$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/a962c2b2-36cf-3b79-8922-89d74bda15e1.roa File: a962c2b2-36cf-3b79-8922-89d74bda15e1.roa (raw, json) Hash identifier: bEsOPlH/KyOOAqjENq2gJKcGFEaVFJKu3D9LNe/XNJA= Subject key identifier: 53:04:63:D1:E6:9F:9B:F5:56:88:67:C3:B3:8C:2A:D5:85:AF:65:5B Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584D83CA96F35DF8B60AAD78D1C0 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/a962c2b2-36cf-3b79-8922-89d74bda15e1.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 19901 IP address blocks: 208.161.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:96:f3:5d:f8:b6:0a:ad:78:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=a3293286-6056-44de-8582-17baed8f98d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:be:13:6e:94:b7:c7:8c:d0:18:93:3e:8a: 08:48:80:ee:4d:df:da:92:e4:ca:a9:e7:e2:98:7d: 25:58:2a:40:b3:70:d9:d3:e0:6c:8d:fb:e0:a1:96: be:24:30:e5:9f:6e:e2:9c:32:4f:d5:1f:6c:3c:90: 33:ee:a5:69:bb:51:17:fa:8c:90:ae:db:a3:9c:f3: 8d:8f:e1:89:06:8c:15:a8:2e:3d:77:e6:a0:56:48: 5b:c1:03:67:9f:53:e4:4e:24:18:1e:49:70:a8:0f: 7c:d9:26:72:f0:70:8c:bd:6b:0a:7c:31:fb:d8:8c: 97:c3:3a:15:49:6d:a1:1b:7d:7d:e6:c3:98:74:05: c8:bc:9a:d9:b5:c7:71:b2:de:32:94:07:b0:09:21: 6d:d3:b4:3a:48:17:de:9a:13:7a:17:83:9d:28:2c: a4:7e:99:13:6b:1e:64:df:4b:f1:b0:5c:74:cd:1d: ef:11:92:4d:95:03:41:10:6f:c9:76:c0:d1:4b:2d: 00:c1:6d:a5:61:74:8f:d7:69:b5:e0:7b:9f:9b:6e: 59:97:18:ba:ad:d1:41:86:3a:c6:d4:86:7d:08:73: 3a:1c:59:7d:90:a9:e2:ce:f6:21:f8:c7:c5:1f:0f: c4:72:08:48:b7:04:42:d3:05:e8:ed:72:3d:a0:95: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:63:D1:E6:9F:9B:F5:56:88:67:C3:B3:8C:2A:D5:85:AF:65:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/a962c2b2-36cf-3b79-8922-89d74bda15e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 208.161.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b6:0f:ee:b4:35:0c:c2:14:97:d0:03:43:85:fc:1d:88:2c: 6b:b7:1d:0a:2c:0a:b9:82:82:3c:6e:f5:02:d2:bc:07:e2:63: 29:bd:f9:15:7c:e3:03:c7:cd:f6:a3:2f:98:18:8e:07:9b:a3: 4b:01:65:53:30:e9:17:11:87:bd:15:5d:63:30:1a:fe:d4:84: 2a:fa:96:f5:88:2d:04:fb:3d:1a:fb:59:7f:48:76:b0:13:2a: f6:b3:37:b1:59:25:ac:3e:0c:1b:14:ec:6e:fc:9e:6c:59:98: 8e:2b:c9:4f:37:75:e9:c2:fe:b6:59:37:c3:1e:34:8d:44:75: 71:5c:37:77:0a:1c:7d:58:80:86:da:47:03:e8:6b:dd:2d:a4: 69:b6:28:7f:0f:4f:24:ea:bb:4e:f4:f1:c1:f1:66:4e:75:2f: 0e:0d:f7:07:48:1d:ac:29:ae:c6:66:4c:80:07:ab:eb:22:42: 73:fb:c7:0f:e7:01:bb:0f:cd:02:fa:2a:1a:33:a4:01:86:a4: c8:08:3a:30:e6:55:4b:f5:02:0c:7c:85:38:9d:8b:bd:43:e7: dd:13:a3:c5:19:a0:e1:8f:16:d9:8f:0e:ed:69:7b:20:65:f9: 47:d5:aa:ce:c5:b9:4a:88:ff:f5:bf:16:4c:b2:e5:63:59:7e: 8a:de:2f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DypbzXfi2Cq140cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YTMyOTMyODYtNjA1Ni00NGRlLTg1ODItMTdiYWVkOGY5OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbS+E26Ut8eM0BiTPooISIDuTd/akuTKqefi mH0lWCpAs3DZ0+BsjfvgoZa+JDDln27inDJP1R9sPJAz7qVpu1EX+oyQrtujnPON j+GJBowVqC49d+agVkhbwQNnn1PkTiQYHklwqA982SZy8HCMvWsKfDH72IyXwzoV SW2hG3195sOYdAXIvJrZtcdxst4ylAewCSFt07Q6SBfemhN6F4OdKCykfpkTax5k 30vxsFx0zR3vEZJNlQNBEG/JdsDRSy0AwW2lYXSP12m14Hufm25Zlxi6rdFBhjrG 1IZ9CHM6HFl9kKnizvYh+MfFHw/EcghItwRC0wXo7XI9oJVWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMEY9Hmn5v1Vohnw7OMKtWFr2VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvYTk2MmMyYjItMzZjZi0z Yjc5LTg5MjItODlkNzRiZGExNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0KEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW2D+60NQzCFJfQA0OF/B2ILGu3HQosCrmCgjxu9QLSvAfiYym9+RV8 4wPHzfajL5gYjgebo0sBZVMw6RcRh70VXWMwGv7UhCr6lvWILQT7PRr7WX9IdrAT KvazN7FZJaw+DBsU7G78nmxZmI4ryU83denC/rZZN8MeNI1EdXFcN3cKHH1YgIba RwPoa90tpGm2KH8PTyTqu0708cHxZk51Lw4N9wdIHawprsZmTIAHq+siQnP7xw/n AbsPzQL6KhozpAGGpMgIOjDmVUv1Agx8hTidi71D590To8UZoOGPFtmPDu1peyBl +UfVqs7FuUqI//W/Fkyy5WNZforeL2Y= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:44 2026 by rpki-client