$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa File: 409dcb1b-8e11-32f3-b345-ba1e33a44598.roa (raw, json) Hash identifier: OvW7+JlHSGrvltAcC0uA0cxGiKPuBLDoV9uAMbrt9vA= Subject key identifier: 17:B4:61:8D:4E:CE:1C:4E:46:05:2E:40:F6:70:81:7A:82:74:C7:2E Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Certificate serial: 010D0C9F4328584D67DFD0BCEC4B65A09B421EC0 Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 32746 IP address blocks: 204.8.88.0/22 maxlen: 24 208.86.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d0:bc:ec:4b:65:a0:9b:42:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=507e64e4-7377-4d06-bfb7-a6a6cb08027c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:83:5b:65:3d:e9:2a:63:17:79:16:b5:b6: cf:f8:4d:45:2d:70:9e:0d:f7:f8:e2:69:21:b3:1e: cc:8e:7c:79:d7:4f:9c:2e:64:56:44:27:57:cf:d6: 65:d5:75:9b:02:f8:ee:0e:91:82:d7:ff:7b:5e:9e: c9:c3:45:bb:db:6e:1a:99:85:57:a9:e9:09:2a:55: 12:c1:74:a0:8c:42:4c:77:77:97:34:26:d2:a4:75: 9c:ef:58:90:c9:8e:48:0b:55:35:1f:f0:e8:dc:47: 90:b0:77:c6:d2:fa:28:bd:e3:8a:30:9a:f1:63:d3: cd:95:24:53:ef:ea:4b:8c:b2:86:25:a2:4a:a4:64: 0d:b4:40:d0:33:1a:f4:3a:bd:57:99:91:01:dd:a0: d9:c1:d4:a0:9b:ee:a0:ae:ef:55:70:07:70:b7:49: 0c:9f:36:16:83:a4:f6:79:58:b8:d9:47:b7:c1:77: b6:74:87:c3:66:7e:83:85:8e:9d:a9:0c:f2:c2:96: c3:b2:da:dc:e2:5c:85:a4:25:e5:52:6e:0d:aa:1b: 05:f6:05:63:23:7f:ca:92:3f:19:e3:57:0f:93:0f: f3:5b:af:ad:d8:8f:d7:0a:6e:ec:8c:1b:8c:d2:4f: 0e:e0:37:0c:2c:f9:c6:2a:6f:b0:78:42:f2:50:a4: 3e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:61:8D:4E:CE:1C:4E:46:05:2E:40:F6:70:81:7A:82:74:C7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl X509v3 Authority Key Identifier: keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer sbgp-ipAddrBlock: critical IPv4: 204.8.88.0/22 208.86.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:95:88:7e:17:d6:f4:bb:81:95:4a:2e:e5:4b:6b:17:e4:d7: 9b:76:64:53:46:4b:5f:6d:13:02:61:e8:47:90:03:d1:e4:bf: 7b:fb:0a:1d:db:f3:3e:57:13:03:c6:96:e9:3d:b8:80:e6:f3: ed:22:32:46:1a:af:5d:1d:2f:83:f9:01:a3:05:e4:26:28:f9: 65:6c:bc:09:ea:81:b4:8a:51:f2:38:5f:56:95:fb:6f:9b:72: d8:28:28:ca:48:a9:8e:fc:e6:17:d9:1e:c7:dc:76:f0:58:0a: 0d:42:ca:1c:6f:b2:47:cf:40:ac:8b:69:39:f7:82:a6:56:4b: 87:9e:8f:5d:fe:69:b4:74:d5:2f:1e:06:d7:93:84:da:fd:b4: 0f:b9:28:ed:00:62:89:28:3f:c1:42:dc:e7:ad:30:09:85:63: 70:52:ec:f8:ae:33:db:2f:ca:a7:ed:c8:fd:87:97:f0:6d:11: c0:9b:5b:aa:d8:3f:47:a0:a4:b0:fd:db:95:28:4c:aa:63:dd: e5:80:68:28:ae:1c:1d:12:9c:4f:54:99:ee:b4:57:76:0a:4e: bd:71:36:d9:71:81:2d:59:a5:14:cd:fc:4e:cf:db:3e:a0:30: f4:ab:b3:e3:6e:37:9e:38:a8:30:ac:6e:52:b2:c3:f4:03:e3: 3d:24:19:d6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1n39C87EtloJtCHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNm ODUwMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NTA3ZTY0ZTQtNzM3Ny00ZDA2LWJmYjctYTZhNmNiMDgwMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/iDW2U96SpjF3kWtbbP+E1FLXCeDff44mkh sx7Mjnx510+cLmRWRCdXz9Zl1XWbAvjuDpGC1/97Xp7Jw0W7224amYVXqekJKlUS wXSgjEJMd3eXNCbSpHWc71iQyY5IC1U1H/Do3EeQsHfG0vooveOKMJrxY9PNlSRT 7+pLjLKGJaJKpGQNtEDQMxr0Or1XmZEB3aDZwdSgm+6gru9VcAdwt0kMnzYWg6T2 eVi42Ue3wXe2dIfDZn6DhY6dqQzywpbDstrc4lyFpCXlUm4NqhsF9gVjI3/Kkj8Z 41cPkw/zW6+t2I/XCm7sjBuM0k8O4DcMLPnGKm+weELyUKQ+WwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBe0YY1OzhxORgUuQPZwgXqCdMcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kM2Jm OTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvNDA5ZGNiMWItOGUxMS0z MmYzLWIzNDUtYmExZTMzYTQ0NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDNiZjkyM2QtNmM5ZC00NzEzLTg4 N2YtMWYzMDA3NWNmODUwL2QzYmY5MjNkLTZjOWQtNDcxMy04ODdmLTFmMzAwNzVj Zjg1MC5jcmwwHwYDVR0jBBgwFoAUW36UafuPFj/MySVSVEX7bbvaxbswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMw MDc1Y2Y4NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAhYAwQC 0FYoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGOViH4X1vS7gZVKLuVLaxfk15t2ZFNGS19tEwJh6EeQA9Hk v3v7Ch3b8z5XEwPGluk9uIDm8+0iMkYar10dL4P5AaMF5CYo+WVsvAnqgbSKUfI4 X1aV+2+bctgoKMpIqY785hfZHsfcdvBYCg1CyhxvskfPQKyLaTn3gqZWS4eej13+ abR01S8eBteThNr9tA+5KO0AYokoP8FC3OetMAmFY3BS7PiuM9svyqftyP2Hl/Bt EcCbW6rYP0egpLD925UoTKpj3eWAaCiuHB0SnE9Ume60V3YKTr1xNtlxgS1ZpRTN /E7P2z6gMPSrs+NuN544qDCsblKyw/QD4z0kGdY= -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:24 2026 by rpki-client