$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa File: a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa (raw, json) Hash identifier: N/R0CnoKknhNxEutnqp262bHhmDuC13hKV7Wz20rDnU= Subject key identifier: A6:9C:B7:81:95:8C:28:EE:50:0D:F0:5A:8D:8D:B9:B2:AD:52:9B:AF Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584D746FC29053CDDDE63A669740 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 394111 IP address blocks: 206.72.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c2:90:53:cd:dd:e6:3a:66:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=d7c03f99-81a3-4a12-92aa-ffd4bf2defec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:4a:65:95:29:55:89:b5:f9:f1:54:87:87: 52:37:ce:f6:5e:80:fb:42:0f:d5:3c:7a:f6:31:83: ad:6d:c5:d5:1a:40:ba:f3:27:a5:71:6c:bf:6e:74: 24:e8:4a:c9:fc:76:6e:cd:2d:91:1e:e5:0f:78:93: 99:b2:4c:53:0d:1f:ca:8e:23:f0:73:aa:f7:4c:e0: 72:c2:fe:e9:72:2d:b4:b0:1b:94:db:ed:92:14:78: fd:6c:28:89:5a:61:eb:a0:61:01:ca:ce:6c:6b:9e: 4c:99:44:f5:55:f1:ca:39:6e:41:e0:89:ab:d4:53: a0:f0:ba:f0:27:04:f4:c0:fb:de:79:86:96:9d:27: 26:c4:99:23:5c:cc:4d:5d:5e:f7:8c:e2:b8:47:ff: 15:7f:c5:7a:72:58:8a:35:7d:9c:39:91:e2:5b:10: 56:68:1a:57:5a:26:55:10:bb:18:b2:24:e3:27:00: fa:ae:57:36:03:58:bc:26:86:a4:bf:c1:46:81:ef: 69:ca:06:5c:ae:58:c4:00:13:bd:f1:20:6f:a4:52: f0:ff:f8:28:02:c8:f7:02:ad:37:c8:21:e4:46:a0: b9:01:57:9a:6e:33:c2:be:e9:09:ae:fb:0e:4c:94: 4f:b5:59:ec:fb:b2:b5:67:81:e6:4b:a0:53:89:e9: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9C:B7:81:95:8C:28:EE:50:0D:F0:5A:8D:8D:B9:B2:AD:52:9B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 206.72.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5e:c4:a2:ff:2d:de:e9:ce:dd:4e:2f:33:35:50:df:07:c4: 27:65:db:0e:a5:9b:8d:1a:66:4b:b9:a7:a1:c5:60:53:ef:a5: ae:b6:c8:f7:50:6b:64:56:43:9e:2c:f6:53:f8:16:f2:53:2c: 2a:f6:d0:19:33:1b:38:f2:79:cd:de:6e:e5:22:a8:90:4d:ea: a3:39:52:96:0d:ae:6a:89:c1:eb:4d:ea:b9:a2:ae:cb:b4:9d: 01:e3:91:36:3a:55:9d:06:1e:ea:51:49:4c:12:b6:03:0b:6a: a5:28:83:14:fe:c5:74:df:cd:9d:7b:c9:2d:d8:c9:b1:1c:b5: b3:07:2e:92:64:ee:2f:a5:36:c3:15:32:bb:a0:27:54:5d:e6: 64:b2:43:f9:65:cf:b1:7c:df:2b:5b:fc:36:e4:aa:db:92:0f: b9:25:64:a6:b0:f3:28:ce:63:34:86:fd:19:54:c6:eb:a5:f2: 67:04:66:b6:0d:0e:28:30:cd:8e:dc:54:ce:9a:61:1f:48:35: 45:3f:bf:93:7d:65:e7:c5:1c:e7:81:a5:ff:12:b2:a0:a1:a1: fb:b3:cc:fc:e7:bc:c9:14:1a:99:89:9f:ec:4d:6b:be:4f:69: ba:23:88:8f:bc:29:19:52:d7:43:48:96:94:84:d3:f2:7b:d1: f7:0b:fc:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8KQU83d5jpml0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDdjMDNmOTktODFhMy00YTEyLTkyYWEtZmZkNGJmMmRlZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP5KZZUpVYm1+fFUh4dSN872XoD7Qg/VPHr2 MYOtbcXVGkC68yelcWy/bnQk6ErJ/HZuzS2RHuUPeJOZskxTDR/KjiPwc6r3TOBy wv7pci20sBuU2+2SFHj9bCiJWmHroGEBys5sa55MmUT1VfHKOW5B4Imr1FOg8Lrw JwT0wPveeYaWnScmxJkjXMxNXV73jOK4R/8Vf8V6cliKNX2cOZHiWxBWaBpXWiZV ELsYsiTjJwD6rlc2A1i8Joakv8FGge9pygZcrljEABO98SBvpFLw//goAsj3Aq03 yCHkRqC5AVeabjPCvukJrvsOTJRPtVns+7K1Z4HmS6BTieleXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKact4GVjCjuUA3wWo2NubKtUpuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTQ2M2NkYmMtZjAyYS0z ZjljLWE4MjQtOWMzZTU3ZWY5OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZexKL/Ld7pzt1OLzM1UN8HxCdl2w6lm40aZku5p6HFYFPvpa62yPdQ a2RWQ54s9lP4FvJTLCr20BkzGzjyec3ebuUiqJBN6qM5UpYNrmqJwetN6rmirsu0 nQHjkTY6VZ0GHupRSUwStgMLaqUogxT+xXTfzZ17yS3YybEctbMHLpJk7i+lNsMV MrugJ1Rd5mSyQ/llz7F83ytb/DbkqtuSD7klZKaw8yjOYzSG/RlUxuul8mcEZrYN DigwzY7cVM6aYR9INUU/v5N9ZefFHOeBpf8SsqChofuzzPznvMkUGpmJn+xNa75P abojiI+8KRlS10NIlpSE0/J70fcL/MU= -----END CERTIFICATE-----Generated at Sat Apr 18 06:07:44 2026 by rpki-client