$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa File: afb5daae-194e-3c70-a1c7-61e5faf147c0.roa (raw, json) Hash identifier: 24qvI0pQ1ZiRckU8o7jfgogFJQjRW0wFCWHjZUThxfY= Subject key identifier: AD:C9:F0:01:C1:CE:0B:1B:71:2B:80:2B:A8:FA:DE:FB:01:91:91:49 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F8FD9A7CE632A351F2300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 209.55.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:8f:d9:a7:ce:63:2a:35:1f:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=841b3dc2-c3f4-4416-b5ca-01aaec3b15bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:39:93:53:84:1e:3a:7c:ad:00:48:64:be:6e: f7:72:cb:5b:c8:01:f3:bf:dd:77:f8:9a:96:05:ed: eb:34:eb:a8:a2:d2:04:14:80:89:a6:4e:f9:e7:a3: 73:e7:c3:63:fa:84:2a:22:8a:12:ad:ee:cb:4f:81: 4e:0b:a7:7e:06:c8:0c:ad:cf:bf:36:0b:88:02:31: 6f:9c:09:e9:af:e0:7f:93:fa:88:7a:8b:b2:2d:f9: e4:01:c5:6a:70:f7:e9:53:f5:9f:f1:ff:13:70:47: db:6c:b7:c8:4b:d4:a9:8f:c3:3d:4a:f3:9a:8b:aa: b4:87:5e:10:9b:d6:3f:80:41:e4:52:5b:b1:ca:c8: e2:0f:3d:70:ec:33:73:c8:04:b6:30:98:14:73:02: 0d:e7:3e:3c:7a:39:be:cb:12:46:d7:bc:f2:ac:73: fa:0f:70:28:1d:a3:b3:6d:14:4a:c0:91:88:26:72: ee:a5:fb:89:2d:60:54:8f:8b:a4:da:18:91:e2:95: 1b:b3:5d:87:7f:f3:49:34:7f:97:81:b4:19:09:97: 22:b4:85:45:1b:e2:02:57:0c:ac:73:2c:1a:d5:b6: 92:f4:68:91:f0:d8:10:76:c8:b9:df:4a:97:7a:ec: e9:79:91:aa:2a:d7:c6:2b:af:4e:b1:17:04:c3:8f: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C9:F0:01:C1:CE:0B:1B:71:2B:80:2B:A8:FA:DE:FB:01:91:91:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a1:bd:5b:7f:0a:cd:d8:0f:0f:e1:00:f0:f6:87:33:08:a5: 29:88:8c:0b:69:9a:cf:14:2d:94:30:59:7f:7c:2a:b5:38:fd: 62:4a:a7:c0:be:5a:32:47:85:51:4f:a7:8c:a6:39:dc:4f:4d: 0a:17:03:8f:ff:52:b9:03:2f:d4:58:5b:4e:7e:c5:d4:8a:82: 05:97:86:86:be:c6:c5:5a:d3:37:e9:14:4c:77:4a:c3:d4:db: 47:89:b7:28:b0:05:01:32:90:6b:06:86:d5:17:6d:f7:5f:eb: a5:15:fb:f8:8a:b0:b2:13:6e:91:07:8d:74:c7:a7:dc:06:b7: 10:10:4a:25:fb:7d:0b:84:33:71:fc:2c:1b:11:f5:56:26:e0: 14:ba:a7:27:08:e6:e0:8d:7f:ff:d7:26:2e:fa:6a:62:9e:8a: 77:c5:0f:f3:d5:1a:aa:8d:ad:a1:87:c4:38:59:71:b8:d3:e1: c0:bf:d8:05:87:0d:28:ff:08:fd:ed:9a:97:b4:e6:69:1a:4b: de:9c:a8:ac:5d:93:a4:bf:de:a7:b2:4e:1b:78:c9:10:84:ed: 7e:7b:27:e5:d8:c9:07:76:f1:fe:c9:ea:2d:39:fa:8e:e2:90: 43:fe:ec:42:98:dc:a6:23:11:fc:74:08:5c:fc:11:5c:f6:57: 97:1e:0a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT4/Zp85jKjUfIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ODQxYjNkYzItYzNmNC00NDE2LWI1Y2EtMDFhYWVjM2IxNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzmTU4QeOnytAEhkvm73cstbyAHzv913+JqW Be3rNOuootIEFICJpk7556Nz58Nj+oQqIooSre7LT4FOC6d+BsgMrc+/NguIAjFv nAnpr+B/k/qIeouyLfnkAcVqcPfpU/Wf8f8TcEfbbLfIS9Spj8M9SvOai6q0h14Q m9Y/gEHkUluxysjiDz1w7DNzyAS2MJgUcwIN5z48ejm+yxJG17zyrHP6D3AoHaOz bRRKwJGIJnLupfuJLWBUj4uk2hiR4pUbs12Hf/NJNH+XgbQZCZcitIVFG+ICVwys cywa1baS9GiR8NgQdsi530qXeuzpeZGqKtfGK69OsRcEw4/bWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3J8AHBzgsbcSuAK6j63vsBkZFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWZiNWRhYWUtMTk0ZS0z YzcwLWExYzctNjFlNWZhZjE0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKhvVt/Cs3YDw/hAPD2hzMIpSmIjAtpms8ULZQwWX98KrU4/WJKp8C+ WjJHhVFPp4ymOdxPTQoXA4//UrkDL9RYW05+xdSKggWXhoa+xsVa0zfpFEx3SsPU 20eJtyiwBQEykGsGhtUXbfdf66UV+/iKsLITbpEHjXTHp9wGtxAQSiX7fQuEM3H8 LBsR9VYm4BS6pycI5uCNf//XJi76amKeinfFD/PVGqqNraGHxDhZcbjT4cC/2AWH DSj/CP3tmpe05mkaS96cqKxdk6S/3qeyTht4yRCE7X57J+XYyQd28f7J6i05+o7i kEP+7EKY3KYjEfx0CFz8EVz2V5ceCpw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:34 2026 by rpki-client