$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa File: 2a3598a6-3c51-3995-b0a7-612073b7b44d.roa (raw, json) Hash identifier: IgmCOEesqXBIrp/PXBDnk0pOgJU5N8KZqJ3N9B/B0O4= Subject key identifier: A4:13:7C:43:EB:9F:9B:75:78:26:F7:AB:14:A9:8C:D8:E1:DA:8B:13 Certificate issuer: /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Certificate serial: 010D0C9F4328584D7F9A7CA782CAB614A7848300 Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 206.204.64.0/19 maxlen: 24 216.234.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7c:a7:82:ca:b6:14:a7:84:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=f54d1806-10e3-48aa-99df-a5be853615b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:39:2a:93:ad:1c:ec:19:55:f1:bf:62:11: b5:33:e1:ea:0d:de:ac:64:2b:90:17:01:11:64:39: 86:c5:7d:28:f9:23:36:ef:e4:8f:f5:18:b1:24:9a: cb:e8:0c:bf:79:31:bb:05:49:12:7f:75:ad:4d:64: 9c:8b:dc:98:fa:10:3f:29:ee:27:6f:5a:bc:0b:f6: 00:28:a7:cf:65:94:a4:21:46:91:b7:c2:3b:a4:6b: 7f:d4:03:e6:4f:89:a4:1c:3c:ca:33:50:c6:5c:cb: 07:ae:04:19:df:17:4b:5e:33:0a:4c:69:a0:2c:a3: 63:80:f4:cc:60:8f:28:5d:90:c6:47:ac:77:6f:16: 5b:3d:de:c3:4c:3d:df:12:13:1e:23:45:63:b4:e9: 63:0e:25:eb:d7:49:dc:7a:fe:f9:56:c0:ba:1f:57: f2:d8:8b:ee:c4:3a:ea:58:6b:ca:a5:0e:35:7a:a2: ad:eb:cb:ae:ba:0f:29:0c:87:0f:9f:2f:83:f1:20: 9b:c3:cf:ad:20:13:62:f2:38:6f:52:b2:f9:fc:63: 44:b0:7f:34:ec:48:5f:c7:6b:d6:08:c5:d4:3c:e5: 41:19:57:9f:4f:ef:8c:ac:41:ba:2f:3f:e3:63:5f: 81:de:f5:68:73:81:5d:e1:f4:6e:db:49:40:05:91: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:7C:43:EB:9F:9B:75:78:26:F7:AB:14:A9:8C:D8:E1:DA:8B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl X509v3 Authority Key Identifier: keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer sbgp-ipAddrBlock: critical IPv4: 206.204.64.0/19 216.234.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1c:67:a2:0d:f7:82:74:08:24:5e:2f:dc:34:20:87:ae:56: ed:8e:55:3d:93:b7:0f:6a:d1:84:df:8e:74:1f:01:6b:32:7f: 96:4c:69:40:e8:9d:ec:36:b6:f1:aa:96:01:a2:43:03:bc:72: c2:2e:52:27:4c:a3:b4:3d:0d:32:d3:26:95:f6:6e:57:61:c8: 1d:ba:2e:9c:e6:1a:26:83:6f:54:b0:28:cf:cd:69:ea:cd:63: 0d:f8:4c:22:08:f9:7f:4a:f5:01:00:b4:cf:7a:d0:95:d0:9a: fb:d1:f3:28:67:11:fc:db:dd:74:61:74:2f:51:a4:08:b1:4a: ef:a4:3b:43:e9:28:ea:87:8a:b7:cd:34:05:2b:a0:2c:0e:60: 67:b8:6f:c6:b1:1c:63:24:65:59:68:c6:3b:77:79:90:cf:6b: 2f:2b:62:08:46:b5:1d:cd:42:d6:54:ad:6b:d2:49:ca:20:d8: e0:d5:17:60:33:18:89:2f:2d:79:46:03:af:5a:b7:aa:a6:1b: 56:18:7c:d9:f0:28:de:d5:4b:b3:64:65:c7:e8:03:0a:84:41: 59:4c:cd:7d:07:7a:06:57:00:89:82:45:33:a3:e4:36:37:72: 1c:55:a0:5f:2c:20:d4:7c:54:db:50:95:92:98:5e:3a:b1:9d: 77:60:ba:94 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1/mnyngsq2FKeEgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYjlhNDUtMmIwNi00Y2E4LWJkMGYtYmJkOTZhY2Nj YzI3MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZjU0ZDE4MDYtMTBlMy00OGFhLTk5ZGYtYTViZTg1MzYxNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzY5KpOtHOwZVfG/YhG1M+HqDd6sZCuQFwER ZDmGxX0o+SM27+SP9RixJJrL6Ay/eTG7BUkSf3WtTWSci9yY+hA/Ke4nb1q8C/YA KKfPZZSkIUaRt8I7pGt/1APmT4mkHDzKM1DGXMsHrgQZ3xdLXjMKTGmgLKNjgPTM YI8oXZDGR6x3bxZbPd7DTD3fEhMeI0VjtOljDiXr10ncev75VsC6H1fy2IvuxDrq WGvKpQ41eqKt68uuug8pDIcPny+D8SCbw8+tIBNi8jhvUrL5/GNEsH807Ehfx2vW CMXUPOVBGVefT++MrEG6Lz/jY1+B3vVoc4Fd4fRu20lABZHAdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKQTfEPrn5t1eCb3qxSpjNjh2osTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFi OWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5NmFjY2NjMjcvMmEzNTk4YTYtM2M1MS0z OTk1LWIwYTctNjEyMDczYjdiNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDlhYjlhNDUtMmIwNi00Y2E4LWJk MGYtYmJkOTZhY2NjYzI3L2Q5YWI5YTQ1LTJiMDYtNGNhOC1iZDBmLWJiZDk2YWNj Y2MyNy5jcmwwHwYDVR0jBBgwFoAUoSzalgtjlBWNF5Yrc2rfQFxyouswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFiOWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5 NmFjY2NjMjcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFzsxAAwQA 2Oq3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF4cZ6IN94J0CCReL9w0IIeuVu2OVT2Ttw9q0YTfjnQfAWsy f5ZMaUDonew2tvGqlgGiQwO8csIuUidMo7Q9DTLTJpX2bldhyB26LpzmGiaDb1Sw KM/NaerNYw34TCII+X9K9QEAtM960JXQmvvR8yhnEfzb3XRhdC9RpAixSu+kO0Pp KOqHirfNNAUroCwOYGe4b8axHGMkZVloxjt3eZDPay8rYghGtR3NQtZUrWvSScog 2ODVF2AzGIkvLXlGA69at6qmG1YYfNnwKN7VS7NkZcfoAwqEQVlMzX0HegZXAImC RTOj5DY3chxVoF8sINR8VNtQlZKYXjqxnXdgupQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:46:30 2026 by rpki-client