$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa File: 46619392-b89b-30ad-aaa8-1b908d91e183.roa (raw, json) Hash identifier: bURfhTVdhxqLDv0ZhgaQzD+Ppd4VM2+DiISVNFJkFWY= Subject key identifier: 1E:82:84:B0:CB:82:B8:2A:24:B7:69:3E:E7:70:FB:41:BE:19:20:96 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584D4D5A4E6E2FDC86A87B9BDD80 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46408 IP address blocks: 204.13.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4e:6e:2f:dc:86:a8:7b:9b:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=9b4f26b1-4661-47fa-8d33-6199fe90f079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:94:06:75:74:e4:67:29:7b:67:c1:69:0f: 6a:1e:5b:7e:a4:bf:31:cf:ae:e7:89:8f:5d:c0:ae: 1c:1b:8d:f9:92:53:cd:26:d3:3e:31:fa:39:a9:d6: b5:1d:dd:5a:bb:3d:fa:ce:e2:e1:01:b1:ab:f6:a5: f4:37:fd:36:50:d4:ae:ec:14:f4:55:8a:89:4e:d9: d5:b4:0e:62:e0:df:ac:dc:42:77:49:05:50:ed:f2: 9f:05:e0:47:49:9a:4c:83:fe:a5:ec:a1:18:62:14: ea:7d:d2:51:54:06:db:1f:c2:e1:d8:d4:9a:ac:e7: 1d:3d:69:c6:65:7a:f7:78:91:22:69:f4:75:73:1e: 01:5a:c6:cd:2f:26:22:9f:af:dd:f8:44:e5:03:d4: c2:a9:36:38:0e:1c:27:e5:14:fb:3b:c9:73:fb:38: 68:b3:c9:35:1d:71:53:e6:6d:e3:a9:e8:41:41:70: fa:22:49:d5:f8:85:49:6b:4b:e1:eb:6a:00:0b:a0: 41:6f:0a:69:03:09:ea:e1:f1:be:94:13:b3:2e:3c: d5:ef:0a:ab:53:5d:9b:d6:e8:c9:b0:64:35:40:42: 9c:c0:06:1f:73:ec:90:1f:78:b4:41:48:1f:d3:17: 11:8a:4f:2e:bc:af:db:43:ab:28:0e:54:ea:5e:2c: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:84:B0:CB:82:B8:2A:24:B7:69:3E:E7:70:FB:41:BE:19:20:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 204.13.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fd:7e:08:62:1d:0b:cc:bc:13:5d:f9:6a:64:b2:0e:33:44: 64:96:96:91:cd:36:f0:be:6d:ac:c4:bc:53:3c:38:72:2f:e4: c4:43:5f:10:aa:01:61:6e:70:c5:98:b5:d4:fe:e5:47:3f:05: 8c:22:18:e4:9f:b0:c6:73:37:f4:17:3b:3b:89:fc:93:5b:d7: 82:14:e3:cb:35:24:ae:b7:3d:64:33:06:85:f3:b7:04:52:06: d6:23:98:9c:f1:92:58:18:7b:ee:ca:ab:6b:b3:dd:b9:d2:c6: 25:35:89:c3:f3:8e:ca:ea:19:a4:8f:41:89:4a:1b:e5:64:82: 02:4d:13:ca:ee:a9:c4:09:84:93:0d:53:d2:fb:1d:8e:b2:87: ac:86:70:98:45:19:c8:f5:e5:51:ef:e5:a5:72:fe:c6:b8:f9: 95:9b:dc:84:43:c9:9b:3f:ad:21:8e:e2:8d:92:7f:99:a0:39: 0a:f2:dd:7c:f6:40:95:1e:3c:aa:b8:bb:41:d6:09:f8:53:00: af:fe:32:cf:38:d4:c8:db:32:0e:05:81:d6:9d:02:3a:63:74: 51:eb:da:3f:9d:ae:38:9c:6e:29:51:26:2a:e2:ac:e5:8f:88: fa:f7:c2:c0:c1:95:b3:39:07:a9:13:a7:76:d6:d6:91:29:1a: 3e:86:95:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk5uL9yGqHub3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OWI0ZjI2YjEtNDY2MS00N2ZhLThkMzMtNjE5OWZlOTBmMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOmUBnV05Gcpe2fBaQ9qHlt+pL8xz67niY9d wK4cG435klPNJtM+Mfo5qda1Hd1auz36zuLhAbGr9qX0N/02UNSu7BT0VYqJTtnV tA5i4N+s3EJ3SQVQ7fKfBeBHSZpMg/6l7KEYYhTqfdJRVAbbH8Lh2NSarOcdPWnG ZXr3eJEiafR1cx4BWsbNLyYin6/d+ETlA9TCqTY4Dhwn5RT7O8lz+zhos8k1HXFT 5m3jqehBQXD6IknV+IVJa0vh62oAC6BBbwppAwnq4fG+lBOzLjzV7wqrU12b1ujJ sGQ1QEKcwAYfc+yQH3i0QUgf0xcRik8uvK/bQ6soDlTqXiyacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6ChLDLgrgqJLdpPudw+0G+GSCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvNDY2MTkzOTItYjg5Yi0z MGFkLWFhYTgtMWI5MDhkOTFlMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn9fghiHQvMvBNd+Wpksg4zRGSWlpHNNvC+bazEvFM8OHIv5MRDXxCq AWFucMWYtdT+5Uc/BYwiGOSfsMZzN/QXOzuJ/JNb14IU48s1JK63PWQzBoXztwRS BtYjmJzxklgYe+7Kq2uz3bnSxiU1icPzjsrqGaSPQYlKG+VkggJNE8ruqcQJhJMN U9L7HY6yh6yGcJhFGcj15VHv5aVy/sa4+ZWb3IRDyZs/rSGO4o2Sf5mgOQry3Xz2 QJUePKq4u0HWCfhTAK/+Ms841MjbMg4FgdadAjpjdFHr2j+drjicbilRJirirOWP iPr3wsDBlbM5B6kTp3bW1pEpGj6GlR4= -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:43 2026 by rpki-client