$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dbfcf-8478-3db4-933b-155bb68dc149.roa File: 563dbfcf-8478-3db4-933b-155bb68dc149.roa (raw, json) Hash identifier: f49wAki9Tztli+XdfA6BoYGMwcf7Rz0kW+TecrQgGzQ= Subject key identifier: 0B:E5:2E:D4:2E:A7:9A:56:D4:C3:73:9E:73:25:F7:44:FC:FF:04:BA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D4D5A3AC54FFE3DABB24E2A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dbfcf-8478-3db4-933b-155bb68dc149.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 0 IP address blocks: 204.91.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:3a:c5:4f:fe:3d:ab:b2:4e:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=aa00824a-132d-4d62-89ec-716bead691cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:92:b1:6d:82:73:be:e1:52:46:03:46:15:d3: 7c:89:ad:2f:be:34:97:cf:80:c0:7a:a3:ea:82:26: 8b:52:62:bf:5c:f8:c3:6d:62:8d:7d:11:b4:3d:71: 97:5e:3a:e2:85:fe:35:26:a1:74:81:62:bb:e8:fc: bc:a5:9b:71:09:e1:a6:88:fc:12:ff:f1:e3:2e:a0: 2f:2a:aa:09:d1:33:8c:17:04:5f:62:21:1a:52:c6: e0:a7:a0:07:23:a3:c2:a0:cc:2e:8f:ec:3b:38:39: 5a:03:c3:ea:c9:91:24:1a:bf:9a:a8:3e:c1:db:14: df:c1:c3:cc:bc:06:66:36:85:69:4b:23:39:fb:d0: cd:c6:94:51:33:fe:05:67:36:d2:b0:e3:8e:80:d5: ae:f6:e1:3c:5a:7e:d0:e6:84:95:63:42:55:43:f4: 4e:8c:20:d1:a9:6b:40:de:49:1c:e3:77:42:a2:32: b6:5e:ad:d5:6a:61:b9:04:ea:31:3e:ed:bd:10:43: 8c:dd:d8:3f:10:98:12:d6:64:06:3c:86:24:66:aa: 64:43:77:89:f9:28:78:e6:0e:a1:f4:2c:10:dc:af: ad:cd:01:8c:ae:6c:b2:78:34:05:dc:ca:9c:86:6c: 00:19:20:65:77:c5:d0:6a:38:a6:5e:51:58:02:fe: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E5:2E:D4:2E:A7:9A:56:D4:C3:73:9E:73:25:F7:44:FC:FF:04:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dbfcf-8478-3db4-933b-155bb68dc149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.91.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f1:32:79:27:e5:96:64:8b:37:83:61:16:45:6b:87:98:ae: a3:b3:95:38:f3:0d:1d:d3:32:24:44:45:29:e1:d4:0a:cc:30: de:3a:80:25:5a:99:c2:a2:0a:58:e5:0c:7c:ab:10:36:bb:c7: 5b:ee:1c:bf:25:a1:0c:2c:0c:d0:3c:f3:ac:86:b1:8d:96:96: 23:0b:c2:b5:0c:a3:9c:f6:ef:f5:41:b8:1d:2e:69:8d:ce:0e: 0e:94:37:f6:4e:38:10:72:bc:b8:24:cc:cc:7a:f1:17:f6:48: 96:b3:23:08:32:7e:dc:9a:44:d2:68:53:f3:f3:8f:fb:d0:1b: 76:b1:3a:e0:12:8a:db:1f:a3:7f:90:86:17:27:8a:fd:71:5f: 0c:09:ef:69:4c:6c:98:fb:4d:f3:81:ee:39:1b:76:71:a6:9c: e4:86:c7:58:4f:be:f7:b1:b4:36:60:70:34:56:16:92:0d:97: 0b:ef:ad:eb:04:81:c6:3d:40:4b:a0:f8:8a:19:89:72:bb:54: ba:b7:cd:1c:0e:71:95:c7:26:a0:75:67:96:26:94:80:d4:45: 1e:ad:1e:ae:3d:e7:a0:91:d3:42:7f:df:08:ba:46:c3:8f:97: 92:c3:1a:e4:0c:21:e1:73:59:fa:b4:fc:57:9c:08:d1:34:40: e0:be:3f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjrFT/49q7JOKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWEwMDgyNGEtMTMyZC00ZDYyLTg5ZWMtNzE2YmVhZDY5MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JKxbYJzvuFSRgNGFdN8ia0vvjSXz4DAeqPq giaLUmK/XPjDbWKNfRG0PXGXXjrihf41JqF0gWK76Py8pZtxCeGmiPwS//HjLqAv KqoJ0TOMFwRfYiEaUsbgp6AHI6PCoMwuj+w7ODlaA8PqyZEkGr+aqD7B2xTfwcPM vAZmNoVpSyM5+9DNxpRRM/4FZzbSsOOOgNWu9uE8Wn7Q5oSVY0JVQ/ROjCDRqWtA 3kkc43dCojK2Xq3VamG5BOoxPu29EEOM3dg/EJgS1mQGPIYkZqpkQ3eJ+Sh45g6h 9CwQ3K+tzQGMrmyyeDQF3MqchmwAGSBld8XQajimXlFYAv6bdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvlLtQup5pW1MNznnMl90T8/wS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTYzZGJmY2YtODQ3OC0z ZGI0LTkzM2ItMTU1YmI2OGRjMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzFuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTxMnkn5ZZkizeDYRZFa4eYrqOzlTjzDR3TMiRERSnh1ArMMN46gCVa mcKiCljlDHyrEDa7x1vuHL8loQwsDNA886yGsY2WliMLwrUMo5z27/VBuB0uaY3O Dg6UN/ZOOBByvLgkzMx68Rf2SJazIwgyftyaRNJoU/Pzj/vQG3axOuASitsfo3+Q hhcniv1xXwwJ72lMbJj7TfOB7jkbdnGmnOSGx1hPvvextDZgcDRWFpINlwvvresE gcY9QEug+IoZiXK7VLq3zRwOcZXHJqB1Z5YmlIDURR6tHq4956CR00J/3wi6RsOP l5LDGuQMIeFzWfq0/FecCNE0QOC+P9s= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:37 2026 by rpki-client