$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: vveO659fL+qgP/fbjZkWzikVXJyiRap3OzQcI6d+x+I= Subject key identifier: 67:20:3E:D2:A1:86:0A:49:89:29:10:FB:FD:20:BF:37:A2:91:24:D7 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584DE2B5DB21E6C8BC52496ECB80 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:db:21:e6:c8:bc:52:49:6e:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=92047404-6f3f-4da8-a46b-f06e3cc32873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:96:e9:52:b7:e1:02:39:f3:70:5c:02:59: b1:5d:dc:a7:ae:f5:27:c8:75:a7:14:61:53:34:b3: c6:05:9d:9e:95:59:82:44:30:f4:2d:36:a4:2e:b4: cd:66:4c:81:51:b6:22:d6:da:57:36:55:02:36:5d: d3:15:35:10:ce:0d:91:b2:5d:19:1c:a4:8b:60:dd: 6b:78:1c:8b:41:7f:13:5d:16:3f:a8:95:b1:ff:b0: f3:e3:a5:df:9f:da:90:11:f6:64:ba:25:44:68:f9: f4:9f:6a:d8:46:3b:7d:b6:6a:88:59:de:4b:24:9d: f0:20:6b:89:e0:45:2d:47:e6:f8:4f:06:6b:b6:aa: b2:23:9f:54:aa:d6:3d:a0:1f:ce:a2:8f:f7:94:dc: 17:d9:bd:22:cb:48:e4:92:34:93:d7:cc:d2:87:a9: 69:40:1e:bc:40:c3:8a:49:3c:f8:09:44:7e:00:7d: 31:40:19:c4:92:b1:3d:1e:93:55:cf:95:05:9b:e7: 93:27:00:1e:db:0e:0e:d7:c1:e7:ec:4c:74:dc:b3: 1d:53:28:29:cd:5c:94:71:39:c7:63:73:33:45:c9: 2b:99:10:9f:b1:58:cd:6b:1f:b1:b3:e8:4b:79:21: 38:0e:df:86:79:4d:cf:46:67:52:b9:77:6d:88:70: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:20:3E:D2:A1:86:0A:49:89:29:10:FB:FD:20:BF:37:A2:91:24:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:47:b5:52:fa:5a:28:bd:a5:0e:60:f8:98:08:3e:ee:72:c4: cb:b2:8d:ee:f0:9c:6b:28:36:ac:41:b7:fc:5c:f3:05:45:c0: fe:77:a9:93:94:1d:ac:4a:97:3b:a6:f7:02:02:56:cb:fb:d2: 3b:8c:7b:be:30:73:5b:19:6d:b2:92:4a:f8:ef:af:41:33:62: 29:cb:30:01:aa:28:85:95:90:1a:b3:d9:c3:a6:7f:29:15:61: 0e:ce:0e:7c:b0:9d:cc:63:ef:eb:09:de:2d:91:29:a8:83:9d: 12:e3:da:7b:13:24:2b:de:70:d5:69:eb:14:5e:80:10:7d:b5: 20:c2:8b:6f:15:1c:ef:7d:f0:a9:d6:ae:cc:6b:45:ac:9b:72: b3:5c:a8:d1:1d:6f:35:5c:68:de:d4:66:29:27:08:f6:4b:7d: 73:41:62:2b:42:d6:80:1a:d0:93:6e:5c:37:23:28:f0:96:bc: 29:6e:6d:40:1b:34:f9:30:36:90:6d:4d:68:6e:5e:85:f0:df: 2b:63:af:9a:d1:cd:a7:1e:a7:2e:d9:f6:af:90:a5:db:13:9c: ba:13:de:7b:a7:30:f7:ff:fa:d1:9d:de:15:51:b2:ca:66:01: 4e:da:11:3b:70:3f:a1:db:2f:02:78:42:a4:18:22:c3:5d:41: 3d:b4:fb:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itdsh5si8Ukluy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk OTIwNDc0MDQtNmYzZi00ZGE4LWE0NmItZjA2ZTNjYzMyODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWiW6VK34QI583BcAlmxXdynrvUnyHWnFGFT NLPGBZ2elVmCRDD0LTakLrTNZkyBUbYi1tpXNlUCNl3TFTUQzg2Rsl0ZHKSLYN1r eByLQX8TXRY/qJWx/7Dz46Xfn9qQEfZkuiVEaPn0n2rYRjt9tmqIWd5LJJ3wIGuJ 4EUtR+b4TwZrtqqyI59UqtY9oB/Ooo/3lNwX2b0iy0jkkjST18zSh6lpQB68QMOK STz4CUR+AH0xQBnEkrE9HpNVz5UFm+eTJwAe2w4O18Hn7Ex03LMdUygpzVyUcTnH Y3MzRckrmRCfsVjNax+xs+hLeSE4Dt+GeU3PRmdSuXdtiHBpcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcgPtKhhgpJiSkQ+/0gvzeikSTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENHtVL6Wii9pQ5g+JgIPu5yxMuyje7wnGsoNqxBt/xc8wVFwP53qZOU HaxKlzum9wICVsv70juMe74wc1sZbbKSSvjvr0EzYinLMAGqKIWVkBqz2cOmfykV YQ7ODnywncxj7+sJ3i2RKaiDnRLj2nsTJCvecNVp6xRegBB9tSDCi28VHO998KnW rsxrRaybcrNcqNEdbzVcaN7UZiknCPZLfXNBYitC1oAa0JNuXDcjKPCWvClubUAb NPkwNpBtTWhuXoXw3ytjr5rRzacepy7Z9q+QpdsTnLoT3nunMPf/+tGd3hVRsspm AU7aETtwP6HbLwJ4QqQYIsNdQT20+/8= -----END CERTIFICATE-----Generated at Tue May 26 05:34:08 2026 by rpki-client