$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa File: e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa (raw, json) Hash identifier: HyizCB48AIbQDbO8QUKhpbv2IMfbJGYCAR8tBIGGeSo= Subject key identifier: 8D:42:A1:6F:D8:4E:7A:99:96:7E:24:A2:48:EA:82:8C:51:B2:07:12 Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Certificate serial: 010D0C9F4328584D67DFC9223B7F6141CC85C7A0 Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13631 IP address blocks: 209.95.156.0/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c9:22:3b:7f:61:41:cc:85:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=d0a2d987-72e1-47e0-b16d-e94aa7754329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:bd:b6:ba:6e:ef:a3:f8:6a:38:a9:23:ce: 4c:9e:ed:75:4e:f7:ca:b2:fa:fd:30:cf:34:3d:f1: 7d:38:c7:ca:82:c3:62:ed:3c:17:02:d2:46:e9:24: c8:8e:1c:63:5a:45:c3:d1:f9:13:5d:cb:f9:cb:7f: a0:85:11:61:a9:11:60:ef:f5:b2:25:31:ae:24:75: 94:7a:3f:7a:7d:0c:8e:b2:da:0c:53:f6:b0:88:74: 63:d6:ef:77:e0:0a:35:aa:34:73:93:f4:2e:19:fb: 93:8c:c7:ca:6b:8b:76:7b:c8:15:d2:15:d4:09:5c: 83:ec:e1:75:5d:45:9c:8c:0c:db:48:ad:aa:d6:23: 0e:fe:76:5d:5c:f1:dc:d2:60:9c:61:ed:30:83:4f: 1b:a0:69:52:dc:b2:da:d4:1a:50:fd:41:fc:30:1e: e5:bc:3a:4d:b3:bd:ec:69:61:03:db:3a:0c:b7:7d: 2e:d2:b4:f6:2d:0e:9a:c4:d5:50:08:e6:b4:34:15: ff:d3:de:cc:f2:ff:7c:74:14:00:50:77:92:50:f1: 3d:36:9f:ef:90:1e:a0:39:33:f9:59:13:61:32:13: 9a:43:2a:dc:e8:00:f0:7d:4c:4a:93:a8:1d:08:a5: bc:7c:86:15:fd:0a:1f:75:7c:ab:6a:0d:54:06:7c: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:A1:6F:D8:4E:7A:99:96:7E:24:A2:48:EA:82:8C:51:B2:07:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl X509v3 Authority Key Identifier: keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer sbgp-ipAddrBlock: critical IPv4: 209.95.156.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9d:0a:53:e4:a9:e0:2a:19:9e:a0:20:03:80:69:11:c9:e3: b3:70:3e:d2:2d:e1:a4:5e:99:85:4e:19:bd:ba:2d:5d:b4:1b: 1d:68:bc:3d:9b:d2:2a:e7:0c:65:c4:52:80:08:53:db:71:55: ca:d3:aa:84:6c:8d:97:cf:4e:4a:15:34:30:2f:87:b7:0f:36: 68:ae:48:0e:68:c1:dc:be:3c:00:21:ca:4d:b0:a9:49:93:61: a6:d0:53:2b:e0:ff:51:46:f1:bb:b6:11:a2:37:bd:8b:87:ac: 6f:61:03:f3:9a:a7:da:8d:73:98:cb:f0:ad:26:06:89:70:df: 4b:a2:aa:dd:b2:fe:b5:e7:b1:19:89:64:18:a4:25:97:0b:ad: 30:72:d7:ae:02:e4:61:78:e4:64:9e:c7:07:ce:7c:62:1e:cb: db:21:b2:32:64:36:06:b2:cc:b7:56:60:74:f2:f5:26:34:d6: 5a:74:9f:f1:05:ae:6e:e6:b3:40:1e:0e:9d:ed:f3:33:2a:72: 5a:c7:f4:4d:ab:af:a3:82:52:63:7e:a7:90:7e:80:a8:1c:7f: 65:74:d2:cd:df:f0:75:03:ec:65:e5:4a:4c:36:1c:90:4a:97: 55:06:c9:72:a6:b7:77:a0:42:a5:40:0e:43:0e:87:78:98:6a: a7:80:01:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1n38kiO39hQcyFx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMjliNDQtOGY1Yy00NDYyLWJiMTMtZDcyYjRlMTVl MjBkMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZDBhMmQ5ODctNzJlMS00N2UwLWIxNmQtZTk0YWE3NzU0MzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3O9trpu76P4ajipI85Mnu11TvfKsvr9MM80 PfF9OMfKgsNi7TwXAtJG6STIjhxjWkXD0fkTXcv5y3+ghRFhqRFg7/WyJTGuJHWU ej96fQyOstoMU/awiHRj1u934Ao1qjRzk/QuGfuTjMfKa4t2e8gV0hXUCVyD7OF1 XUWcjAzbSK2q1iMO/nZdXPHc0mCcYe0wg08boGlS3LLa1BpQ/UH8MB7lvDpNs73s aWED2zoMt30u0rT2LQ6axNVQCOa0NBX/097M8v98dBQAUHeSUPE9Np/vkB6gOTP5 WRNhMhOaQyrc6ADwfUxKk6gdCKW8fIYV/QofdXyrag1UBnwNXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI1CoW/YTnqZln4kokjqgoxRsgcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Y2Iy OWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJiNGUxNWUyMGQvZTMxZjQyMDItNmVhNi0z ZTE0LTk0YTYtZWFjMzUxYTFlM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGNiMjliNDQtOGY1Yy00NDYyLWJi MTMtZDcyYjRlMTVlMjBkLzhjYjI5YjQ0LThmNWMtNDQ2Mi1iYjEzLWQ3MmI0ZTE1 ZTIwZC5jcmwwHwYDVR0jBBgwFoAUkt30C92YmGTsWtzg9MAgG7Bke3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Y2IyOWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJi NGUxNWUyMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0V+cADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPnQpT5KngKhmeoCADgGkRyeOzcD7SLeGkXpmFThm9ui1dtBsdaLw9 m9Iq5wxlxFKACFPbcVXK06qEbI2Xz05KFTQwL4e3DzZorkgOaMHcvjwAIcpNsKlJ k2Gm0FMr4P9RRvG7thGiN72Lh6xvYQPzmqfajXOYy/CtJgaJcN9Loqrdsv6157EZ iWQYpCWXC60wcteuAuRheORknscHznxiHsvbIbIyZDYGssy3VmB08vUmNNZadJ/x Ba5u5rNAHg6d7fMzKnJax/RNq6+jglJjfqeQfoCoHH9ldNLN3/B1A+xl5UpMNhyQ SpdVBslyprd3oEKlQA5DDod4mGqngAEh -----END CERTIFICATE-----Generated at Fri Apr 17 09:50:29 2026 by rpki-client