$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e38cb166-b516-3781-a90d-5e5fdfd40689.roa File: e38cb166-b516-3781-a90d-5e5fdfd40689.roa (raw, json) Hash identifier: rUBQQ1cB0sNLtHMJfcSarK7yVNtBiw3UrUAhdxdfJsg= Subject key identifier: ED:0C:13:35:01:17:C1:A4:F2:4C:30:3A:42:25:8E:DC:74:67:D7:C2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA18719A22CFED69A6380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e38cb166-b516-3781-a90d-5e5fdfd40689.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 209.55.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a1:87:19:a2:2c:fe:d6:9a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=645e3b4f-1a74-46e9-9502-0b35767d4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:55:92:1b:56:f9:5c:e8:29:1d:70:91:7b: 5a:9d:7e:a3:88:6c:34:1c:fb:ae:b2:12:75:2c:c2: 6a:d7:5f:7a:0b:c8:fa:63:6e:95:0d:31:3c:16:d8: 17:f4:4e:ea:8c:98:56:0a:f8:d0:e8:e2:cb:ee:8f: ad:88:0d:7f:2b:89:18:c7:ca:b7:ee:41:b6:88:e8: b4:45:b4:6f:b6:05:f4:64:28:fb:02:d5:e4:17:dc: 1f:74:92:6c:db:7c:73:30:96:54:d7:c9:ce:39:07: b4:62:6d:67:1b:19:e6:45:e9:0f:91:e8:46:ea:14: ad:cc:86:7b:1d:71:cc:da:f5:89:c1:e1:d1:da:7a: 21:33:93:f5:57:58:18:d7:75:13:26:3a:b8:f3:90: a3:76:90:a1:76:e4:68:ff:dd:77:c3:d1:6b:b7:16: 6f:a6:ae:32:1a:6b:15:ef:7e:37:c6:1d:80:8b:c3: a5:c1:f9:ed:bf:6e:77:16:a3:e6:d9:98:11:9f:da: c0:71:ed:bc:ee:8c:d8:5b:56:61:63:88:b7:1c:c2: 19:b2:47:c8:54:2a:24:df:76:af:76:12:46:44:09: d1:eb:6a:cc:b2:46:a1:64:62:2c:d1:d7:bb:94:3e: da:5b:f2:e5:2b:24:05:8d:60:e6:e0:85:ab:b2:79: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0C:13:35:01:17:C1:A4:F2:4C:30:3A:42:25:8E:DC:74:67:D7:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e38cb166-b516-3781-a90d-5e5fdfd40689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cd:61:47:1e:46:0b:d5:12:76:1f:2b:a8:21:86:31:ad:4f: 09:b0:18:36:98:68:f4:dd:68:fb:0d:70:97:c6:8a:0e:fe:ea: a1:03:c9:05:a7:2b:25:9c:e5:19:63:1a:c5:de:39:66:42:89: 67:98:f2:e3:a4:5e:65:5c:5a:74:c7:f8:f4:64:90:f1:ad:d8: 45:9b:53:47:68:96:8b:1e:84:65:de:13:4a:2a:e0:be:2f:d3: 5d:3a:96:33:34:9d:98:76:b1:0f:a9:25:50:ca:40:54:f9:9f: 1b:65:92:2b:35:63:98:a0:e1:3e:fd:a0:8e:7c:8c:9f:e9:57: dd:da:f7:c4:26:ec:63:0c:ba:de:22:60:c7:db:cc:c3:23:dc: 03:2d:46:e7:b6:99:ca:dd:50:36:5b:b9:24:1e:78:11:cf:41: c9:7d:4c:0e:54:ce:7d:3f:7d:5f:eb:7c:dc:8b:e9:72:5d:0d: 06:d1:40:b0:76:76:44:95:e4:d9:48:a8:e1:45:f8:7a:78:bc: 12:07:fd:90:d0:0d:05:24:2d:63:8d:ab:1b:f5:07:27:4e:7a: d5:38:e9:60:92:f7:eb:92:62:6e:2d:94:4b:38:57:a3:f8:76: 01:86:c7:a5:72:2a:06:cc:3d:09:2c:c7:cb:4b:c7:c6:bd:01: a9:8f:7a:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6GHGaIs/taaY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NjQ1ZTNiNGYtMWE3NC00NmU5LTk1MDItMGIzNTc2N2Q0ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFVkhtW+VzoKR1wkXtanX6jiGw0HPuushJ1 LMJq1196C8j6Y26VDTE8FtgX9E7qjJhWCvjQ6OLL7o+tiA1/K4kYx8q37kG2iOi0 RbRvtgX0ZCj7AtXkF9wfdJJs23xzMJZU18nOOQe0Ym1nGxnmRekPkehG6hStzIZ7 HXHM2vWJweHR2nohM5P1V1gY13UTJjq485CjdpChduRo/913w9FrtxZvpq4yGmsV 7343xh2Ai8Olwfntv253FqPm2ZgRn9rAce287ozYW1ZhY4i3HMIZskfIVCok33av dhJGRAnR62rMskahZGIs0de7lD7aW/LlKyQFjWDm4IWrsnmUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0MEzUBF8Gk8kwwOkIljtx0Z9fCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTM4Y2IxNjYtYjUxNi0z NzgxLWE5MGQtNWU1ZmRmZDQwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELNYUceRgvVEnYfK6ghhjGtTwmwGDaYaPTdaPsNcJfGig7+6qEDyQWn KyWc5RljGsXeOWZCiWeY8uOkXmVcWnTH+PRkkPGt2EWbU0dolosehGXeE0oq4L4v 0106ljM0nZh2sQ+pJVDKQFT5nxtlkis1Y5ig4T79oI58jJ/pV93a98Qm7GMMut4i YMfbzMMj3AMtRue2mcrdUDZbuSQeeBHPQcl9TA5Uzn0/fV/rfNyL6XJdDQbRQLB2 dkSV5NlIqOFF+Hp4vBIH/ZDQDQUkLWONqxv1BydOetU46WCS9+uSYm4tlEs4V6P4 dgGGx6VyKgbMPQksx8tLx8a9AamPeoE= -----END CERTIFICATE-----Generated at Fri Apr 17 13:56:17 2026 by rpki-client