$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa File: aab8c407-8086-3524-9472-9d46b3df9f60.roa (raw, json) Hash identifier: EGKwlpGL1Vt0eR95mi7qZhA71c0g1APb1jLiDqt+LJg= Subject key identifier: 5B:F4:61:20:02:1B:6C:07:D2:E7:5B:37:76:01:F5:E7:B1:E9:28:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6515310D62630EB6B97B0600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 701 IP address blocks: 204.51.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:31:0d:62:63:0e:b6:b9:7b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=c136326a-82c6-4e4e-bf4a-384a2f382cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3c:76:31:32:c0:d6:13:dc:a9:69:d2:16:65: be:7e:29:32:18:44:94:3d:19:8a:02:15:5c:f9:59: 36:de:9c:9a:54:d3:57:cc:04:e8:6d:b2:13:b2:d8: 8d:04:f2:bf:b8:bb:9f:27:9c:a3:4d:db:fb:c7:cf: f2:69:56:e2:2b:ba:9b:f1:9e:58:16:f1:54:91:12: 0b:32:5c:36:0a:0c:5f:d0:0a:7e:3f:2c:fd:3d:1d: 02:da:ba:90:0b:7e:b0:85:51:1e:69:97:68:4b:5c: 63:f6:d0:e7:28:d3:c6:1a:c2:1d:35:e7:49:4a:d3: 29:03:69:93:c2:9c:eb:1d:16:e0:3d:bf:b4:5c:e5: 05:7c:e7:d3:9a:f5:74:85:f3:bf:92:77:84:ce:6e: be:1f:4f:04:40:81:5f:d8:eb:64:25:ef:b2:75:8b: 55:88:c4:0b:3c:73:a0:a4:0e:2f:5f:86:50:51:b1: d8:a0:77:94:fa:35:b0:ae:fb:01:b9:17:a9:31:66: 33:c0:1b:10:26:56:27:57:f1:54:89:6e:0a:67:a2: 83:03:32:73:44:6b:a7:e8:1b:53:72:55:ec:7f:e1: f2:2e:e5:e9:7b:e5:14:35:a0:d6:fb:1e:ff:48:2d: 3c:0b:89:15:01:1e:c4:6b:c2:a5:ae:cb:5c:b9:0d: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F4:61:20:02:1B:6C:07:D2:E7:5B:37:76:01:F5:E7:B1:E9:28:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.51.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:26:f3:e6:e5:6e:01:40:17:50:5c:ee:8f:17:a3:fa:a6:79: 7b:6b:52:49:c2:78:62:6c:30:c1:d0:73:17:44:f0:b0:7b:f3: 75:66:bf:6e:42:4e:72:f7:99:dd:13:38:7b:23:43:94:45:b3: 80:95:6c:de:87:55:d3:c3:70:d3:e9:69:0a:1d:a9:de:00:da: e4:c7:70:28:81:c0:29:ac:7c:25:0b:fc:b7:88:b2:9f:af:a9: 1c:b2:09:cf:75:6d:fb:38:72:43:5c:a0:00:fe:59:54:ba:47: 27:04:2c:1e:94:31:c1:8b:79:d3:0a:a1:e9:a7:33:b5:a7:2f: fe:3d:72:cb:a1:5c:99:6a:00:e7:98:08:4c:75:d3:fc:aa:09: 20:0c:e3:fe:c0:fb:27:34:66:dc:ac:21:dc:2c:fa:22:3d:f9: 89:12:a0:c9:db:92:30:79:23:10:a9:1d:7b:b3:73:6b:2a:6a: 9b:1f:6b:02:f3:0b:ac:79:68:c3:a8:77:7d:65:32:b6:2b:d1: bd:23:a0:e2:30:92:06:a7:06:66:b2:7e:5f:05:31:4c:ff:9a: 6a:4b:1f:8a:36:61:b8:ab:7e:fd:ec:7c:14:a6:d7:d4:33:4c: 5c:b4:9d:64:e3:2e:46:98:59:cd:30:68:ff:69:70:43:25:e1: b9:ca:db:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTENYmMOtrl7BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YzEzNjMyNmEtODJjNi00ZTRlLWJmNGEtMzg0YTJmMzgyY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjx2MTLA1hPcqWnSFmW+fikyGESUPRmKAhVc +Vk23pyaVNNXzATobbITstiNBPK/uLufJ5yjTdv7x8/yaVbiK7qb8Z5YFvFUkRIL Mlw2Cgxf0Ap+Pyz9PR0C2rqQC36whVEeaZdoS1xj9tDnKNPGGsIdNedJStMpA2mT wpzrHRbgPb+0XOUFfOfTmvV0hfO/kneEzm6+H08EQIFf2OtkJe+ydYtViMQLPHOg pA4vX4ZQUbHYoHeU+jWwrvsBuRepMWYzwBsQJlYnV/FUiW4KZ6KDAzJzRGun6BtT clXsf+HyLuXpe+UUNaDW+x7/SC08C4kVAR7Ea8KlrstcuQ1XjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv0YSACG2wH0udbN3YB9eex6ShNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFiOGM0MDctODA4Ni0z NTI0LTk0NzItOWQ0NmIzZGY5ZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4m8+blbgFAF1Bc7o8Xo/qmeXtrUknCeGJsMMHQcxdE8LB783Vmv25C TnL3md0TOHsjQ5RFs4CVbN6HVdPDcNPpaQodqd4A2uTHcCiBwCmsfCUL/LeIsp+v qRyyCc91bfs4ckNcoAD+WVS6RycELB6UMcGLedMKoemnM7WnL/49csuhXJlqAOeY CEx10/yqCSAM4/7A+yc0ZtysIdws+iI9+YkSoMnbkjB5IxCpHXuzc2sqapsfawLz C6x5aMOod31lMrYr0b0joOIwkganBmayfl8FMUz/mmpLH4o2Ybirfv3sfBSm19Qz TFy0nWTjLkaYWc0waP9pcEMl4bnK29c= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:51 2026 by rpki-client