$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/ebb97e33-549d-3fbb-8776-85f1e38230e2.roa File: ebb97e33-549d-3fbb-8776-85f1e38230e2.roa (raw, json) Hash identifier: 1lH9m7ke9vScKr8H/xjck03TttNLZkKgEkHuXCh948c= Subject key identifier: 7A:F2:44:64:A8:82:7C:51:01:4F:64:40:50:E8:5C:5E:4B:48:A5:5E Certificate issuer: /CN=2c6224d1-4f4d-4087-bfe1-c2ddd598c739 Certificate serial: 010D0C9F4328584D773A83810DFCE7C694A4F500 Authority key identifier: E5:47:7E:F8:9C:A0:78:73:EC:08:E1:C6:42:E6:C1:BE:41:A9:1D:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/ebb97e33-549d-3fbb-8776-85f1e38230e2.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 29838 IP address blocks: 204.209.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:83:81:0d:fc:e7:c6:94:a4:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6224d1-4f4d-4087-bfe1-c2ddd598c739 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=0915cd65-5c18-438a-8811-0ae8cd197e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:f5:4d:38:8a:4a:bf:18:34:33:7c:96:91: d2:28:5d:4e:46:4a:6a:88:8b:6f:b2:59:1b:7a:2c: 4a:27:fa:45:66:86:5b:cb:d4:c1:9f:5b:17:ce:ef: 60:d7:42:be:d6:0d:ed:e0:32:b3:bc:bd:e9:f5:ce: a0:c5:c9:8b:9e:10:39:a9:6f:dc:18:b7:1b:37:d1: 59:0d:43:b8:13:de:ad:43:99:bc:6d:d4:16:97:72: dc:92:0e:79:fd:b5:1b:8b:70:db:35:c9:02:67:84: 9b:c6:94:b3:5c:d1:50:38:73:ea:79:50:2b:b3:86: 5c:83:c8:7c:ed:85:03:ee:ab:75:da:3e:c3:05:7b: 41:fe:9c:62:76:e3:9d:30:b5:52:65:bb:83:2e:2a: 2f:69:08:a4:de:50:cb:7b:8d:e9:f0:32:28:a1:0a: 6c:a3:c4:2d:d6:d0:99:8a:1d:de:a2:90:d8:0a:8e: 56:dd:db:19:5f:ae:ca:ea:a9:ee:23:27:4a:59:f0: 9b:86:0e:4f:31:2f:93:2d:d3:c5:5a:ac:81:22:29: c9:fb:65:58:ee:bd:2a:18:21:1d:49:c6:90:14:5d: ee:d6:a7:cf:aa:60:e6:09:1b:07:80:02:1c:42:17: 92:b6:f8:eb:a4:fc:7e:e3:67:97:5d:48:f5:30:b6: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F2:44:64:A8:82:7C:51:01:4F:64:40:50:E8:5C:5E:4B:48:A5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/ebb97e33-549d-3fbb-8776-85f1e38230e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.crl X509v3 Authority Key Identifier: keyid:E5:47:7E:F8:9C:A0:78:73:EC:08:E1:C6:42:E6:C1:BE:41:A9:1D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.cer sbgp-ipAddrBlock: critical IPv4: 204.209.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f3:5c:93:29:c0:ae:5a:d1:82:07:12:af:bd:cb:a5:79:d7: 59:d0:80:03:84:da:a0:d2:f2:12:96:0f:42:1d:23:d3:fa:8f: d9:d6:51:a0:7a:a0:b4:0c:21:24:c8:5e:34:fa:d3:a4:23:3e: 0d:03:a4:2a:76:9c:d5:62:0a:c5:8d:39:2d:41:55:ec:b2:e3: e5:3c:e5:4e:bb:f3:01:d1:b4:7a:53:83:ee:f9:2c:59:42:57: 99:60:28:56:9c:9c:55:4e:cb:90:02:c6:68:95:4a:75:57:12: f4:6d:6c:6d:6a:c6:00:af:1a:48:da:30:97:90:0d:bb:d5:de: 0a:fc:0d:11:55:83:bf:27:3f:f4:34:15:11:8b:6c:7b:2b:28: 17:b1:d5:e8:d3:82:7a:00:d8:bd:99:d4:7d:63:c4:f2:ae:e0: 33:59:8a:dc:d0:99:bd:31:49:df:92:21:ba:91:df:34:02:f7: af:a4:a9:fa:fb:51:89:7b:48:22:20:34:67:21:4e:cb:ef:aa: 75:5a:61:8c:a3:f9:00:a4:5c:13:b3:c0:a1:5e:49:80:77:a0: bb:9b:5c:a8:e4:2c:b8:71:eb:99:d8:5a:15:e6:05:80:65:6c: e7:ef:0e:da:e7:80:58:54:79:74:23:24:ed:de:1a:92:e2:27: b6:d7:1f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoOBDfznxpSk9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM2MjI0ZDEtNGY0ZC00MDg3LWJmZTEtYzJkZGQ1OThj NzM5MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MDkxNWNkNjUtNWMxOC00MzhhLTg4MTEtMGFlOGNkMTk3ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnej1TTiKSr8YNDN8lpHSKF1ORkpqiItvslkb eixKJ/pFZoZby9TBn1sXzu9g10K+1g3t4DKzvL3p9c6gxcmLnhA5qW/cGLcbN9FZ DUO4E96tQ5m8bdQWl3Lckg55/bUbi3DbNckCZ4SbxpSzXNFQOHPqeVArs4Zcg8h8 7YUD7qt12j7DBXtB/pxiduOdMLVSZbuDLiovaQik3lDLe43p8DIooQpso8Qt1tCZ ih3eopDYCo5W3dsZX67K6qnuIydKWfCbhg5PMS+TLdPFWqyBIinJ+2VY7r0qGCEd ScaQFF3u1qfPqmDmCRsHgAIcQheStvjrpPx+42eXXUj1MLaXJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHryRGSognxRAU9kQFDoXF5LSKVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yYzYy MjRkMS00ZjRkLTQwODctYmZlMS1jMmRkZDU5OGM3MzkvZWJiOTdlMzMtNTQ5ZC0z ZmJiLTg3NzYtODVmMWUzODIzMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmM2MjI0ZDEtNGY0ZC00MDg3LWJm ZTEtYzJkZGQ1OThjNzM5LzJjNjIyNGQxLTRmNGQtNDA4Ny1iZmUxLWMyZGRkNTk4 YzczOS5jcmwwHwYDVR0jBBgwFoAU5Ud++JygeHPsCOHGQubBvkGpHUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yYzYyMjRkMS00ZjRkLTQwODctYmZlMS1jMmRk ZDU5OGM3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7zXJMpwK5a0YIHEq+9y6V511nQgAOE2qDS8hKWD0IdI9P6j9nWUaB6 oLQMISTIXjT606QjPg0DpCp2nNViCsWNOS1BVeyy4+U85U678wHRtHpTg+75LFlC V5lgKFacnFVOy5ACxmiVSnVXEvRtbG1qxgCvGkjaMJeQDbvV3gr8DRFVg78nP/Q0 FRGLbHsrKBex1ejTgnoA2L2Z1H1jxPKu4DNZitzQmb0xSd+SIbqR3zQC96+kqfr7 UYl7SCIgNGchTsvvqnVaYYyj+QCkXBOzwKFeSYB3oLubXKjkLLhx65nYWhXmBYBl bOfvDtrngFhUeXQjJO3eGpLiJ7bXH7o= -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:04 2026 by rpki-client