$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa File: 2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa (raw, json) Hash identifier: 6dToKQT0/WTMJ5EnJFxkHIU99yQzf4vgjYHL/g0HqOo= Subject key identifier: 9F:F6:C3:2F:D9:13:D1:DB:7B:1D:99:57:72:9C:C1:6F:3C:ED:7A:79 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DB8D58709C6E227D6987C1B60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa Signing time: Mon 04 May 2026 13:00:30 +0000 ROA not before: Mon 04 May 2026 13:00:30 +0000 ROA not after: Sun 02 Aug 2026 13:00:30 +0000 asID: 395886 IP address blocks: 207.56.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:d5:87:09:c6:e2:27:d6:98:7c:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 4 13:00:30 2026 GMT Not After : Aug 2 13:00:30 2026 GMT Subject: CN=31e9a6e7-f513-43b5-a90b-58c9ed30742f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f3:1c:fe:d8:f4:9f:98:64:48:6d:1a:c0:bd: 74:e3:71:04:50:b9:50:8b:b8:61:96:a0:fa:16:b4: f6:71:c1:72:2d:3c:74:b6:16:54:e1:9d:20:58:25: bb:e9:db:95:7c:96:9a:24:81:21:9b:2b:10:f2:0e: 1c:c7:5d:cb:a5:51:30:ce:d8:5e:90:82:d3:af:8a: 20:61:92:c7:74:20:1e:93:1c:13:2e:bc:60:a2:4c: 0c:1d:22:fb:23:9b:c5:01:fc:bf:23:85:05:ca:e8: 46:87:af:fd:90:92:3c:6b:9c:18:ba:19:9c:13:80: 48:4a:0b:75:4a:8f:16:91:cd:7c:2a:3e:dc:88:bf: 8a:13:08:a1:69:10:20:56:26:db:e5:42:38:5f:36: c0:28:2a:ed:b0:8b:3b:cf:f3:fd:6b:54:ac:4b:9a: b2:47:42:85:2c:f6:d5:23:26:ca:49:89:2e:bf:20: 13:d4:67:73:20:c2:4e:ff:8d:92:f6:41:6d:07:46: 4c:2c:a8:38:a4:1d:dc:da:50:5c:93:41:99:5f:67: c3:8e:9a:73:9d:87:77:14:8a:c5:41:ce:d7:a5:1d: f2:91:d2:8b:2d:50:8d:30:22:94:6e:40:51:77:0f: c6:f6:9d:3f:c3:85:b8:96:e8:86:4d:6e:83:d9:0b: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:C3:2F:D9:13:D1:DB:7B:1D:99:57:72:9C:C1:6F:3C:ED:7A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.56.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:61:9b:54:21:31:29:5e:b6:3b:66:65:7a:31:83:ec:b9:ae: 8b:ed:9d:e0:4b:d9:95:97:1f:a8:27:33:a7:41:f6:c4:ee:5c: c4:d8:d9:7a:fa:a5:58:f1:c8:d7:ff:fe:b8:ef:a3:8a:d0:23: 5a:d6:2e:0e:8f:a1:1b:3f:19:39:51:ed:e3:bf:a5:70:a5:9d: 98:9f:31:56:83:5b:7a:b9:30:96:41:1a:e3:b1:de:ae:60:d3: 49:4e:1a:09:96:c4:da:fa:51:3c:91:e1:5f:d6:69:a9:0f:cf: 4c:59:f8:4a:6b:ff:d7:1c:a1:8b:a5:95:e7:d4:05:db:c7:d4: 38:6c:62:97:a2:35:56:65:5d:9d:b1:2e:1d:05:e3:82:69:50: dc:f1:95:e2:a0:4c:47:f7:c4:b5:91:c3:a0:16:86:9d:1a:83: 1b:f5:73:2d:2c:19:b1:89:a4:27:3e:ce:26:b2:6c:85:8e:df: 00:b1:67:f4:89:ba:93:8b:93:e4:71:ea:53:59:05:1b:99:55: 93:e8:50:74:88:ad:c3:56:2b:63:d4:6e:6f:96:ef:82:7b:2c: fd:9e:3a:3b:e8:5d:ee:1c:e2:4c:ba:50:43:de:e6:23:98:aa: 84:e6:95:35:a2:e3:7f:ec:34:3c:83:30:d1:a1:28:c7:20:ce: 53:e5:22:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE241YcJxuIn1ph8G2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUwNDEzMDAzMFoXDTI2MDgwMjEzMDAzMFowLzEtMCsGA1UEAxMk MzFlOWE2ZTctZjUxMy00M2I1LWE5MGItNThjOWVkMzA3NDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fMc/tj0n5hkSG0awL1043EEULlQi7hhlqD6 FrT2ccFyLTx0thZU4Z0gWCW76duVfJaaJIEhmysQ8g4cx13LpVEwzthekILTr4og YZLHdCAekxwTLrxgokwMHSL7I5vFAfy/I4UFyuhGh6/9kJI8a5wYuhmcE4BISgt1 So8Wkc18Kj7ciL+KEwihaRAgVibb5UI4XzbAKCrtsIs7z/P9a1SsS5qyR0KFLPbV IybKSYkuvyAT1GdzIMJO/42S9kFtB0ZMLKg4pB3c2lBck0GZX2fDjppznYd3FIrF Qc7XpR3ykdKLLVCNMCKUbkBRdw/G9p0/w4W4luiGTW6D2QvUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/2wy/ZE9Hbex2ZV3KcwW887Xp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmU2YzNlNmEtMGM0ZS0z NzdmLTgyODMtOWEzZTIzMjFkNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzzjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACthm1QhMSletjtmZXoxg+y5rovtneBL2ZWXH6gnM6dB9sTuXMTY2Xr6 pVjxyNf//rjvo4rQI1rWLg6PoRs/GTlR7eO/pXClnZifMVaDW3q5MJZBGuOx3q5g 00lOGgmWxNr6UTyR4V/WaakPz0xZ+Epr/9ccoYullefUBdvH1DhsYpeiNVZlXZ2x Lh0F44JpUNzxleKgTEf3xLWRw6AWhp0agxv1cy0sGbGJpCc+ziaybIWO3wCxZ/SJ upOLk+Rx6lNZBRuZVZPoUHSIrcNWK2PUbm+W74J7LP2eOjvoXe4c4ky6UEPe5iOY qoTmlTWi43/sNDyDMNGhKMcgzlPlIuM= -----END CERTIFICATE-----Generated at Wed May 6 15:03:54 2026 by rpki-client