$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json) Hash identifier: 8Luv+IbJJQ/1Rgo8JWVHyJ559LyraeZ/SbviafIDMSo= Subject key identifier: C0:14:4D:73:00:71:6D:03:C2:02:E9:3E:7C:BE:1B:E4:B3:9A:99:7C Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAACBDF77737C1E0378540 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 207.211.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:ac:bd:f7:77:37:c1:e0:37:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=7454f779-8d4f-4888-9998-079b5c54bcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:3d:3e:86:65:2d:00:8c:4d:e2:16:8b:fe: bf:e5:bd:01:b2:ad:11:9d:d0:6b:b0:ef:ea:a2:d6: ea:4b:1a:2b:f7:2f:61:f8:1c:cd:7d:d8:40:a7:5f: d3:72:38:5d:ae:64:06:45:02:c8:82:c5:dd:01:64: 87:eb:45:3a:e8:38:5e:c2:8d:a4:17:4d:5b:2f:0a: af:20:5a:11:92:d4:10:d0:66:88:ba:ca:88:5c:1c: 7e:1b:54:c5:d0:16:ed:92:c3:bd:35:31:39:f5:31: 9a:b0:bc:a5:ee:a6:97:aa:0f:02:49:88:9c:f8:f4: 72:87:40:e3:fe:9c:e3:a3:41:ca:1b:99:88:be:e7: 75:a0:e2:0e:22:c9:cb:b1:31:08:fa:5d:c2:17:48: f9:89:6a:44:78:1f:b9:3a:b3:29:3b:ea:e3:fe:a6: 9b:b4:ad:80:33:61:88:05:aa:d6:6c:0d:c5:6e:78: 42:08:c6:88:4b:e6:95:0e:bb:7f:b4:9f:7e:f6:d9: a2:10:27:a2:ff:cb:ac:b9:93:19:0f:b4:11:66:9f: 84:92:6c:65:df:e7:ef:6d:2b:55:89:eb:5e:00:13: ef:52:0d:6c:f8:e0:46:b1:9e:20:b8:71:db:f4:54: 8d:81:c9:57:5a:66:08:0c:84:f0:f9:2b:29:ad:de: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:4D:73:00:71:6D:03:C2:02:E9:3E:7C:BE:1B:E4:B3:9A:99:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7d:b4:78:cf:d2:68:06:4b:68:f6:ba:ce:6c:48:87:c3:59: 57:fb:39:6f:13:2c:fc:f8:f9:74:dc:ad:62:ca:ca:5c:3a:c3: be:ec:ae:d1:ba:0f:b1:1e:70:24:64:08:57:79:5c:68:c9:af: 91:45:f5:f9:64:05:2c:95:6a:69:29:e1:29:a5:d7:4e:81:e0: f4:67:a0:a0:19:c7:70:0f:20:57:53:d2:5c:4c:26:49:63:57: 82:46:8b:1c:00:b8:95:23:14:ef:c0:fb:34:c5:da:69:8a:6e: 51:aa:50:06:b9:38:2d:5b:3a:93:92:63:3b:9b:0b:af:49:4f: 04:65:e5:b7:03:cd:2e:06:aa:bc:9e:b0:60:02:38:cb:22:a3: 6e:bf:01:53:28:72:d0:30:ad:f2:0e:26:58:89:d1:43:32:71: fb:89:18:9b:bd:90:7e:b0:32:6a:b0:cc:02:2c:fb:31:bd:e1: cb:39:09:8c:6d:ca:23:cd:99:0c:14:6c:0a:69:6e:1d:06:7e: 02:db:d8:99:d8:3f:1e:42:2c:90:3f:3f:b9:75:44:68:1a:5a: a2:99:ed:2b:5a:24:01:97:92:69:88:60:3a:32:d3:ff:33:c7: 8e:2e:9e:dd:c7:c5:ff:d2:e5:22:ff:e0:fc:50:f1:a1:ce:b7: ac:4d:49:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuqy993c3weA3hUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NzQ1NGY3NzktOGQ0Zi00ODg4LTk5OTgtMDc5YjVjNTRiY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRs9PoZlLQCMTeIWi/6/5b0Bsq0RndBrsO/q otbqSxor9y9h+BzNfdhAp1/TcjhdrmQGRQLIgsXdAWSH60U66Dhewo2kF01bLwqv IFoRktQQ0GaIusqIXBx+G1TF0BbtksO9NTE59TGasLyl7qaXqg8CSYic+PRyh0Dj /pzjo0HKG5mIvud1oOIOIsnLsTEI+l3CF0j5iWpEeB+5OrMpO+rj/qabtK2AM2GI BarWbA3FbnhCCMaIS+aVDrt/tJ9+9tmiECei/8usuZMZD7QRZp+Ekmxl3+fvbStV ieteABPvUg1s+OBGsZ4guHHb9FSNgclXWmYIDITw+Ssprd45uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAUTXMAcW0DwgLpPny+G+Szmpl8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTAyZGEyOTItMDhhOC0z Yjc1LWJjNGItOGQzOTBlNWZlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR9tHjP0mgGS2j2us5sSIfDWVf7OW8TLPz4+XTcrWLKylw6w77srtG6 D7EecCRkCFd5XGjJr5FF9flkBSyVamkp4Sml106B4PRnoKAZx3APIFdT0lxMJklj V4JGixwAuJUjFO/A+zTF2mmKblGqUAa5OC1bOpOSYzubC69JTwRl5bcDzS4Gqrye sGACOMsio26/AVMoctAwrfIOJliJ0UMycfuJGJu9kH6wMmqwzAIs+zG94cs5CYxt yiPNmQwUbAppbh0GfgLb2JnYPx5CLJA/P7l1RGgaWqKZ7StaJAGXkmmIYDoy0/8z x44unt3Hxf/S5SL/4PxQ8aHOt6xNSUQ= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:20 2026 by rpki-client