$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa File: 4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa (raw, json) Hash identifier: iNMA2l9HLxsIrYrKiIiF+r4Dj3EyRGzsmOne0d25Eis= Subject key identifier: A2:C5:B2:EE:B0:75:56:5A:8B:D5:73:45:95:50:C9:E6:40:A8:F9:39 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584E0CD9EF452875E367C8BBA3D0 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa Signing time: Wed 03 Jun 2026 15:17:19 +0000 ROA not before: Wed 03 Jun 2026 15:17:19 +0000 ROA not after: Tue 01 Sep 2026 15:17:19 +0000 asID: 12684 IP address blocks: 209.198.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:d9:ef:45:28:75:e3:67:c8:bb:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Jun 3 15:17:19 2026 GMT Not After : Sep 1 15:17:19 2026 GMT Subject: CN=d72f29a2-02ab-4d77-a4fa-2b8632a20716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:fd:2a:a4:bd:f7:3f:2b:13:71:9d:a3:eb: 76:df:8b:84:0e:91:1b:62:3a:35:49:06:f6:75:ea: 21:ad:e1:63:d3:32:a6:1b:1d:3a:cd:ca:93:bc:c4: 7b:f0:73:20:c7:6d:92:eb:83:02:d2:49:07:73:ea: f1:19:52:4d:0b:3d:e7:41:3b:89:7c:6b:f8:4f:a1: e6:89:92:24:74:8b:96:82:1c:6b:92:c1:47:b1:a1: 6c:37:59:49:d1:d3:b9:bc:90:69:14:64:ed:3b:53: 55:8b:c1:34:7c:2e:52:5d:92:ea:cf:86:21:93:1b: 67:e8:a9:36:7d:76:ac:9a:8d:67:70:99:dd:f0:38: e8:2d:c6:6c:12:5f:bc:37:ac:69:b1:f0:f1:06:1e: 0d:8d:d1:60:16:5e:8f:34:70:6c:c8:c0:54:32:ac: 85:c8:2d:31:5a:da:72:9b:5a:9b:80:41:81:97:3f: b4:86:76:e1:1e:e2:73:70:0a:cc:80:52:35:28:22: f8:63:c1:f8:eb:4e:07:4d:37:52:a5:ef:9e:ef:f8: 41:82:80:56:44:05:b2:e9:34:cd:c1:88:01:d7:45: 0a:a8:03:67:12:f8:74:0d:29:3b:ab:32:f5:5a:af: 19:a4:f0:e6:6e:6f:ad:8a:de:8e:65:93:0e:c0:6f: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:B2:EE:B0:75:56:5A:8B:D5:73:45:95:50:C9:E6:40:A8:F9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/4c8a7b17-b838-30e3-9fb0-a41a4cb50022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 209.198.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6c:b8:7b:c4:b6:35:5b:05:30:ea:4f:80:0e:d8:7a:ba:41: 29:22:2b:fe:a9:a7:2e:55:ca:e8:bf:bd:5f:79:a7:a3:cb:37: f7:e4:a0:40:3b:8c:ed:1e:02:14:bd:18:8b:1c:8e:fc:31:6a: e8:f0:6b:df:ee:f6:aa:2d:66:97:5a:7b:cf:46:dc:be:ad:6a: 2d:c7:5e:99:e3:48:4a:0f:ed:4e:33:36:17:d0:2c:d8:a8:59: e8:58:03:31:6f:5c:5b:62:c7:b3:03:c9:8c:01:6a:59:7c:86: b7:5b:dd:ac:80:4b:49:aa:1e:06:ad:ca:15:5b:fc:37:f7:e4: de:ab:27:68:d7:44:3a:e0:62:4f:eb:79:f2:27:61:5e:28:a7: 7f:09:08:92:8e:04:94:c5:6d:c3:de:4b:6c:12:df:a2:6d:f5: 2e:ee:8b:18:72:eb:63:1c:e8:f6:55:d5:d2:7e:fd:f1:c7:3e: 9f:dc:8e:b0:15:2b:d4:19:33:eb:5c:e2:24:88:1d:05:7b:57: 63:fe:fe:df:be:30:2b:5d:3c:1b:df:d2:36:8a:1b:9d:f7:f3: e6:3f:27:ea:0d:44:c8:ee:5a:98:d9:8c:49:f0:c6:00:55:5f: 07:a1:b5:98:49:2a:74:1e:40:35:57:41:9e:11:be:62:de:58: a1:5d:26:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4M2e9FKHXjZ8i7o9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDYwMzE1MTcxOVoXDTI2MDkwMTE1MTcxOVowLzEtMCsGA1UEAxMk ZDcyZjI5YTItMDJhYi00ZDc3LWE0ZmEtMmI4NjMyYTIwNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTf9KqS99z8rE3Gdo+t234uEDpEbYjo1SQb2 deohreFj0zKmGx06zcqTvMR78HMgx22S64MC0kkHc+rxGVJNCz3nQTuJfGv4T6Hm iZIkdIuWghxrksFHsaFsN1lJ0dO5vJBpFGTtO1NVi8E0fC5SXZLqz4Yhkxtn6Kk2 fXasmo1ncJnd8DjoLcZsEl+8N6xpsfDxBh4NjdFgFl6PNHBsyMBUMqyFyC0xWtpy m1qbgEGBlz+0hnbhHuJzcArMgFI1KCL4Y8H4604HTTdSpe+e7/hBgoBWRAWy6TTN wYgB10UKqANnEvh0DSk7qzL1Wq8ZpPDmbm+tit6OZZMOwG/A3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLFsu6wdVZai9VzRZVQyeZAqPk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvNGM4YTdiMTctYjgzOC0z MGUzLTlmYjAtYTQxYTRjYjUwMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhsuHvEtjVbBTDqT4AO2Hq6QSkiK/6ppy5Vyui/vV95p6PLN/fkoEA7 jO0eAhS9GIscjvwxaujwa9/u9qotZpdae89G3L6tai3HXpnjSEoP7U4zNhfQLNio WehYAzFvXFtix7MDyYwBall8hrdb3ayAS0mqHgatyhVb/Df35N6rJ2jXRDrgYk/r efInYV4op38JCJKOBJTFbcPeS2wS36Jt9S7uixhy62Mc6PZV1dJ+/fHHPp/cjrAV K9QZM+tc4iSIHQV7V2P+/t++MCtdPBvf0jaKG5338+Y/J+oNRMjuWpjZjEnwxgBV XwehtZhJKnQeQDVXQZ4RvmLeWKFdJss= -----END CERTIFICATE-----Generated at Sat Jun 6 12:05:58 2026 by rpki-client