$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa File: 04220d33-aa94-3e2f-968e-e384d2bf91b3.roa (raw, json) Hash identifier: xQY4VHZXMoJyGXnF7QoBKafDQ8eYgiBGr0fNvEvIAAQ= Subject key identifier: 84:BD:EE:A4:57:22:E1:9D:FA:6F:0B:B2:95:00:48:AC:D9:BF:D0:DF Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584DADAAD52147589C533D5421E0 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d5:21:47:58:9c:53:3d:54:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=a44d4710-b925-412c-a449-03eb7edc581d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:48:49:ca:31:d9:18:87:d6:33:44:f6:df: c1:20:7c:56:ac:e4:bb:08:4a:0b:9b:35:d8:87:78: 3c:55:47:7d:84:1c:84:51:d7:ad:8d:37:3d:04:25: 33:36:b4:83:71:c3:cb:9e:0b:19:ed:f1:42:1e:c2: a9:6c:7e:83:68:0e:af:d4:11:db:fd:5a:90:e7:9d: dd:1e:8a:a9:43:c3:41:ab:07:e6:01:52:8a:8f:9f: 7b:a9:d7:0e:8f:af:89:9c:49:5e:fe:cd:2a:00:7c: ed:4b:78:7e:76:3f:72:06:f3:c3:67:e7:75:45:50: 5b:9d:79:03:f0:a2:4a:9b:5a:1b:c6:05:c0:c2:3e: 10:b0:11:21:94:6f:f9:be:32:c9:3e:ca:d3:a4:58: 18:8c:ce:00:3d:bd:d8:73:97:8d:5d:64:3a:b0:72: 8e:2c:0c:40:e7:c7:e4:d6:60:c6:94:54:fb:34:06: 9c:a4:52:1c:e0:ea:69:a1:6a:9b:c7:ab:ce:0c:3e: 22:48:8b:b1:fc:a4:89:87:b9:3f:b3:d1:d5:90:75: 21:b0:39:8f:3d:5a:b4:5c:69:29:a9:6d:0f:d2:11: 73:4d:f3:f8:f5:11:d6:29:6e:c6:cc:eb:c5:ae:cc: b5:e9:e7:fa:22:c7:1b:1d:0d:59:00:c3:b2:cf:f6: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:EE:A4:57:22:E1:9D:FA:6F:0B:B2:95:00:48:AC:D9:BF:D0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:aa:95:6a:05:bc:a0:bb:b8:26:3f:4b:74:ec:c5:82:ed:61: f1:3d:98:de:63:74:9b:b7:3e:2a:93:bf:14:4f:2e:21:6d:19: 7c:f4:c9:b8:4c:20:5d:60:20:55:73:5f:53:37:af:d6:6f:01: 44:11:19:38:6e:86:23:96:4f:a8:7b:6e:26:c3:ec:0b:44:dc: af:cb:b1:d6:f2:53:7a:2b:1b:db:eb:91:b6:77:78:e9:4e:2a: 0d:da:9e:93:fe:85:9d:f4:fa:a7:7d:69:ba:12:d3:61:d5:28: 1c:14:71:f9:cc:4c:80:a9:8e:1a:36:e6:70:8f:5e:84:09:87: a2:b3:4d:4f:82:cf:33:25:2a:8a:c1:a2:3c:57:33:e7:72:b9: 39:94:a4:49:fc:e7:8b:07:7f:ac:6a:d6:41:f3:8e:22:37:de: e1:51:c7:44:b5:9a:8e:15:0c:fc:20:42:c4:7f:58:02:cb:93: 7e:d4:c9:87:32:e9:8e:6e:dc:07:22:39:65:6b:18:08:75:13: 0b:48:a8:ae:f6:34:d4:e2:c2:fd:a2:18:c1:9a:95:16:a6:ef: 56:51:6e:75:17:59:96:1c:85:f9:61:4d:a6:0c:e9:5f:1b:d1: fa:1f:29:89:b4:63:8e:d7:3d:68:07:2f:f4:65:d4:8f:5a:bb: f3:c4:6b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtUhR1icUz1UIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YTQ0ZDQ3MTAtYjkyNS00MTJjLWE0NDktMDNlYjdlZGM1ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMdIScox2RiH1jNE9t/BIHxWrOS7CEoLmzXY h3g8VUd9hByEUdetjTc9BCUzNrSDccPLngsZ7fFCHsKpbH6DaA6v1BHb/VqQ553d HoqpQ8NBqwfmAVKKj597qdcOj6+JnEle/s0qAHztS3h+dj9yBvPDZ+d1RVBbnXkD 8KJKm1obxgXAwj4QsBEhlG/5vjLJPsrTpFgYjM4APb3Yc5eNXWQ6sHKOLAxA58fk 1mDGlFT7NAacpFIc4OppoWqbx6vODD4iSIux/KSJh7k/s9HVkHUhsDmPPVq0XGkp qW0P0hFzTfP49RHWKW7GzOvFrsy16ef6IscbHQ1ZAMOyz/YJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS97qRXIuGd+m8LspUASKzZv9DfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMDQyMjBkMzMtYWE5NC0z ZTJmLTk2OGUtZTM4NGQyYmY5MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeqlWoFvKC7uCY/S3TsxYLtYfE9mN5jdJu3PiqTvxRPLiFtGXz0ybhM IF1gIFVzX1M3r9ZvAUQRGThuhiOWT6h7bibD7AtE3K/LsdbyU3orG9vrkbZ3eOlO Kg3anpP+hZ30+qd9aboS02HVKBwUcfnMTICpjho25nCPXoQJh6KzTU+CzzMlKorB ojxXM+dyuTmUpEn854sHf6xq1kHzjiI33uFRx0S1mo4VDPwgQsR/WALLk37UyYcy 6Y5u3AciOWVrGAh1EwtIqK72NNTiwv2iGMGalRam71ZRbnUXWZYchflhTaYM6V8b 0fofKYm0Y47XPWgHL/Rl1I9au/PEa28= -----END CERTIFICATE-----Generated at Sun May 3 15:32:33 2026 by rpki-client