$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa File: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (raw, json) Hash identifier: Sqk2NKWXRxFRti2l4xOGsUG2yXaDaXbgWsQk70TyK7o= Subject key identifier: BD:01:84:99:90:F8:54:58:AF:72:4D:01:94:1C:5B:68:96:D3:E5:CD Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F4328584D8EF582032C46BFA889A5D040 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3653 IP address blocks: 209.71.32.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:82:03:2c:46:bf:a8:89:a5:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b89ed225-31a6-4479-a625-412d74581348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:4e:84:97:f1:9c:ae:74:89:5b:b7:d7:ba: fb:91:ab:c2:1f:17:93:cc:18:57:57:a0:b0:56:ce: 15:96:cb:82:ea:2a:ae:48:2d:38:25:ff:5f:94:fb: 37:ec:a0:2c:e9:de:10:ee:86:b6:8a:cb:f7:34:ec: 3e:3d:b2:94:f6:3b:42:5b:c2:62:75:54:f6:10:0b: cb:45:5b:86:1f:25:ee:50:16:11:db:a2:a6:c5:19: 55:40:0c:22:54:7f:76:6e:e6:21:20:87:b1:fd:5e: a6:21:b7:4e:24:b9:cf:b0:e8:2e:88:6b:57:ee:89: df:dc:5f:eb:ab:81:2b:cb:00:81:8f:8d:34:af:b2: fa:8c:4e:a3:91:33:f7:9e:cc:ce:3f:3f:6d:bc:1b: a3:64:8c:7e:1d:b0:71:35:ae:38:e4:7c:3e:f0:f9: 03:2c:68:7b:07:8e:cc:cb:cd:bb:d8:4f:d3:11:20: b2:46:17:4a:7f:49:eb:25:13:61:6a:a8:d1:cd:a8: 08:11:49:68:94:85:d3:af:5f:0c:87:d3:73:f2:6a: 97:d2:da:3e:64:53:d8:31:ee:27:13:3d:64:22:91: ab:3b:a8:9b:2d:fa:e9:3e:6c:6f:de:c0:07:e3:27: 89:71:d6:e7:50:37:9f:9f:b6:ef:a6:ca:b4:eb:c4: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:84:99:90:F8:54:58:AF:72:4D:01:94:1C:5B:68:96:D3:E5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: 209.71.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:98:be:ef:d1:d9:67:1d:04:23:82:13:63:2a:fc:ba:25:03: c2:06:e0:1b:6c:68:3a:d3:15:81:ea:0e:a1:11:e2:3c:65:9e: ca:c5:45:88:6e:c2:c5:80:29:b1:64:c0:30:d7:e9:d1:86:a6: 76:0d:64:3e:fc:dd:5e:27:80:7e:66:07:7d:c7:4d:80:ff:bc: a9:c9:0b:b6:1d:92:82:a0:4f:63:8d:4c:b8:7d:42:e1:c5:e9: a3:d9:65:60:8b:3b:71:42:d8:0c:8e:44:5f:0c:7f:41:67:e2: 5f:09:2f:5f:de:59:7c:df:5e:6c:0c:79:4a:0f:27:f7:9f:76: 9f:4a:e6:4c:c6:88:83:bd:d5:df:f7:9b:5e:fa:fe:65:d7:7c: 22:ad:95:ff:4b:3e:ef:32:c1:22:e9:3a:60:a1:4d:ff:f3:48: 01:3a:c0:98:95:41:03:fd:d1:59:3d:52:5a:2f:d8:68:5c:49: f3:7f:7a:27:d6:fa:68:29:4b:46:af:e2:c7:0a:4f:b9:09:17: 73:9e:3f:5e:95:f2:7a:d9:cf:c9:98:ef:3a:6c:eb:a1:29:86: 34:5a:25:89:a4:12:33:2a:14:8b:b7:88:5f:62:19:c9:ca:be: 2e:37:92:d2:88:49:4f:d8:5e:66:57:b0:2c:61:96:91:8f:15: 66:32:4c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YIDLEa/qIml0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Yjg5ZWQyMjUtMzFhNi00NDc5LWE2MjUtNDEyZDc0NTgxMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1JOhJfxnK50iVu317r7kavCHxeTzBhXV6Cw Vs4VlsuC6iquSC04Jf9flPs37KAs6d4Q7oa2isv3NOw+PbKU9jtCW8JidVT2EAvL RVuGHyXuUBYR26KmxRlVQAwiVH92buYhIIex/V6mIbdOJLnPsOguiGtX7onf3F/r q4ErywCBj400r7L6jE6jkTP3nszOPz9tvBujZIx+HbBxNa445Hw+8PkDLGh7B47M y8272E/TESCyRhdKf0nrJRNhaqjRzagIEUlolIXTr18Mh9Nz8mqX0to+ZFPYMe4n Ez1kIpGrO6ibLfrpPmxv3sAH4yeJcdbnUDefn7bvpsq068R/PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0BhJmQ+FRYr3JNAZQcW2iW0+XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvZTg0Y2I5YWYtYjcwNi0z Y2Y0LThkZDktN2UyMzMwMTRlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6Yvu/R2WcdBCOCE2Mq/LolA8IG4BtsaDrTFYHqDqER4jxlnsrFRYhu wsWAKbFkwDDX6dGGpnYNZD783V4ngH5mB33HTYD/vKnJC7YdkoKgT2ONTLh9QuHF 6aPZZWCLO3FC2AyORF8Mf0Fn4l8JL1/eWXzfXmwMeUoPJ/efdp9K5kzGiIO91d/3 m176/mXXfCKtlf9LPu8ywSLpOmChTf/zSAE6wJiVQQP90Vk9Ulov2GhcSfN/eifW +mgpS0av4scKT7kJF3OeP16V8nrZz8mY7zps66EphjRaJYmkEjMqFIu3iF9iGcnK vi43ktKISU/YXmZXsCxhlpGPFWYyTEc= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:34 2026 by rpki-client