$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa File: d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json) Hash identifier: UFOdKE8mJUU3U6WZyiIi0D/KX1SiAhixtWbzZP2zWcA= Subject key identifier: DF:E2:46:2C:E9:B2:E9:3F:7F:13:B8:62:5A:08:88:FD:0E:83:35:7D Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584D93254D4C2C62901F285A1060 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 13213 IP address blocks: 209.236.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4d:4c:2c:62:90:1f:28:5a:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=bfe8a8e5-ee79-466f-8dbd-a27cddb55e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:7f:5a:4c:ab:3b:28:87:83:d3:b4:28:51: 08:23:cc:0f:5d:91:d5:94:ec:54:5e:ee:5d:12:71: eb:c1:41:aa:e7:82:7b:b8:82:06:44:7d:18:6a:83: 5a:67:49:b5:bd:b2:26:49:6e:14:ec:7c:27:49:6c: 18:06:70:ca:bc:dc:14:24:af:5d:8c:74:d9:23:90: 02:41:2c:70:bb:c4:fa:e8:d1:6c:8f:c9:7d:83:29: b0:d7:52:78:d5:d3:6d:59:8e:7c:e8:2c:95:04:ff: 2c:4c:41:87:ca:01:0d:c1:b6:da:b3:0a:97:da:cc: 32:bc:ae:14:1e:f6:72:67:25:be:f5:6c:69:29:9f: f3:71:d8:ad:e1:6b:88:b7:2b:4f:dc:e2:b8:c7:6f: df:ae:69:7d:9e:d6:5c:3b:6b:6a:6c:70:e5:6f:05: d2:b4:c8:f2:53:8f:06:42:d3:ec:fe:de:e6:e3:c6: 7e:80:1f:2f:86:2b:07:74:bf:1d:0e:cc:5a:29:50: 7b:e5:fe:b9:d8:af:83:dd:ce:c0:80:0b:ad:4c:a7: 99:ca:89:54:2d:87:e2:e8:52:fd:fa:b9:33:d1:7c: 3c:e5:f7:90:e8:75:86:b8:46:e9:4c:fb:22:31:87: 09:36:9a:27:d5:1a:da:de:25:1b:b9:1d:aa:a1:04: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:46:2C:E9:B2:E9:3F:7F:13:B8:62:5A:08:88:FD:0E:83:35:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:cc:d5:e4:68:66:f3:2f:0e:2e:d5:29:99:9f:a8:6b:e5:fe: 64:6b:37:d7:0d:ca:1c:43:30:9f:12:5a:86:d4:ad:22:6a:32: 9b:c9:f7:ea:be:b9:cf:f9:4f:13:ef:53:5f:61:9b:2d:13:d1: d5:08:09:18:78:82:f7:59:83:ec:5c:62:8d:ab:6b:38:9b:66: d5:48:f6:df:45:3a:c6:f1:6d:9f:f3:bf:3e:48:d3:58:6c:de: 56:19:97:04:ce:5a:09:c3:1d:83:ef:f7:20:71:10:ef:d9:64: 48:1d:c2:2c:78:0f:96:3a:86:14:4b:8d:fb:7f:0d:da:f0:f9: 84:93:b6:78:be:08:a6:d6:74:73:16:ee:ab:a3:cc:44:c1:72: ad:fb:43:0a:43:ee:f0:0d:12:84:af:f6:b9:f5:6a:87:9d:d4: f9:b8:c1:6b:09:6e:ae:d6:02:9f:e4:37:fd:0d:c3:0c:ba:8b: 8a:d0:58:4d:c2:4d:a0:07:20:1f:f4:91:41:d7:08:c7:78:3c: a8:d4:06:c1:74:50:a1:9b:18:8a:ba:4b:a8:fd:0e:cb:5c:4f: b9:4f:bb:5d:c9:ea:b0:33:a4:03:55:4d:c6:13:2b:9c:dc:76: e1:11:a7:67:41:d5:8e:5e:4f:8b:88:b0:88:dc:a4:72:e5:59: 42:8e:e6:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJU1MLGKQHyhaEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YmZlOGE4ZTUtZWU3OS00NjZmLThkYmQtYTI3Y2RkYjU1ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmd/WkyrOyiHg9O0KFEII8wPXZHVlOxUXu5d EnHrwUGq54J7uIIGRH0YaoNaZ0m1vbImSW4U7HwnSWwYBnDKvNwUJK9djHTZI5AC QSxwu8T66NFsj8l9gymw11J41dNtWY586CyVBP8sTEGHygENwbbaswqX2swyvK4U HvZyZyW+9WxpKZ/zcdit4WuItytP3OK4x2/frml9ntZcO2tqbHDlbwXStMjyU48G QtPs/t7m48Z+gB8vhisHdL8dDsxaKVB75f652K+D3c7AgAutTKeZyolULYfi6FL9 +rkz0Xw85feQ6HWGuEbpTPsiMYcJNpon1Rra3iUbuR2qoQT2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/iRizpsuk/fxO4YloIiP0OgzV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/M1eRoZvMvDi7VKZmfqGvl/mRrN9cNyhxDMJ8SWobUrSJqMpvJ9+q+ uc/5TxPvU19hmy0T0dUICRh4gvdZg+xcYo2razibZtVI9t9FOsbxbZ/zvz5I01hs 3lYZlwTOWgnDHYPv9yBxEO/ZZEgdwix4D5Y6hhRLjft/Ddrw+YSTtni+CKbWdHMW 7qujzETBcq37QwpD7vANEoSv9rn1aoed1Pm4wWsJbq7WAp/kN/0Nwwy6i4rQWE3C TaAHIB/0kUHXCMd4PKjUBsF0UKGbGIq6S6j9DstcT7lPu13J6rAzpANVTcYTK5zc duERp2dB1Y5eT4uIsIjcpHLlWUKO5os= -----END CERTIFICATE-----Generated at Mon May 4 03:09:22 2026 by rpki-client