$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: YRyIEaXIDeZxlXRwhmjoq3nJ9tQ/yKBWBs8D2CyMtmk= Subject key identifier: 4F:A0:CD:ED:4C:7A:98:2A:45:D9:9A:D5:86:4D:7E:FA:AC:29:85:9F Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F4328584D5E1A4C4C8F66C595EFF7F900 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:4c:4c:8f:66:c5:95:ef:f7:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=2c0f9c28-a0fe-4478-9924-c5cbda321652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:22:0c:c1:f1:05:13:d8:08:68:28:5d:ea: a2:27:b5:c8:cf:7c:11:f8:82:b5:13:6c:99:c3:8c: 2d:d7:76:39:ab:bb:47:d4:07:37:0a:8e:da:03:3f: e5:73:15:8c:f8:92:f3:e3:5b:63:7a:23:92:7c:dc: 29:17:69:c5:da:17:0b:8b:53:aa:6a:8a:dd:af:fe: 4b:89:65:d2:6c:c4:a4:7c:ee:39:79:e4:bc:72:c0: b4:b9:b3:a1:eb:9c:92:a6:d5:b0:31:fc:27:2b:a9: 3f:75:dc:01:4d:40:e9:54:a1:d5:24:e8:ea:d4:4f: aa:9d:8d:27:3a:76:5d:c6:66:82:be:51:e2:5f:bb: 8a:0a:ed:ee:73:b3:d6:38:2b:a2:9c:9b:65:1e:a6: 9a:25:f8:8a:48:42:a5:55:af:0e:03:55:01:b7:94: ce:4a:b2:db:fc:cf:67:00:15:15:d2:a9:e7:40:46: d3:e4:e3:29:19:96:07:bf:08:21:09:c4:90:4c:8a: 65:2f:6c:8e:3f:15:b0:b3:12:af:1d:db:df:72:01: 04:25:54:a7:36:20:3e:fc:3b:e0:09:d6:34:95:9c: de:86:58:a6:d6:45:97:80:d8:71:bd:54:93:dd:d8: db:d6:de:56:82:aa:d1:a4:f0:36:0c:8e:77:ad:93: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:CD:ED:4C:7A:98:2A:45:D9:9A:D5:86:4D:7E:FA:AC:29:85:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:12:40:02:c1:ec:02:c4:e9:19:28:fe:13:d1:86:7e:6c:0d: 64:38:97:72:d2:3a:b0:54:42:bf:fd:3b:20:83:b7:59:00:4e: e0:e3:c3:c8:52:c5:0f:fc:f1:bb:e9:10:38:39:89:52:a2:f1: 14:c6:8d:ad:fa:1f:55:14:56:32:91:23:a5:5d:62:80:c7:39: a5:1e:ae:34:0e:78:48:a5:0f:d4:d9:bd:92:6a:33:f2:d3:89: 2e:23:df:a9:d7:9d:67:5e:10:41:5e:39:9a:ea:51:4a:9e:47: b7:5e:4b:86:3e:2c:35:3c:13:42:63:07:58:44:4e:a1:0c:bb: aa:28:2b:ec:0b:65:2b:7c:12:ab:a4:95:70:32:e5:53:4c:21: 7f:2f:e1:3a:59:5e:df:1b:74:20:f1:26:55:c6:2b:e5:0e:65: 2a:20:25:75:16:aa:48:6d:57:7b:b0:7f:f0:7f:e0:47:30:3f: b4:c1:cc:f9:3b:c1:4d:7e:d9:e4:11:f6:8f:1a:1c:2d:30:b9: 88:fb:f5:11:8d:ae:71:e5:cf:e7:e6:4d:6b:e1:be:65:eb:1f: b9:79:5b:bb:46:94:18:2f:04:11:e2:8b:98:39:20:9a:3a:1f: 48:6d:79:20:6e:d4:4c:27:e4:8f:bb:23:1e:d6:1d:38:bd:9f: bc:8b:f8:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkxMj2bFle/3+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MmMwZjljMjgtYTBmZS00NDc4LTk5MjQtYzVjYmRhMzIxNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJMiDMHxBRPYCGgoXeqiJ7XIz3wR+IK1E2yZ w4wt13Y5q7tH1Ac3Co7aAz/lcxWM+JLz41tjeiOSfNwpF2nF2hcLi1Oqaordr/5L iWXSbMSkfO45eeS8csC0ubOh65ySptWwMfwnK6k/ddwBTUDpVKHVJOjq1E+qnY0n OnZdxmaCvlHiX7uKCu3uc7PWOCuinJtlHqaaJfiKSEKlVa8OA1UBt5TOSrLb/M9n ABUV0qnnQEbT5OMpGZYHvwghCcSQTIplL2yOPxWwsxKvHdvfcgEEJVSnNiA+/Dvg CdY0lZzehlim1kWXgNhxvVST3djb1t5WgqrRpPA2DI53rZPFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+gze1MepgqRdma1YZNfvqsKYWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8SQALB7ALE6Rko/hPRhn5sDWQ4l3LSOrBUQr/9OyCDt1kATuDjw8hS xQ/88bvpEDg5iVKi8RTGja36H1UUVjKRI6VdYoDHOaUerjQOeEilD9TZvZJqM/LT iS4j36nXnWdeEEFeOZrqUUqeR7deS4Y+LDU8E0JjB1hETqEMu6ooK+wLZSt8Equk lXAy5VNMIX8v4TpZXt8bdCDxJlXGK+UOZSogJXUWqkhtV3uwf/B/4EcwP7TBzPk7 wU1+2eQR9o8aHC0wuYj79RGNrnHlz+fmTWvhvmXrH7l5W7tGlBgvBBHii5g5IJo6 H0hteSBu1Ewn5I+7Ix7WHTi9n7yL+Nc= -----END CERTIFICATE-----Generated at Thu Apr 9 02:28:31 2026 by rpki-client