$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa File: 4a421b4d-0aa7-395c-9353-3b9096b353b8.roa (raw, json) Hash identifier: OGwCiTJBgpCi/8bLi0M4C4htZwwCc1HKe0kXKHD0E40= Subject key identifier: 29:23:F3:EE:A8:A0:5D:68:CF:B4:99:C2:05:6D:6F:F3:46:0A:65:A4 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584D6C0FB554994D30E9C2831D00 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 29909 IP address blocks: 208.80.204.0/22 maxlen: 22 208.80.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b5:54:99:4d:30:e9:c2:83:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=780cc2af-9430-4016-835a-69d383bd9ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:31:ae:06:8a:14:f0:c7:59:af:e3:b8:d2: a6:8c:81:df:38:ec:57:6c:f8:6c:ac:60:fa:6c:1d: c6:a0:36:44:df:16:51:ee:ab:bf:24:68:f1:ff:7e: 07:6d:51:b8:cf:50:ee:0c:05:16:e1:4b:5e:88:cd: e9:da:44:72:79:00:30:91:26:ad:dd:2d:b7:79:13: 48:bd:52:9b:d9:dd:a5:5a:65:82:b2:66:4c:0c:dc: 5c:c6:c9:3e:07:52:6f:82:1f:33:b1:62:cb:03:d7: 6e:16:24:5a:2a:95:43:ab:1d:f5:8d:77:00:0d:c6: 8f:51:c3:95:ab:ef:d2:02:f4:5b:bb:8c:2e:fb:59: 2f:19:cc:e7:e3:ea:89:4c:f7:46:79:ea:b9:34:43: aa:a7:06:26:26:06:86:31:ac:3b:27:8d:28:73:28: 1c:29:76:a4:d7:74:95:8d:46:c6:7d:75:dc:11:98: dc:76:b2:88:8c:9c:81:04:3a:93:b0:29:f6:dc:a8: db:24:ca:ec:43:14:f3:da:62:84:e3:57:95:2d:60: 1e:ea:ab:3c:5d:55:f3:b8:d6:2e:8e:68:aa:1f:f0: 39:be:5a:63:a1:9c:54:aa:9d:a6:41:51:da:51:70: 68:6a:8d:49:5e:d0:1b:1d:27:b1:32:b2:eb:bd:e6: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:F3:EE:A8:A0:5D:68:CF:B4:99:C2:05:6D:6F:F3:46:0A:65:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.80.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:da:96:25:ff:31:29:64:bd:9a:f3:08:31:ad:f9:0d:d4:8b: a0:ab:69:5f:72:fd:ff:da:34:ef:8c:88:55:da:cc:9f:b9:f4: a1:91:4b:f0:02:2c:f3:f8:10:ef:88:00:48:4e:54:9f:a6:83: 31:52:1a:d3:91:90:73:7c:63:c8:65:ce:86:d6:c4:00:b6:bf: 02:bb:5a:03:70:5b:fe:20:43:7e:ea:f7:03:f2:4b:02:da:ad: 91:1a:37:b1:76:24:1f:50:76:27:c5:9d:4a:7e:cb:69:bb:43: b5:dd:48:7d:97:84:43:83:cb:0d:ff:4f:7e:5c:69:94:b5:26: 76:60:ce:48:ba:8d:e9:84:ca:a4:56:31:07:46:9c:ce:db:eb: d1:e7:b8:e8:7e:73:ff:f6:fa:7e:6a:85:1f:db:13:ee:58:5d: 73:a9:21:0e:23:ec:e8:64:fd:05:3a:3d:0a:35:37:1b:25:7f: f5:1f:d1:77:62:bd:d8:b9:5c:17:2c:7a:c9:de:fa:10:b1:18: e5:c9:8f:57:fa:9a:f5:d4:9d:dd:47:f4:1a:85:3e:9a:df:15: ad:c7:ec:e9:28:38:27:69:72:3b:df:4b:43:ab:06:f4:c9:97: 8f:fa:99:0e:8e:71:c4:a9:ab:49:7d:5b:77:9c:51:d8:98:71: e3:5c:af:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7VUmU0w6cKDHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NzgwY2MyYWYtOTQzMC00MDE2LTgzNWEtNjlkMzgzYmQ5YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfMxrgaKFPDHWa/juNKmjIHfOOxXbPhsrGD6 bB3GoDZE3xZR7qu/JGjx/34HbVG4z1DuDAUW4UteiM3p2kRyeQAwkSat3S23eRNI vVKb2d2lWmWCsmZMDNxcxsk+B1Jvgh8zsWLLA9duFiRaKpVDqx31jXcADcaPUcOV q+/SAvRbu4wu+1kvGczn4+qJTPdGeeq5NEOqpwYmJgaGMaw7J40ocygcKXak13SV jUbGfXXcEZjcdrKIjJyBBDqTsCn23KjbJMrsQxTz2mKE41eVLWAe6qs8XVXzuNYu jmiqH/A5vlpjoZxUqp2mQVHaUXBoao1JXtAbHSexMrLrveYVqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkj8+6ooF1oz7SZwgVtb/NGCmWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNGE0MjFiNGQtMGFhNy0z OTVjLTkzNTMtM2I5MDk2YjM1M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnaliX/MSlkvZrzCDGt+Q3Ui6CraV9y/f/aNO+MiFXazJ+59KGRS/AC LPP4EO+IAEhOVJ+mgzFSGtORkHN8Y8hlzobWxAC2vwK7WgNwW/4gQ37q9wPySwLa rZEaN7F2JB9QdifFnUp+y2m7Q7XdSH2XhEODyw3/T35caZS1JnZgzki6jemEyqRW MQdGnM7b69HnuOh+c//2+n5qhR/bE+5YXXOpIQ4j7Ohk/QU6PQo1Nxslf/Uf0Xdi vdi5XBcsesne+hCxGOXJj1f6mvXUnd1H9BqFPprfFa3H7OkoOCdpcjvfS0OrBvTJ l4/6mQ6OccSpq0l9W3ecUdiYceNcr74= -----END CERTIFICATE-----Generated at Fri Apr 17 17:56:42 2026 by rpki-client