$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa File: ad70148b-73be-3a2f-b582-410330333317.roa (raw, json) Hash identifier: hoTGx+YijXcjpy8FWZNG7P26RE1nGgiMZBq7ftiV/Eo= Subject key identifier: 2E:4C:71:00:FD:1C:34:9E:D5:48:4B:55:F1:BF:0A:D4:37:EE:B7:05 Certificate issuer: /CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Certificate serial: 010D0C9F4328584D6A9726F5F6455D57822DEC80 Authority key identifier: A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa Signing time: Mon 06 Apr 2026 12:21:49 +0000 ROA not before: Mon 06 Apr 2026 12:21:49 +0000 ROA not after: Fri 22 May 2026 17:08:58 +0000 asID: 10823 IP address blocks: 209.204.64.0/21 maxlen: 21 209.204.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:97:26:f5:f6:45:5d:57:82:2d:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Validity Not Before: Apr 6 12:21:49 2026 GMT Not After : May 22 17:08:58 2026 GMT Subject: CN=7423f939-2df5-482d-8d16-a11b5f54ea41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:fb:e2:31:e4:a6:f4:49:5e:d4:23:8a:b9: d1:f9:5f:0f:11:4d:37:b6:2c:8c:b1:c6:00:28:20: eb:ab:60:98:5f:af:8e:c0:6f:62:17:5c:c2:5c:ed: da:ee:04:c6:58:54:3c:59:07:6c:1b:0a:96:d1:d2: b1:5f:88:cd:0a:37:66:d1:97:32:96:73:97:bc:01: 2e:c4:ba:59:f9:f9:5a:94:39:06:5a:4d:69:d9:fa: 36:ff:5b:41:d2:56:f6:45:47:42:7e:d2:19:d3:b5: 99:a9:e9:8e:8f:d7:c6:c4:47:72:38:99:b5:33:3b: 94:93:3a:4f:41:e5:2f:11:f4:8c:b3:9f:91:8b:c4: 04:fc:81:8b:c6:03:6c:12:17:1c:e3:b6:3c:05:8c: d5:74:ef:7d:24:79:3f:b4:03:91:6c:f4:37:b0:e1: 1b:84:db:f5:12:6b:1f:07:f1:91:dc:8c:db:4a:50: e7:1a:6b:31:cc:52:45:4a:03:07:4f:db:1e:30:3d: db:9f:64:22:57:9f:22:90:ff:1b:cb:24:e4:78:50: 08:8c:17:c3:84:f2:34:86:f3:1e:13:aa:51:3f:c0: 89:a8:a8:97:3e:fb:3a:07:3d:bf:5f:72:62:6b:f7: 28:36:98:bc:72:40:2d:07:28:26:1b:dc:96:8d:52: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:71:00:FD:1C:34:9E:D5:48:4B:55:F1:BF:0A:D4:37:EE:B7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl X509v3 Authority Key Identifier: keyid:A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer sbgp-ipAddrBlock: critical IPv4: 209.204.64.0/21 209.204.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:78:96:de:d6:b8:e9:87:ec:a0:4c:02:ff:58:6c:0b:5d:a6: 89:b7:63:29:90:66:0f:bd:f4:66:43:20:fe:11:91:6b:38:43: 77:11:5c:d0:8e:34:06:43:77:a7:c3:72:94:18:e0:30:3f:dc: 7a:8d:7a:b8:94:8d:07:76:54:f2:97:b5:12:3a:90:bf:ef:67: 4e:b4:01:db:51:ae:5b:05:d8:04:2f:f9:e8:e9:c5:c6:c4:cc: ad:26:4b:ef:35:fe:8d:ef:aa:c2:ad:84:23:e3:77:6c:70:18: f2:76:40:77:84:21:2e:4b:ff:81:0a:b7:15:24:c5:3b:2d:ee: 24:6a:be:e4:c8:52:6f:32:f0:03:35:07:97:50:de:52:ac:9b: 90:64:2a:bd:32:64:51:3f:53:f6:a9:39:7f:1f:14:d4:d6:9d: 05:f6:a9:a1:c0:7f:71:98:7d:14:6f:ef:50:7d:02:40:72:c9: e3:e1:95:12:21:d8:54:9e:9a:6a:85:be:4a:8b:c3:8b:18:93: 94:88:07:67:60:f2:58:cd:20:52:79:43:56:bb:02:30:6d:f3: 47:b7:b1:8b:38:22:d9:17:43:24:7b:84:bb:ce:bc:b0:d1:ff: 97:e1:85:80:e7:ce:a7:d9:b2:92:a7:bf:a7:19:f3:35:97:2e: b4:d1:6f:01 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1qlyb19kVdV4It7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIxNDc5ZDktMjQzOC00MmMxLWFhNDYtZWFkMzVmMmQz M2UyMB4XDTI2MDQwNjEyMjE0OVoXDTI2MDUyMjE3MDg1OFowLzEtMCsGA1UEAxMk NzQyM2Y5MzktMmRmNS00ODJkLThkMTYtYTExYjVmNTRlYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomL74jHkpvRJXtQjirnR+V8PEU03tiyMscYA KCDrq2CYX6+OwG9iF1zCXO3a7gTGWFQ8WQdsGwqW0dKxX4jNCjdm0ZcylnOXvAEu xLpZ+flalDkGWk1p2fo2/1tB0lb2RUdCftIZ07WZqemOj9fGxEdyOJm1MzuUkzpP QeUvEfSMs5+Ri8QE/IGLxgNsEhcc47Y8BYzVdO99JHk/tAORbPQ3sOEbhNv1Emsf B/GR3IzbSlDnGmsxzFJFSgMHT9seMD3bn2QiV58ikP8byyTkeFAIjBfDhPI0hvMe E6pRP8CJqKiXPvs6Bz2/X3Jia/coNpi8ckAtBygmG9yWjVIFXwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC5McQD9HDSe1UhLVfG/CtQ37rcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0 NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQzNWYyZDMzZTIvYWQ3MDE0OGItNzNiZS0z YTJmLWI1ODItNDEwMzMwMzMzMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjIxNDc5ZDktMjQzOC00MmMxLWFh NDYtZWFkMzVmMmQzM2UyL2YyMTQ3OWQ5LTI0MzgtNDJjMS1hYTQ2LWVhZDM1ZjJk MzNlMi5jcmwwHwYDVR0jBBgwFoAUot8lNxMZrmG8vbfexse1zbOr0GIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQz NWYyZDMzZTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQD0cxAAwQA 0cx3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIZ4lt7WuOmH7KBMAv9YbAtdpom3YymQZg+99GZDIP4RkWs4 Q3cRXNCONAZDd6fDcpQY4DA/3HqNeriUjQd2VPKXtRI6kL/vZ060AdtRrlsF2AQv +ejpxcbEzK0mS+81/o3vqsKthCPjd2xwGPJ2QHeEIS5L/4EKtxUkxTst7iRqvuTI Um8y8AM1B5dQ3lKsm5BkKr0yZFE/U/apOX8fFNTWnQX2qaHAf3GYfRRv71B9AkBy yePhlRIh2FSemmqFvkqLw4sYk5SIB2dg8ljNIFJ5Q1a7AjBt80e3sYs4ItkXQyR7 hLvOvLDR/5fhhYDnzqfZspKnv6cZ8zWXLrTRbwE= -----END CERTIFICATE-----Generated at Mon Apr 13 12:07:08 2026 by rpki-client