$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa File: d0006625-f457-3068-ab43-dd1b3162c248.roa (raw, json) Hash identifier: 0F407RZuUt/J3UBxPGDzNod6tujGqRqxJmv0bR0ecos= Subject key identifier: 55:B1:46:93:46:A5:69:CD:A5:C3:F9:72:49:A5:D7:7D:B3:5B:A0:A6 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584D4D5A9B54926153E1A24E7880 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 20115 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:9b:54:92:61:53:e1:a2:4e:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=6cd81946-6e49-44b7-839c-b9c19fa7b864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:e9:7d:30:cf:37:aa:54:1b:98:cd:e4:6c: b8:4a:49:9c:fd:85:58:bb:1e:d6:04:9b:4b:bc:4c: 79:ef:25:f1:a1:96:40:aa:72:54:52:20:36:dd:39: fb:a2:f2:73:1d:cb:a2:9c:38:b3:80:7a:14:9b:a1: 9a:07:1d:7d:e2:b3:46:be:40:c1:43:c6:75:ae:42: f3:89:d4:3e:e0:4d:55:a4:10:6f:7c:2d:7e:62:6b: 74:b9:d2:36:a8:e4:56:9e:b8:4a:ed:03:fe:61:7f: 97:d4:3c:68:db:fe:b5:7d:e8:39:3d:46:c1:11:9a: a3:69:df:db:4d:8a:1b:80:8f:11:b3:73:58:3e:6e: 5f:21:94:0f:12:e0:56:ec:aa:20:bb:0e:8c:52:52: 21:99:74:1f:bc:15:7b:f4:49:61:97:80:61:af:11: b3:35:20:44:43:c7:2e:27:cb:31:ae:8e:31:2a:47: a8:3e:5c:0f:bd:7e:df:2a:20:f9:a6:b4:57:5d:ae: a7:fc:04:81:eb:2d:4d:24:f7:27:e9:a9:d8:5d:7d: 72:16:4e:65:4d:f4:0e:a1:04:9b:52:25:eb:c9:ea: 8b:b2:c5:70:d7:d5:3c:cc:74:d5:25:71:b6:bd:5c: aa:f2:30:63:bb:d4:2b:69:93:22:1d:7b:80:39:b9: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B1:46:93:46:A5:69:CD:A5:C3:F9:72:49:A5:D7:7D:B3:5B:A0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:57:2f:b8:b2:b2:4c:86:bd:a3:aa:12:e1:4a:03:ea:c9:90: 34:4b:34:ed:d8:72:8a:1e:eb:49:3c:c1:67:e4:49:68:15:30: a5:7a:61:e1:a8:57:59:42:05:31:01:8d:f7:79:a5:5a:5c:ea: 52:aa:29:f9:ce:d4:11:4e:84:cf:2c:a4:e5:d0:4d:2b:7b:51: 4f:6e:28:e1:ca:bf:1a:42:76:81:30:ff:72:ce:a2:11:1a:e5: 6d:08:e3:c7:43:06:b6:36:5c:25:70:0e:ee:2d:37:27:17:6e: 18:ab:08:66:34:b8:f2:9d:e7:d1:08:03:16:79:f2:bb:51:60: 23:38:eb:64:52:4b:aa:35:86:f1:16:eb:f4:94:bb:12:3b:bf: 5f:c5:ef:94:ec:a5:de:83:ee:64:80:ec:57:3c:27:fc:2c:ac: ff:81:69:1d:68:5e:32:6f:59:b5:4b:f9:10:56:5d:47:f3:1f: 2c:04:52:a1:55:e9:52:e2:9d:db:7d:56:ad:ef:90:45:2c:82: 49:14:a5:e6:59:a3:c7:a9:a9:85:07:b7:2a:fb:de:65:57:35: 74:39:12:18:cb:0b:0b:0b:67:3a:d4:54:ae:29:69:b4:81:c3: c4:a5:8e:a6:cd:ea:ab:50:6b:5b:cc:16:d5:5a:2e:76:f1:ae: ae:34:fd:be -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1NWptUkmFT4aJOeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmNkODE5NDYtNmU0OS00NGI3LTgzOWMtYjljMTlmYTdiODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2zpfTDPN6pUG5jN5Gy4Skmc/YVYux7WBJtL vEx57yXxoZZAqnJUUiA23Tn7ovJzHcuinDizgHoUm6GaBx194rNGvkDBQ8Z1rkLz idQ+4E1VpBBvfC1+Ymt0udI2qORWnrhK7QP+YX+X1Dxo2/61feg5PUbBEZqjad/b TYobgI8Rs3NYPm5fIZQPEuBW7Koguw6MUlIhmXQfvBV79Elhl4BhrxGzNSBEQ8cu J8sxro4xKkeoPlwPvX7fKiD5prRXXa6n/ASB6y1NJPcn6anYXX1yFk5lTfQOoQSb UiXryeqLssVw19U8zHTVJXG2vVyq8jBju9QraZMiHXuAObkwpQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFWxRpNGpWnNpcP5ckml132zW6CmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZDAwMDY2MjUtZjQ1Ny0z MDY4LWFiNDMtZGQxYjMxNjJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAwFcvuLKyTIa9o6oS4UoD6smQNEs07dhyih7rSTzBZ+RJ aBUwpXph4ahXWUIFMQGN93mlWlzqUqop+c7UEU6Ezyyk5dBNK3tRT24o4cq/GkJ2 gTD/cs6iERrlbQjjx0MGtjZcJXAO7i03JxduGKsIZjS48p3n0QgDFnnyu1FgIzjr ZFJLqjWG8Rbr9JS7Eju/X8XvlOyl3oPuZIDsVzwn/Cys/4FpHWheMm9ZtUv5EFZd R/MfLARSoVXpUuKd231Wre+QRSyCSRSl5lmjx6mphQe3KvveZVc1dDkSGMsLCwtn OtRUrilptIHDxKWOps3qq1BrW8wW1VoudvGurjT9vg== -----END CERTIFICATE-----Generated at Sat Apr 18 00:30:50 2026 by rpki-client