$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d5349f1-5963-393f-bfa0-dcd76a935ea1.roa File: 2d5349f1-5963-393f-bfa0-dcd76a935ea1.roa (raw, json) Hash identifier: vfqvHf96iFbIHkfwgcosrI9TtPUeOIHhSAPKSed9Hig= Subject key identifier: 3A:E5:9B:9F:FF:E3:85:0A:6E:6B:86:4A:B1:87:18:47:A8:26:61:1E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6515359BF464EDB306D0C7E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d5349f1-5963-393f-bfa0-dcd76a935ea1.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 701 IP address blocks: 209.119.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:35:9b:f4:64:ed:b3:06:d0:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8dd71b37-65b8-4f19-876b-13efa0226b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:fe:33:e2:dd:b1:be:ec:a3:8d:09:cb:30: dc:df:02:f1:82:18:29:89:3c:c4:76:8c:84:c3:3d: 72:7b:4a:82:2b:25:0d:96:53:57:ba:7e:71:35:9a: 09:1a:dd:ec:c8:8b:53:d9:a6:7b:e7:f6:4f:35:47: c9:29:9e:21:06:d5:9e:63:ba:1e:4e:35:88:5a:5a: 9c:bc:c9:d1:7a:78:70:ef:69:a2:a5:d3:c1:6b:23: 61:44:e0:39:36:8d:2c:8e:62:da:c8:13:50:fa:3f: b9:82:a0:98:6f:5c:3a:74:f7:b8:fc:18:39:58:06: cb:59:9c:ea:92:59:bc:46:22:6c:68:e0:e9:3e:7e: 7c:80:07:a6:05:e2:fd:c7:b7:a2:87:ca:f3:f2:30: 17:bb:31:49:23:cf:d3:37:9c:ef:78:68:6b:e2:7b: 33:5e:f8:b6:8a:3c:f6:c7:25:46:11:e1:d8:4b:16: 92:30:a2:77:88:25:41:b1:77:cd:e8:c0:2a:7d:84: e0:d1:93:53:5f:01:58:2a:b0:11:e5:6c:1e:de:5b: 48:d3:bc:53:36:92:ef:05:0c:b1:a6:9a:87:6a:51: 4d:22:b0:ef:25:42:5a:d0:e1:b5:58:42:f7:d0:8e: df:d2:ae:e7:18:3a:9f:80:a9:84:7a:33:c1:90:58: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:9B:9F:FF:E3:85:0A:6E:6B:86:4A:B1:87:18:47:A8:26:61:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d5349f1-5963-393f-bfa0-dcd76a935ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.119.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:47:4f:f1:17:37:2d:d5:ae:b6:a6:2a:ee:69:f0:2c:31:e6: db:04:4a:6a:8a:16:fe:78:ca:62:9c:54:46:dc:e7:45:89:c1: 91:31:b9:b5:26:dd:77:4e:64:87:de:10:f5:7f:57:78:41:4e: e5:31:90:40:e7:a5:cd:1d:be:9c:37:bd:a8:4c:c6:9d:6c:71: 43:df:8c:37:cf:ab:2e:de:0a:49:ae:e3:42:b1:0b:ab:9e:4c: 9b:64:29:2b:cc:27:20:fb:d0:23:da:3a:9c:76:86:a8:49:8e: 6b:8c:81:b6:ff:e1:cc:86:c4:d5:6e:21:be:eb:26:e8:d4:cb: 3e:54:f7:f5:d2:f2:a7:89:dc:37:e2:16:b4:f4:55:6f:da:ea: f8:50:b9:33:ec:8e:a4:bd:7f:b2:00:13:e5:fc:61:3a:b5:4e: cc:ba:ec:23:39:94:9f:a9:4c:39:85:de:78:cb:be:7d:9a:1a: d5:e6:ac:09:5b:05:7a:e1:0a:e8:d8:e6:5a:8b:01:64:83:5f: a9:04:61:ac:a4:7d:0c:49:82:b4:21:15:64:83:aa:6a:37:e4: 15:43:e3:87:47:10:1b:61:37:d1:d6:31:7f:59:66:10:96:2a: 3a:99:a2:32:62:d1:a6:c0:ac:0e:49:19:4e:da:30:26:0c:4b: a6:72:34:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTWb9GTtswbQx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OGRkNzFiMzctNjViOC00ZjE5LTg3NmItMTNlZmEwMjI2YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOD+M+Ldsb7so40JyzDc3wLxghgpiTzEdoyE wz1ye0qCKyUNllNXun5xNZoJGt3syItT2aZ75/ZPNUfJKZ4hBtWeY7oeTjWIWlqc vMnRenhw72mipdPBayNhROA5No0sjmLayBNQ+j+5gqCYb1w6dPe4/Bg5WAbLWZzq klm8RiJsaODpPn58gAemBeL9x7eih8rz8jAXuzFJI8/TN5zveGhr4nszXvi2ijz2 xyVGEeHYSxaSMKJ3iCVBsXfN6MAqfYTg0ZNTXwFYKrAR5Wwe3ltI07xTNpLvBQyx ppqHalFNIrDvJUJa0OG1WEL30I7f0q7nGDqfgKmEejPBkFgtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrlm5//44UKbmuGSrGHGEeoJmEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQ1MzQ5ZjEtNTk2My0z OTNmLWJmYTAtZGNkNzZhOTM1ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItHT/EXNy3VrramKu5p8Cwx5tsESmqKFv54ymKcVEbc50WJwZExubUm 3XdOZIfeEPV/V3hBTuUxkEDnpc0dvpw3vahMxp1scUPfjDfPqy7eCkmu40KxC6ue TJtkKSvMJyD70CPaOpx2hqhJjmuMgbb/4cyGxNVuIb7rJujUyz5U9/XS8qeJ3Dfi FrT0VW/a6vhQuTPsjqS9f7IAE+X8YTq1Tsy67CM5lJ+pTDmF3njLvn2aGtXmrAlb BXrhCujY5lqLAWSDX6kEYaykfQxJgrQhFWSDqmo35BVD44dHEBthN9HWMX9ZZhCW KjqZojJi0abArA5JGU7aMCYMS6ZyNAw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:59:31 2026 by rpki-client