$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/268cad49-8fe0-3114-93b6-1669c6777057.roa File: 268cad49-8fe0-3114-93b6-1669c6777057.roa (raw, json) Hash identifier: fL4YMNCSXGpE1c4YcDt7CLvDTmUqA/QIoqv5BXLs6w4= Subject key identifier: 80:29:DB:6A:93:9F:A7:C5:72:F8:57:AC:99:8F:02:1B:9E:8B:FC:4B Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584D5B4FACBBE4078DF466117BC0 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/268cad49-8fe0-3114-93b6-1669c6777057.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 23316 IP address blocks: 69.84.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:ac:bb:e4:07:8d:f4:66:11:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=2808e096-00d1-4d31-9d2d-af24b8dad2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:c1:a2:d7:20:f0:db:6e:5e:9d:6b:a9:ac: 27:86:a1:52:73:ed:73:92:f3:cc:2d:72:ee:29:35: 54:5b:22:f5:69:7c:56:19:53:36:b4:1b:b8:d9:28: 17:0d:c0:84:e5:9e:91:32:eb:9c:d9:9e:b3:d6:aa: 97:79:76:11:2b:50:19:ee:21:a5:07:31:b7:8c:83: 4e:e6:47:ac:fa:fd:18:2c:77:0b:d5:41:4e:4b:38: 10:77:d1:f5:f8:6c:52:f8:e4:17:da:40:b1:28:bc: e1:4d:47:bc:6a:36:18:ae:04:4e:f8:8d:69:6c:93: 2f:78:b0:6a:3b:74:4c:b8:0b:f8:94:88:4f:5a:f6: 01:03:d8:eb:b8:9b:a9:33:90:c4:29:aa:5d:45:41: 6e:bf:65:be:99:f7:2a:b1:15:e1:94:14:f8:2e:07: bb:b6:7e:85:40:1a:83:88:67:aa:55:53:ce:10:bb: 4a:62:55:fe:7d:bb:77:e3:01:96:04:40:5c:e5:57: 73:c3:c1:78:86:f9:a8:57:d9:11:53:7c:10:7f:54: 8e:3b:b1:ef:36:ec:f6:3a:1d:6f:73:83:3e:50:a0: 42:69:ce:ff:b3:2f:d4:78:df:58:95:fa:37:5a:a3: 28:76:de:0d:7e:e7:7a:da:01:72:f5:57:57:3e:9f: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:29:DB:6A:93:9F:A7:C5:72:F8:57:AC:99:8F:02:1B:9E:8B:FC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/268cad49-8fe0-3114-93b6-1669c6777057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 69.84.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ba:af:51:f6:54:5a:b6:c4:ac:45:d0:48:5d:79:3f:c7:6a: f2:17:b5:f6:e0:5b:c7:ef:1f:28:1e:f2:68:29:91:14:31:5e: e3:df:c4:d6:f7:b3:af:aa:13:3e:96:23:5a:ea:27:32:96:85: 1c:7f:02:f6:41:0a:b7:e6:05:78:16:67:34:1a:35:c2:a6:89: 97:9c:d7:8c:a8:3e:86:be:eb:31:33:b3:d5:e7:0c:b8:8d:bb: ac:f7:2e:e4:a5:e0:86:28:0d:0e:67:9c:6a:aa:81:e3:5f:f8: 85:73:47:0f:d3:f5:bc:54:0f:9b:b3:90:dc:87:3c:16:1a:d5: 30:2f:0e:0e:e4:d0:7d:2b:29:6a:24:da:dc:af:19:9b:b8:ec: 83:81:95:e4:fd:2a:64:cc:c8:c7:9f:7c:31:9d:27:d3:54:e3: 94:c0:04:b5:38:a0:f7:3d:57:14:ef:6c:f7:fe:bb:4d:6d:db: 3f:84:cd:66:d5:85:c3:17:5d:8a:1a:b8:4a:f3:59:02:0f:58: ab:60:1e:f0:40:01:ff:e6:e4:48:1a:6c:76:ef:19:10:2e:10: c9:73:44:1e:c2:92:e5:e1:8f:97:10:c6:f4:63:12:87:b2:e1: 37:25:68:93:90:f2:29:a2:47:bd:20:f4:f0:04:5d:90:2b:95: a9:8a:27:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6y75AeN9GYRe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MjgwOGUwOTYtMDBkMS00ZDMxLTlkMmQtYWYyNGI4ZGFkMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7Botcg8NtuXp1rqawnhqFSc+1zkvPMLXLu KTVUWyL1aXxWGVM2tBu42SgXDcCE5Z6RMuuc2Z6z1qqXeXYRK1AZ7iGlBzG3jINO 5kes+v0YLHcL1UFOSzgQd9H1+GxS+OQX2kCxKLzhTUe8ajYYrgRO+I1pbJMveLBq O3RMuAv4lIhPWvYBA9jruJupM5DEKapdRUFuv2W+mfcqsRXhlBT4Lge7tn6FQBqD iGeqVVPOELtKYlX+fbt34wGWBEBc5Vdzw8F4hvmoV9kRU3wQf1SOO7HvNuz2Oh1v c4M+UKBCac7/sy/UeN9Ylfo3WqModt4Nfud62gFy9VdXPp/4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAp22qTn6fFcvhXrJmPAhuei/xLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMjY4Y2FkNDktOGZlMC0z MTE0LTkzYjYtMTY2OWM2Nzc3MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERVQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK6r1H2VFq2xKxF0EhdeT/HavIXtfbgW8fvHyge8mgpkRQxXuPfxNb3 s6+qEz6WI1rqJzKWhRx/AvZBCrfmBXgWZzQaNcKmiZec14yoPoa+6zEzs9XnDLiN u6z3LuSl4IYoDQ5nnGqqgeNf+IVzRw/T9bxUD5uzkNyHPBYa1TAvDg7k0H0rKWok 2tyvGZu47IOBleT9KmTMyMeffDGdJ9NU45TABLU4oPc9VxTvbPf+u01t2z+EzWbV hcMXXYoauErzWQIPWKtgHvBAAf/m5EgabHbvGRAuEMlzRB7CkuXhj5cQxvRjEoey 4TclaJOQ8imiR70g9PAEXZArlamKJ5k= -----END CERTIFICATE-----Generated at Fri Apr 17 21:30:25 2026 by rpki-client