$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/283d8e7d-312d-35e8-b071-142aa9569e24.roa File: 283d8e7d-312d-35e8-b071-142aa9569e24.roa (raw, json) Hash identifier: jHOHfXzbx+yRA06PnZPDgyb3P8+HaCfIHsqwKugEzLk= Subject key identifier: F8:A8:89:F4:0D:DB:91:14:2A:AA:64:93:AE:DB:44:06:57:BC:26:90 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D7B6A9BF065ED56E59336E070 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/283d8e7d-312d-35e8-b071-142aa9569e24.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 64267 IP address blocks: 209.59.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9b:f0:65:ed:56:e5:93:36:e0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=e664631a-5d2a-4be9-a7d8-47072c6a2aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:3d:fa:34:6e:f0:d8:16:ba:d6:c4:94:49: af:6e:52:50:90:cb:af:e9:cf:6b:43:38:78:b8:f5: 52:41:0e:09:d1:1b:1f:18:23:91:36:f6:c3:be:36: 9b:16:c2:a9:55:3d:88:1b:69:b3:3f:08:61:93:83: 95:e0:46:8e:2c:65:4c:27:b5:23:38:82:39:53:fc: 35:71:c7:d6:54:28:47:da:3c:09:95:7b:41:0a:7c: 57:c9:47:95:1d:ec:ec:e4:ea:ee:22:d1:64:1d:9a: b1:20:c0:e0:ba:0f:10:44:51:b9:db:06:80:e4:20: 0d:7e:ff:32:10:e7:65:c3:6b:e7:1c:43:27:d5:47: 68:2f:72:6c:22:b5:00:57:2a:75:46:6f:b1:3f:5a: b1:55:2d:cc:2a:b2:eb:f4:e6:5f:a4:08:0d:00:d1: 8c:b8:91:b8:0a:aa:8d:5a:a6:29:d9:63:b0:5b:cc: ff:15:cd:fe:de:e9:1f:d4:a6:84:b3:8c:b1:a1:10: 8c:55:4c:b4:e3:81:29:07:56:41:75:f1:33:49:83: d7:3d:3b:8c:1c:39:a1:37:84:a3:a7:9b:10:42:e8: 26:f5:98:48:5e:95:e0:05:ce:5b:9b:66:7d:1a:d3: 8e:3e:69:0c:74:98:0d:e2:71:e0:82:32:d5:d9:f6: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:89:F4:0D:DB:91:14:2A:AA:64:93:AE:DB:44:06:57:BC:26:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/283d8e7d-312d-35e8-b071-142aa9569e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.59.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:87:c5:4a:9f:14:80:f6:c2:81:6b:22:d5:43:1b:68:a9:24: 51:54:5e:9a:a1:18:83:17:d9:da:0e:db:ca:24:f9:f7:ef:98: 39:d9:33:a2:67:51:20:bf:b5:b1:fc:06:21:cc:39:b6:41:22: fc:ba:c4:db:76:22:63:cc:88:29:36:db:ed:4e:08:51:f2:cd: 56:d9:64:a0:d3:9a:01:f9:e4:7f:81:09:db:4d:e8:f8:46:52: a9:50:7b:32:0d:54:75:eb:52:f6:78:d1:ab:49:0c:04:07:f2: 28:ed:6e:a4:4e:b3:98:cb:6b:1b:3c:a1:10:4c:e8:7e:4e:56: 4d:c9:e3:10:5b:20:00:da:c0:11:20:80:92:ae:40:62:94:16: 7b:0a:c8:13:57:34:ec:61:2c:75:89:d2:7c:e2:22:67:fe:62: 5d:d5:73:e3:9a:cb:cd:44:3a:2c:03:aa:91:7b:1e:86:12:48: 81:d9:37:2c:f0:8a:4b:dd:82:0c:e0:b7:e8:b8:4c:ce:de:71: c6:15:84:c3:82:ff:f5:81:34:a9:90:ac:54:03:b0:db:b1:ac: ba:94:3f:a0:8d:61:5c:54:e2:57:8d:bd:df:19:28:75:9f:92: 91:2f:ba:83:d4:33:b4:19:12:52:f1:63:57:bf:aa:43:dc:67: 45:f5:f6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apvwZe1W5ZM24HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTY2NDYzMWEtNWQyYS00YmU5LWE3ZDgtNDcwNzJjNmEyYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXc9+jRu8NgWutbElEmvblJQkMuv6c9rQzh4 uPVSQQ4J0RsfGCORNvbDvjabFsKpVT2IG2mzPwhhk4OV4EaOLGVMJ7UjOII5U/w1 ccfWVChH2jwJlXtBCnxXyUeVHezs5OruItFkHZqxIMDgug8QRFG52waA5CANfv8y EOdlw2vnHEMn1UdoL3JsIrUAVyp1Rm+xP1qxVS3MKrLr9OZfpAgNANGMuJG4CqqN WqYp2WOwW8z/Fc3+3ukf1KaEs4yxoRCMVUy044EpB1ZBdfEzSYPXPTuMHDmhN4Sj p5sQQugm9ZhIXpXgBc5bm2Z9GtOOPmkMdJgN4nHggjLV2fYpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPioifQN25EUKqpkk67bRAZXvCaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjgzZDhlN2QtMzEyZC0z NWU4LWIwNzEtMTQyYWE5NTY5ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TvmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKHxUqfFID2woFrItVDG2ipJFFUXpqhGIMX2doO28ok+ffvmDnZM6Jn USC/tbH8BiHMObZBIvy6xNt2ImPMiCk22+1OCFHyzVbZZKDTmgH55H+BCdtN6PhG UqlQezINVHXrUvZ40atJDAQH8ijtbqROs5jLaxs8oRBM6H5OVk3J4xBbIADawBEg gJKuQGKUFnsKyBNXNOxhLHWJ0nziImf+Yl3Vc+Oay81EOiwDqpF7HoYSSIHZNyzw ikvdggzgt+i4TM7eccYVhMOC//WBNKmQrFQDsNuxrLqUP6CNYVxU4leNvd8ZKHWf kpEvuoPUM7QZElLxY1e/qkPcZ0X19qo= -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:56 2026 by rpki-client