$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa File: c8232a78-952c-374c-b397-532e57c4f5a8.roa (raw, json) Hash identifier: 1XNw0SKLjES6Zaqq67J+NzI1t3U+fcv4THJs6QWsI+s= Subject key identifier: A2:C1:C9:CB:11:EF:DF:9A:41:45:29:8A:52:90:05:8E:8C:01:6B:8C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D81D5EB6848D0F013C46D8FD0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa Signing time: Tue 14 Apr 2026 20:11:52 +0000 ROA not before: Tue 14 Apr 2026 20:11:52 +0000 ROA not after: Mon 13 Jul 2026 20:11:52 +0000 asID: 273200 IP address blocks: 209.61.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:d5:eb:68:48:d0:f0:13:c4:6d:8f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 14 20:11:52 2026 GMT Not After : Jul 13 20:11:52 2026 GMT Subject: CN=e1b08eec-3641-4c7d-8262-ee46f8bea8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:96:72:82:df:09:cb:2d:fd:e4:ab:b1:12: eb:0b:85:eb:a2:21:02:45:1c:5e:58:83:3c:60:ad: 91:f3:b9:74:61:e9:63:66:a7:f2:62:ab:9d:1d:56: 2b:6d:72:69:80:fd:8a:1d:1e:52:a0:3c:d6:2a:ef: f2:98:72:73:0b:e4:09:95:aa:e8:2f:08:47:1d:64: 8c:b1:73:a7:0b:4e:7e:0d:4c:fc:43:2c:ea:b3:b0: 0b:0e:8c:38:96:ff:44:00:93:45:32:0d:fc:4f:b7: 08:b2:d9:fd:2c:ac:53:11:9f:9d:d2:bb:b2:dc:9e: b3:33:a8:43:1a:55:3c:3d:bf:b4:a4:c5:3e:3a:2b: 83:42:80:14:b2:e0:0f:45:5e:13:66:3d:47:08:b7: 63:c2:a2:e1:b7:0a:fb:bd:48:c1:0f:e1:bb:63:4e: fe:61:5d:ba:3f:60:b9:5c:1a:74:0c:e8:1d:e4:5a: 5f:7d:e6:1c:0e:c6:ea:15:98:4d:69:f2:81:06:21: 18:00:37:6b:a5:22:28:91:71:77:f1:6e:95:63:6c: 3b:6f:82:21:74:61:c4:a5:af:b2:e1:15:a1:2c:a2: be:90:9b:21:19:59:c3:17:e0:ba:6c:e0:a9:02:24: 79:b8:33:3c:d6:27:0b:0b:a8:6d:db:33:31:5e:c8: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C1:C9:CB:11:EF:DF:9A:41:45:29:8A:52:90:05:8E:8C:01:6B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:00:27:33:70:82:f0:20:4b:04:1c:ba:b7:96:5c:19:a1:de: 63:31:d9:35:76:dd:61:ca:05:49:6c:ac:44:e9:fe:70:90:6b: 5d:43:14:2c:5a:60:00:d7:4f:1a:11:c2:60:97:33:ba:d5:34: 83:96:64:6f:f1:0a:37:bf:8b:7d:c5:0d:4a:99:f6:f6:52:c0: 44:d4:ee:64:51:d9:01:c8:15:d6:37:88:2c:13:44:a0:aa:3c: 8a:8f:70:ff:35:d8:98:e5:05:76:f3:5b:df:5d:72:ca:36:e9: 49:64:d7:8d:54:76:c2:9d:f7:c7:8c:b7:1d:a8:af:fa:35:6a: 73:71:b1:4e:80:e8:8b:f8:ba:a2:f8:b5:20:89:8c:72:10:1d: 44:8e:7f:2d:83:57:da:f0:49:84:88:33:2c:36:0c:0a:d7:42: 87:fa:98:b1:46:c5:40:25:e4:da:0f:f8:e3:ad:c6:65:70:18: ff:a9:5a:48:fd:5d:38:45:e2:13:05:65:0e:5a:00:07:29:16: 52:ed:5c:7b:a1:04:59:86:d3:a5:5b:18:a5:28:5a:48:20:8f: 80:1a:e1:66:08:c7:25:63:18:6d:09:c2:1f:c1:0d:4e:a9:85: 76:16:95:36:74:3a:45:c2:df:92:af:19:f6:56:65:d9:8e:db: 39:ec:4e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2B1etoSNDwE8Rtj9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQxNDIwMTE1MloXDTI2MDcxMzIwMTE1MlowLzEtMCsGA1UEAxMk ZTFiMDhlZWMtMzY0MS00YzdkLTgyNjItZWU0NmY4YmVhOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIuWcoLfCcst/eSrsRLrC4XroiECRRxeWIM8 YK2R87l0YeljZqfyYqudHVYrbXJpgP2KHR5SoDzWKu/ymHJzC+QJlaroLwhHHWSM sXOnC05+DUz8Qyzqs7ALDow4lv9EAJNFMg38T7cIstn9LKxTEZ+d0ruy3J6zM6hD GlU8Pb+0pMU+OiuDQoAUsuAPRV4TZj1HCLdjwqLhtwr7vUjBD+G7Y07+YV26P2C5 XBp0DOgd5FpffeYcDsbqFZhNafKBBiEYADdrpSIokXF38W6VY2w7b4IhdGHEpa+y 4RWhLKK+kJshGVnDF+C6bOCpAiR5uDM81icLC6ht2zMxXsjBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLBycsR79+aQUUpilKQBY6MAWuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzgyMzJhNzgtOTUyYy0z NzRjLWIzOTctNTMyZTU3YzRmNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0T0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4AJzNwgvAgSwQcureWXBmh3mMx2TV23WHKBUlsrETp/nCQa11DFCxa YADXTxoRwmCXM7rVNIOWZG/xCje/i33FDUqZ9vZSwETU7mRR2QHIFdY3iCwTRKCq PIqPcP812JjlBXbzW99dcso26Ulk141UdsKd98eMtx2or/o1anNxsU6A6Iv4uqL4 tSCJjHIQHUSOfy2DV9rwSYSIMyw2DArXQof6mLFGxUAl5NoP+OOtxmVwGP+pWkj9 XThF4hMFZQ5aAAcpFlLtXHuhBFmG06VbGKUoWkggj4Aa4WYIxyVjGG0Jwh/BDU6p hXYWlTZ0OkXC35KvGfZWZdmO2znsTlc= -----END CERTIFICATE-----Generated at Fri Apr 17 03:55:31 2026 by rpki-client