$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa File: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (raw, json) Hash identifier: 9CFTSniuB/OxVroUTMzx3CYxPnPRo9rhPsC4xpb74+Q= Subject key identifier: 48:7D:5F:E1:52:80:C2:06:B1:95:B0:E3:8E:C7:A2:EF:A8:52:31:4A Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584CA5F6F86A5FB3B231D73DC800 Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 6579 IP address blocks: 209.205.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f8:6a:5f:b3:b2:31:d7:3d:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=cc96c2d4-6846-4b98-a16e-e327d17d991a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:76:62:23:d5:de:d6:9f:f2:33:d0:3b:45: a0:2b:5e:8a:91:45:12:1d:91:38:2b:4d:9e:32:45: 29:5a:da:2c:37:29:b9:c7:43:1e:49:d7:6c:5b:f5: 13:b5:5c:02:96:cf:5e:1d:05:5f:0f:bc:d1:82:43: b3:5f:d7:3c:19:a1:66:b8:d7:3e:c2:bf:6b:fa:3a: 24:c9:af:a0:1b:20:9b:4c:a7:4a:3a:2f:80:95:23: 17:60:e1:29:23:54:5c:a7:0c:9b:d5:9e:62:f9:b3: ae:fa:cc:47:0e:07:39:43:7c:f0:fa:d2:53:5b:96: fc:65:35:07:70:9d:cb:1f:92:4a:87:1f:40:82:30: dc:ab:26:dd:d5:9d:8d:ba:f5:48:9f:4f:82:e4:1b: fb:88:e5:ee:98:51:25:05:64:c0:08:de:b3:21:67: e4:32:95:4d:e1:f5:8f:7f:ea:48:04:48:2f:21:c1: 2c:81:94:51:df:2a:3d:d6:49:af:3b:32:a4:5a:da: 3c:17:02:db:24:39:e7:fd:57:65:ca:93:7c:ec:75: 41:23:06:f9:1d:aa:b8:82:d0:24:e2:63:c3:4a:cc: 7c:d7:4e:4d:1a:32:30:da:21:91:16:d5:34:72:97: 94:96:2e:97:8b:a5:df:5d:3e:60:8a:25:1a:ab:0a: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7D:5F:E1:52:80:C2:06:B1:95:B0:E3:8E:C7:A2:EF:A8:52:31:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: 209.205.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d6:b2:54:2e:31:9d:64:22:4a:5e:59:0e:e2:9f:5b:fc:a9: cc:1c:7d:40:29:11:1d:75:e0:54:c2:c5:fe:2c:94:23:ac:64: 48:14:61:03:26:e6:3d:8d:ba:39:ed:37:24:e0:ea:00:0b:4a: 55:3a:35:38:c9:b3:44:67:15:f2:2f:69:e5:e7:6a:d4:29:3f: 8c:9a:53:c5:e4:66:03:ea:42:20:a8:47:dd:58:35:8e:e0:7e: c2:37:1e:7d:4d:14:b2:18:d8:c9:86:23:e7:d9:66:7b:81:4c: bb:79:7a:9b:9f:ef:4d:59:61:c2:fe:94:0b:b4:de:30:da:f6: 35:c3:f5:1b:4f:4f:45:75:e6:97:83:98:b5:36:05:c5:65:2f: 5a:9e:26:9f:17:ac:08:ad:76:e8:a5:72:3c:f0:4d:f9:7f:66: 0e:48:99:c6:7b:20:30:07:b2:cc:60:c0:7b:16:0e:4c:67:f9: b7:66:8d:12:72:7c:bd:99:22:5d:ea:a6:e9:58:63:38:a1:9f: 30:a7:07:57:5b:df:dc:54:ff:1a:5d:c9:73:52:5d:94:c3:33: 47:66:61:1f:75:de:7f:bd:7e:86:47:74:9f:94:27:23:ff:4d: 82:b8:d1:29:1e:1c:af:be:16:91:ab:9a:67:b7:00:26:77:c1: 23:b6:29:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9vhqX7OyMdc9yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk Y2M5NmMyZDQtNjg0Ni00Yjk4LWExNmUtZTMyN2QxN2Q5OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW92YiPV3taf8jPQO0WgK16KkUUSHZE4K02e MkUpWtosNym5x0MeSddsW/UTtVwCls9eHQVfD7zRgkOzX9c8GaFmuNc+wr9r+jok ya+gGyCbTKdKOi+AlSMXYOEpI1Rcpwyb1Z5i+bOu+sxHDgc5Q3zw+tJTW5b8ZTUH cJ3LH5JKhx9AgjDcqybd1Z2NuvVIn0+C5Bv7iOXumFElBWTACN6zIWfkMpVN4fWP f+pIBEgvIcEsgZRR3yo91kmvOzKkWto8FwLbJDnn/VdlypN87HVBIwb5Haq4gtAk 4mPDSsx8105NGjIw2iGRFtU0cpeUli6Xi6XfXT5giiUaqwrJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh9X+FSgMIGsZWw447Hou+oUjFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvN2U0ZTVkZDMtNzRmYi0z MDM4LWExNzktMzk3MTlmZWI4MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0c3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjWslQuMZ1kIkpeWQ7in1v8qcwcfUApER114FTCxf4slCOsZEgUYQMm 5j2NujntNyTg6gALSlU6NTjJs0RnFfIvaeXnatQpP4yaU8XkZgPqQiCoR91YNY7g fsI3Hn1NFLIY2MmGI+fZZnuBTLt5epuf701ZYcL+lAu03jDa9jXD9RtPT0V15peD mLU2BcVlL1qeJp8XrAitduilcjzwTfl/Zg5ImcZ7IDAHssxgwHsWDkxn+bdmjRJy fL2ZIl3qpulYYzihnzCnB1db39xU/xpdyXNSXZTDM0dmYR913n+9foZHdJ+UJyP/ TYK40SkeHK++FpGrmme3ACZ3wSO2Kd4= -----END CERTIFICATE-----Generated at Fri Feb 27 07:33:00 2026 by rpki-client