$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa File: 0d363d93-28e0-3322-8517-a1ebec3877d8.roa (raw, json) Hash identifier: n0UIZx8OpX9ce2Q+fM+ZbC0rGPxjT4CuSc3+Bzbsw2o= Subject key identifier: 6F:D1:D7:45:F0:3C:62:26:61:CC:69:C0:AD:6C:A1:48:31:E4:60:8C Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F4328584D65152B42BE103A7816B66A00 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 209 IP address blocks: 199.191.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2b:42:be:10:3a:78:16:b6:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=9ba1e089-bcfc-4813-a68e-0fbf52cff39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:00:50:5b:19:dd:dc:54:53:4a:bc:0d:be: 7c:c5:38:41:50:f2:18:29:ae:99:44:fd:bd:68:aa: 84:7f:cb:1e:7f:53:ee:a2:02:ee:a3:e8:1d:b2:93: 65:4d:58:3a:2e:fb:a0:62:56:d9:1e:0e:2b:57:1b: f9:8f:31:e9:b1:e2:7b:bf:89:34:7c:85:9d:ff:30: 16:a5:ab:ac:c3:8d:08:46:9c:6a:2a:5e:ce:b4:d3: 87:46:4a:97:d4:14:ba:aa:f8:40:22:20:f8:6b:a5: 1b:14:b6:03:80:4e:5a:35:e8:ec:b5:f7:c5:2d:94: f4:e1:98:84:e0:c5:15:5c:5e:1a:04:26:6d:8d:7a: de:36:3c:16:d6:82:34:fd:f9:38:3f:72:21:e5:7b: 2a:29:67:11:97:10:a6:61:52:de:64:a4:ee:ad:42: 24:78:dc:a9:e1:2c:d6:d3:7b:59:7f:19:e5:49:03: 62:1f:0b:7a:f4:9f:84:96:96:01:50:5b:05:81:93: 99:38:b6:5b:7c:64:59:0e:d3:e5:d9:02:42:c4:da: 42:10:8e:f4:ca:f7:61:eb:4a:37:e8:bd:a1:32:9c: 43:4b:98:22:2b:3c:3d:ad:13:9b:9e:94:a4:30:e5: 5a:5d:c8:e5:40:5e:b4:dd:36:0a:6a:1f:55:04:01: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D1:D7:45:F0:3C:62:26:61:CC:69:C0:AD:6C:A1:48:31:E4:60:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:19:16:02:96:71:3a:bd:f6:74:d7:97:98:a8:4d:86:22:40: a7:c2:ba:c9:b3:80:f6:b4:d6:fa:35:17:54:41:60:41:e2:73: 1d:f1:95:fc:5c:47:19:47:19:79:a8:a0:e5:51:87:0c:c5:e4: 1b:ca:b8:f7:b5:7e:42:50:7f:41:c7:91:ae:9a:75:26:58:db: d0:03:8f:56:d0:9f:77:f0:9d:d1:12:3c:e6:8d:c8:1a:8f:f2: 68:de:34:e1:ed:c1:23:30:38:69:b7:ce:be:10:1e:28:8b:c9: fb:a8:d4:a0:b2:16:60:76:75:5c:6b:4f:2e:c3:ac:07:23:06: 86:22:90:66:0a:f1:65:dd:c9:d8:00:71:4d:ea:35:a2:36:fb: f1:c6:ca:b9:21:53:72:84:99:b5:8d:71:0e:20:bc:f9:84:d6: 00:67:07:aa:1c:5f:e6:6e:ef:44:e3:c9:8b:82:aa:8c:46:f4: 9f:2c:d1:f9:3d:bb:49:18:62:49:8c:cb:93:b2:eb:67:7e:c0: 24:f3:ba:3b:08:ec:12:83:3c:90:49:50:5a:fd:ea:d5:c4:5a: c0:22:cb:ce:2b:98:d5:bc:ec:ec:95:fb:0e:7f:7b:fe:32:96: 46:e3:fd:cf:19:20:e2:93:d7:17:31:fe:eb:93:e9:42:3a:8b: b6:5a:db:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFStCvhA6eBa2agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OWJhMWUwODktYmNmYy00ODEzLWE2OGUtMGZiZjUyY2ZmMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogIAUFsZ3dxUU0q8Db58xThBUPIYKa6ZRP29 aKqEf8sef1PuogLuo+gdspNlTVg6LvugYlbZHg4rVxv5jzHpseJ7v4k0fIWd/zAW pausw40IRpxqKl7OtNOHRkqX1BS6qvhAIiD4a6UbFLYDgE5aNejstffFLZT04ZiE 4MUVXF4aBCZtjXreNjwW1oI0/fk4P3Ih5XsqKWcRlxCmYVLeZKTurUIkeNyp4SzW 03tZfxnlSQNiHwt69J+ElpYBUFsFgZOZOLZbfGRZDtPl2QJCxNpCEI70yvdh60o3 6L2hMpxDS5giKzw9rRObnpSkMOVaXcjlQF603TYKah9VBAHVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/R10XwPGImYcxpwK1soUgx5GCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMGQzNjNkOTMtMjhlMC0z MzIyLTg1MTctYTFlYmVjMzg3N2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMZFgKWcTq99nTXl5ioTYYiQKfCusmzgPa01vo1F1RBYEHicx3xlfxc RxlHGXmooOVRhwzF5BvKuPe1fkJQf0HHka6adSZY29ADj1bQn3fwndESPOaNyBqP 8mjeNOHtwSMwOGm3zr4QHiiLyfuo1KCyFmB2dVxrTy7DrAcjBoYikGYK8WXdydgA cU3qNaI2+/HGyrkhU3KEmbWNcQ4gvPmE1gBnB6ocX+Zu70TjyYuCqoxG9J8s0fk9 u0kYYkmMy5Oy62d+wCTzujsI7BKDPJBJUFr96tXEWsAiy84rmNW87OyV+w5/e/4y lkbj/c8ZIOKT1xcx/uuT6UI6i7Za2w8= -----END CERTIFICATE-----Generated at Fri Apr 17 05:02:10 2026 by rpki-client