$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa File: f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa (raw, json) Hash identifier: BEKZdxvZWo2+9fbFIr89LOSppJ69Vlvs9FNjIcHngOQ= Subject key identifier: 37:BF:EB:66:41:DD:D1:DD:DD:B4:71:5C:CA:A8:E4:28:4F:EC:67:12 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584D80FFF06B2FFB909C0E18AA70 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 400238 IP address blocks: 109.73.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f0:6b:2f:fb:90:9c:0e:18:aa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=e03e303d-f0ff-4ba0-ba39-8f9f2fc280f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:4a:9a:d4:53:55:f4:21:42:f0:a6:37:f0: 80:97:81:c7:84:53:83:98:45:c5:99:18:9e:e9:73: 82:f9:b8:6d:62:8a:d9:04:89:a9:72:eb:49:0a:9e: 12:54:04:ad:b5:19:17:79:e8:01:3c:de:12:51:69: d9:70:3a:d3:4b:84:fd:6a:ef:b3:0f:e9:49:4d:08: 1b:8b:88:7e:d5:00:a2:2f:5c:5f:c8:a8:ba:53:14: e3:bc:92:49:e1:7b:df:78:fd:51:93:66:de:1a:32: 46:d8:62:48:75:5a:4b:18:21:b9:7f:3d:68:0e:81: 48:ee:f7:31:4e:a1:29:ac:aa:4d:ae:ad:c5:89:6a: f7:dc:b3:56:22:c2:17:cd:57:1c:91:c5:39:b7:e4: 73:1d:78:c2:67:7e:7f:dc:49:79:c1:cd:ee:4a:3e: ac:b9:96:2d:ec:7f:f5:4b:4a:bc:50:0c:74:b0:b7: 6e:8a:93:4f:ba:b0:e3:24:c4:a3:db:6f:bd:13:aa: 47:40:23:19:43:60:5e:e5:f0:d9:b9:ac:cb:a0:1b: 2c:72:8b:de:ac:c0:bd:22:18:f1:b1:c7:5b:a1:c0: 00:62:62:00:5e:6f:fd:a5:d0:19:00:cc:42:89:1b: b4:6f:d4:a8:4e:25:bd:6c:1b:e0:92:91:f7:3f:0f: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:EB:66:41:DD:D1:DD:DD:B4:71:5C:CA:A8:E4:28:4F:EC:67:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 109.73.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1a:26:0d:ea:1f:a5:23:ce:12:e3:a1:43:6e:a2:97:e1:3b: 8b:3f:29:45:e1:c9:c7:a2:0a:d0:69:81:d7:cb:f8:4e:f6:a5: 9e:8a:49:2f:5e:ba:6c:b2:bb:80:1d:be:80:86:d0:19:f0:5c: f9:b8:e2:c1:3b:cb:e3:9f:71:f0:af:5d:15:8c:e7:80:22:29: 79:02:08:79:0b:81:6d:e3:b7:cf:e3:96:bd:ec:3d:73:ff:f7: 69:42:63:9f:2d:d8:87:df:22:b0:63:cc:35:eb:e9:13:e8:1f: 7f:de:00:3d:23:75:fb:fb:58:c2:e2:71:b1:0d:e1:b8:47:bb: 26:ae:f1:df:47:6b:5a:d2:ab:43:2c:7b:26:b7:8d:32:64:8f: b6:1c:d7:55:52:51:64:7a:dd:64:13:7a:5d:28:dc:64:a9:f6: d7:0a:4f:b6:41:fc:76:d7:84:a6:ce:04:9b:43:69:db:52:11: 51:ca:1f:c8:ff:2b:59:05:eb:31:89:5f:3c:9f:62:a3:5e:dc: 79:84:13:e9:b9:2e:5a:23:16:84:2b:35:72:28:26:cd:70:83: 7d:4b:04:f1:d8:79:1f:9b:3e:fa:b3:ff:04:c6:bd:d4:30:9e: 2e:5f:13:25:90:d6:62:24:73:c8:df:42:27:c8:9d:3c:7d:70: 92:c0:b2:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//BrL/uQnA4YqnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZTAzZTMwM2QtZjBmZi00YmEwLWJhMzktOGY5ZjJmYzI4MGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ZKmtRTVfQhQvCmN/CAl4HHhFODmEXFmRie 6XOC+bhtYorZBImpcutJCp4SVASttRkXeegBPN4SUWnZcDrTS4T9au+zD+lJTQgb i4h+1QCiL1xfyKi6UxTjvJJJ4XvfeP1Rk2beGjJG2GJIdVpLGCG5fz1oDoFI7vcx TqEprKpNrq3FiWr33LNWIsIXzVcckcU5t+RzHXjCZ35/3El5wc3uSj6suZYt7H/1 S0q8UAx0sLduipNPurDjJMSj22+9E6pHQCMZQ2Be5fDZuazLoBsscoverMC9Ihjx scdbocAAYmIAXm/9pdAZAMxCiRu0b9SoTiW9bBvgkpH3Pw92iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe/62ZB3dHd3bRxXMqo5ChP7GcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvZjliN2ViMzMtYjliOS0z ZDI4LTgwNjQtMmUxNDU1OTg1NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbUngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4aJg3qH6UjzhLjoUNuopfhO4s/KUXhyceiCtBpgdfL+E72pZ6KSS9e umyyu4AdvoCG0BnwXPm44sE7y+OfcfCvXRWM54AiKXkCCHkLgW3jt8/jlr3sPXP/ 92lCY58t2IffIrBjzDXr6RPoH3/eAD0jdfv7WMLicbEN4bhHuyau8d9Ha1rSq0Ms eya3jTJkj7Yc11VSUWR63WQTel0o3GSp9tcKT7ZB/HbXhKbOBJtDadtSEVHKH8j/ K1kF6zGJXzyfYqNe3HmEE+m5LlojFoQrNXIoJs1wg31LBPHYeR+bPvqz/wTGvdQw ni5fEyWQ1mIkc8jfQifInTx9cJLAsh8= -----END CERTIFICATE-----Generated at Sun Apr 19 13:42:54 2026 by rpki-client