$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28c41ddb-d4bb-345c-b620-f3fac2ec8c64.roa File: 28c41ddb-d4bb-345c-b620-f3fac2ec8c64.roa (raw, json) Hash identifier: vJBi0nJ7DXzb9fdWe61drcrPrktlD+wTYK4aayn2TJE= Subject key identifier: 65:85:6F:8A:A8:B7:E5:E7:17:6D:8F:66:A8:C9:4B:0E:6B:47:E3:15 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584D923E34DAEF3E7EE4604C5A00 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28c41ddb-d4bb-345c-b620-f3fac2ec8c64.roa Signing time: Mon 20 Apr 2026 17:14:56 +0000 ROA not before: Mon 20 Apr 2026 17:14:56 +0000 ROA not after: Sun 19 Jul 2026 17:14:56 +0000 asID: 402215 IP address blocks: 209.236.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:3e:34:da:ef:3e:7e:e4:60:4c:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 20 17:14:56 2026 GMT Not After : Jul 19 17:14:56 2026 GMT Subject: CN=eb6eb8f6-715f-41a6-b07d-c1e0ffc3df04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:78:9a:5f:6e:89:32:b6:45:e0:b8:04:43: 64:4b:6e:12:bd:c3:23:1d:4d:67:0e:ff:39:9e:61: 75:3c:38:10:49:78:52:42:80:81:c7:10:ae:10:fb: dd:65:ae:fe:f0:f4:82:3d:35:5d:38:ec:ed:67:f1: 10:0e:b5:75:58:62:3b:c8:f4:b9:08:58:fe:9b:22: e5:0b:4a:8e:7c:62:97:d9:99:58:18:2a:67:13:f6: be:3c:5d:c9:ab:38:d8:35:16:16:70:9b:f5:4a:9d: 22:80:36:ed:fc:62:7b:00:6f:0e:63:73:99:47:50: 12:1c:c4:36:c1:06:4f:53:46:6d:8c:37:20:ad:f3: 6c:7d:0e:13:ae:52:8e:07:75:db:55:d4:96:0b:25: e1:27:91:83:e3:a8:ac:95:e6:46:86:52:ae:83:10: 16:68:1a:fa:0d:77:cb:71:71:2c:75:4b:12:f9:a1: 6d:72:d7:76:64:ce:5e:fb:f3:63:01:3a:04:5b:1d: 50:47:cb:db:f5:80:da:b8:19:37:ca:bb:54:28:6a: b8:a2:cb:7d:83:24:4c:aa:ac:cb:35:c6:dd:13:54: 49:6e:a6:71:01:75:94:0a:91:f9:cc:fc:94:9e:4d: 12:bc:10:e0:65:78:4c:86:48:5a:b5:d3:0f:4c:a6: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:6F:8A:A8:B7:E5:E7:17:6D:8F:66:A8:C9:4B:0E:6B:47:E3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28c41ddb-d4bb-345c-b620-f3fac2ec8c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.236.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:34:81:e1:3a:a1:e4:9e:2c:85:48:ee:9b:ca:04:ab:7b:a5: 2d:a7:f3:79:e9:4e:2b:2c:86:3b:b7:17:c4:54:7e:c5:f5:ed: 83:52:a9:be:9e:f4:87:42:30:ff:60:58:95:59:e7:17:f0:d3: 01:be:c8:2d:64:37:89:d6:f2:57:56:85:36:37:40:ad:cf:28: 0f:fc:b7:f2:b7:fa:dd:9a:e2:5e:41:d6:4c:5d:f8:4a:69:a2: dd:42:5e:de:bd:28:39:7e:38:45:03:3f:be:8c:fa:5b:6e:1b: 16:1e:7c:15:91:a0:90:48:f8:c3:00:f3:05:a0:61:be:bb:f2: ff:00:25:b9:2c:ec:38:c0:99:01:e7:91:3d:05:0d:2e:ab:8e: 12:58:a1:3b:2b:fc:d4:39:7a:c2:20:12:39:61:a2:c9:2f:1b: 6a:61:26:b2:38:ab:16:b0:d8:eb:df:ec:1b:a8:24:bf:42:57: 54:6b:e4:d1:7d:c3:a9:62:8f:32:b4:fa:4e:43:34:d3:7b:b5: cc:f8:cf:fa:2d:c0:4e:38:b5:a7:ac:be:d4:a9:4d:0b:a8:b6: 71:a4:54:14:78:23:fd:e5:eb:16:67:a6:b3:f1:34:32:bc:61: ce:fa:64:29:47:53:9d:49:68:c1:3b:d1:97:55:b6:40:41:f7: 11:5e:05:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2SPjTa7z5+5GBMWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDQyMDE3MTQ1NloXDTI2MDcxOTE3MTQ1NlowLzEtMCsGA1UEAxMk ZWI2ZWI4ZjYtNzE1Zi00MWE2LWIwN2QtYzFlMGZmYzNkZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAp4ml9uiTK2ReC4BENkS24SvcMjHU1nDv85 nmF1PDgQSXhSQoCBxxCuEPvdZa7+8PSCPTVdOOztZ/EQDrV1WGI7yPS5CFj+myLl C0qOfGKX2ZlYGCpnE/a+PF3JqzjYNRYWcJv1Sp0igDbt/GJ7AG8OY3OZR1ASHMQ2 wQZPU0ZtjDcgrfNsfQ4TrlKOB3XbVdSWCyXhJ5GD46isleZGhlKugxAWaBr6DXfL cXEsdUsS+aFtctd2ZM5e+/NjAToEWx1QR8vb9YDauBk3yrtUKGq4ost9gyRMqqzL NcbdE1RJbqZxAXWUCpH5zPyUnk0SvBDgZXhMhkhatdMPTKa9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWFb4qot+XnF22PZqjJSw5rR+MVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjhjNDFkZGItZDRiYi0z NDVjLWI2MjAtZjNmYWMyZWM4YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg0geE6oeSeLIVI7pvKBKt7pS2n83npTisshju3F8RUfsX17YNSqb6e 9IdCMP9gWJVZ5xfw0wG+yC1kN4nW8ldWhTY3QK3PKA/8t/K3+t2a4l5B1kxd+Epp ot1CXt69KDl+OEUDP76M+ltuGxYefBWRoJBI+MMA8wWgYb678v8AJbks7DjAmQHn kT0FDS6rjhJYoTsr/NQ5esIgEjlhoskvG2phJrI4qxaw2Ovf7BuoJL9CV1Rr5NF9 w6lijzK0+k5DNNN7tcz4z/otwE44taesvtSpTQuotnGkVBR4I/3l6xZnprPxNDK8 Yc76ZClHU51JaME70ZdVtkBB9xFeBVo= -----END CERTIFICATE-----Generated at Mon Apr 20 20:48:17 2026 by rpki-client