$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa File: 8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa (raw, json) Hash identifier: ddLxk9bGGZqmjJMJnqflKLIbILtviSHhT2kYSVjdvA0= Subject key identifier: E5:98:18:94:C5:39:1E:64:C3:6D:C7:B1:33:E7:F5:EA:B4:3B:8F:64 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584D6EDA6320B940F3855FCC2A80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 6505 IP address blocks: 200.30.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:63:20:b9:40:f3:85:5f:cc:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=9615370c-056e-4370-88b8-a29e37f9a511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:c5:5e:4a:f2:d5:cc:eb:cb:f1:c0:d5:88: 39:5a:1e:85:ec:3e:7b:19:94:63:f4:c8:74:69:cb: 72:36:ea:88:de:79:79:12:9e:e1:81:71:06:a7:27: d3:9b:7f:4a:95:43:f1:80:77:f6:fa:27:98:df:cc: aa:43:1f:25:37:39:44:4d:ba:c0:92:ad:db:ff:99: 4b:fb:ba:cd:3e:0f:0d:60:13:ab:65:af:29:1b:6d: 61:b6:54:c6:83:25:bf:7d:db:91:58:7a:7a:9d:18: e2:bc:4a:3e:81:61:cb:be:91:e6:0b:b4:5e:e3:dc: 62:3f:0e:9c:6d:7a:5b:4c:d4:a6:ae:09:47:c0:1b: 1e:85:4c:5d:1a:a1:30:48:3a:3e:af:a4:39:85:b0: 81:17:31:43:79:86:32:ee:69:3b:ab:8e:d0:34:07: bb:79:ce:2b:b9:63:71:66:dc:f0:f2:5d:fc:9e:7c: ef:8f:f0:84:0e:92:9b:6c:81:da:a5:79:a3:dd:16: 64:9e:4c:72:63:db:55:69:e3:23:e4:bb:4f:fb:a1: 96:15:ed:c0:ef:1a:fa:b0:9a:ae:80:6c:2b:b7:6c: f4:2c:1b:ae:2e:ba:1c:d1:f7:6a:89:70:df:00:53: 76:f0:26:93:c9:4d:88:37:6d:76:65:46:a3:4e:05: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:98:18:94:C5:39:1E:64:C3:6D:C7:B1:33:E7:F5:EA:B4:3B:8F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 200.30.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:6d:62:eb:1b:9d:a2:0d:b3:d4:54:1c:f1:4a:ef:66:88:39: 71:f4:cd:b6:05:3e:e7:e7:71:46:3e:de:8e:d6:4e:7e:08:d8: b5:f3:ac:55:0b:23:ca:ba:d9:6f:a1:db:e8:e9:a6:e3:70:b8: a0:be:23:de:e2:9b:59:3a:1c:9f:fc:7d:4c:25:a0:3d:38:93: db:db:f7:2f:30:8e:f0:d7:1f:86:bd:cd:58:bd:4f:9e:8c:bd: 16:f3:30:0f:a3:d1:4c:d2:05:d2:88:0e:fa:c3:91:fb:e1:cd: 01:50:19:02:24:6e:4d:f1:23:21:25:38:a2:7c:9b:c4:6e:84: c7:3c:b5:52:93:db:bb:3f:6b:f4:ce:f1:95:58:6a:9e:a8:a3: f7:5e:c1:69:54:ad:26:de:01:89:68:4d:f4:d2:8c:fd:0d:3d: aa:7f:51:a2:31:41:70:1b:a3:7e:0e:72:25:d2:39:18:88:06: 96:1c:94:87:fc:d6:e9:ae:9c:de:cf:32:d9:18:64:ce:80:2a: 27:15:0a:09:1c:d2:ec:cd:8e:fd:b7:64:9d:8c:4e:82:f1:86: 79:c8:1c:14:01:de:85:d6:cb:44:ec:07:c5:d1:59:12:c3:6b: 1a:55:c5:f8:01:93:4c:f7:1c:e9:3c:07:55:46:ab:c5:ed:51: 92:d3:a3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mMguUDzhV/MKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk OTYxNTM3MGMtMDU2ZS00MzcwLTg4YjgtYTI5ZTM3ZjlhNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigvFXkry1czry/HA1Yg5Wh6F7D57GZRj9Mh0 actyNuqI3nl5Ep7hgXEGpyfTm39KlUPxgHf2+ieY38yqQx8lNzlETbrAkq3b/5lL +7rNPg8NYBOrZa8pG21htlTGgyW/fduRWHp6nRjivEo+gWHLvpHmC7Re49xiPw6c bXpbTNSmrglHwBsehUxdGqEwSDo+r6Q5hbCBFzFDeYYy7mk7q47QNAe7ec4ruWNx Ztzw8l38nnzvj/CEDpKbbIHapXmj3RZknkxyY9tVaeMj5LtP+6GWFe3A7xr6sJqu gGwrt2z0LBuuLroc0fdqiXDfAFN28CaTyU2IN212ZUajTgWmjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWYGJTFOR5kw23HsTPn9eq0O49kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvOGY4NWRmZTItYTY5ZS0z Y2NlLTkzZTgtNGJiZTY3MjgyZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyB4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMttYusbnaINs9RUHPFK72aIOXH0zbYFPufncUY+3o7WTn4I2LXzrFUL I8q62W+h2+jppuNwuKC+I97im1k6HJ/8fUwloD04k9vb9y8wjvDXH4a9zVi9T56M vRbzMA+j0UzSBdKIDvrDkfvhzQFQGQIkbk3xIyElOKJ8m8RuhMc8tVKT27s/a/TO 8ZVYap6oo/dewWlUrSbeAYloTfTSjP0NPap/UaIxQXAbo34OciXSORiIBpYclIf8 1umunN7PMtkYZM6AKicVCgkc0uzNjv23ZJ2MToLxhnnIHBQB3oXWy0TsB8XRWRLD axpVxfgBk0z3HOk8B1VGq8XtUZLTo8g= -----END CERTIFICATE-----Generated at Fri Apr 17 17:36:04 2026 by rpki-client