhOC0z ZmNhLWIwNzItNWVjMzMwNmRlMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOJ85uyeFsBfv5R8/7osrJIrU5sSlG8K11Xx0qFvhkwJXuZ2yMTisBP TBaKseUyJwPORWQ4HcPv2va3giE2DiKGc5hVc0xOGd6yEFQM80Y/lY6Q7kHiH8/s sALBfh6/aQTMXC/xmez+WAKA8qs99wjxW0l3H1YLinmI1y/VSMkz/AB6ai0d3JsE Dcc6NMhOQ9Zb5/Iv8GRk0kCXNijpwoQvUPO+bg4WgaLzCRZivFiF8lbRI2yPikTd MATticIMn9hlujfCu6ok4fXY7DIGrCEbbUQRfrZ71/8/WAc+0hS5pIRVAi5qARUf upW0eZ/AbeCATvICrkntYyRcfddiRTg= -----END CERTIFICATE-----Generated at Fri Apr 17 20:40:20 2026 by rpki-client