$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa File: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (raw, json) Hash identifier: GUXj7iS8168MCwiJ+lw/ZR0vZLG7jurxURRvhDXBYQc= Subject key identifier: D8:CE:C9:61:B1:E3:36:B5:A7:47:7A:F7:E8:D9:89:DB:4A:B4:51:6F Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584D8AC5440FEC01D2387C08B100 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 18587 IP address blocks: 204.209.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:44:0f:ec:01:d2:38:7c:08:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=7e048675-2369-4d3c-896c-52cfda24512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:09:e2:9d:b1:f2:7f:e3:54:47:7e:f3:84: a4:b5:a6:bf:b9:87:b6:42:50:d7:8d:5e:24:bb:26: 0e:c2:44:2c:a7:31:e3:8f:ce:5a:68:88:96:ec:33: 04:91:d9:63:3e:7f:39:4b:f1:aa:95:86:79:f0:f7: 1c:99:56:7b:c6:c8:62:4b:41:f8:66:a8:0d:f4:c7: b8:8d:a5:6b:df:ca:94:0f:6c:f7:04:8c:eb:68:b3: d1:b3:d3:e2:b4:7b:47:32:d2:95:a2:c7:bb:8d:4e: 94:7e:a0:72:37:6d:91:59:d1:7b:97:aa:64:a1:07: cb:b4:ec:6b:06:86:26:65:07:5e:e2:71:61:23:6f: 55:8e:a0:1d:f9:aa:6e:46:c9:e3:8f:ba:47:4f:92: 4c:2b:49:d4:af:fc:6d:0d:b7:b5:45:63:44:f3:cf: ae:ff:f3:a4:a7:6b:81:1d:6c:95:ee:7c:01:46:e5: 1e:04:52:5a:58:0c:bd:0d:2a:57:18:c6:07:41:23: 38:e9:2b:18:18:31:55:3b:b1:43:8d:b2:38:1b:33: d5:e6:11:c2:ac:ac:83:55:3d:07:50:18:99:30:dd: 8e:76:30:42:c5:1d:a3:b1:73:3d:d7:0b:9f:75:e1: 0b:2b:92:c9:ab:76:6d:c0:c1:b2:aa:c3:e3:86:6d: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CE:C9:61:B1:E3:36:B5:A7:47:7A:F7:E8:D9:89:DB:4A:B4:51:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:66:fc:5c:8c:4c:94:98:69:0e:7a:41:dc:26:65:5e:a4:a8: b5:58:2f:4b:6a:0f:93:c6:2f:9c:7f:fb:5b:20:c1:18:f8:e2: 41:5b:c7:69:00:3b:64:38:54:87:e2:f9:95:cf:13:a9:3a:af: 82:7b:c3:51:ba:8c:b2:d1:85:07:d2:cb:77:63:7d:c5:5d:58: 07:ec:9b:ae:24:8b:28:0c:b8:d6:26:79:dc:36:79:dd:59:1e: 4a:af:7d:0c:14:d5:b5:83:2e:e7:90:eb:9d:f8:96:dc:90:28: 25:37:5c:d2:d9:f7:18:6b:2b:38:71:a9:63:80:c0:c6:dd:a1: c8:61:fb:98:ea:8a:31:64:4a:ae:04:49:d9:80:ad:44:ef:c3: b5:b6:ec:5b:e2:66:3e:14:c6:1e:77:3e:9b:ce:44:05:38:22: 74:65:9c:ba:fc:70:67:e9:07:75:90:72:65:fb:24:4b:63:49: 9b:87:a9:ba:d9:ec:6f:aa:dd:e3:86:2d:53:7f:01:03:e6:b0: 33:81:16:4c:bd:87:57:2b:d1:81:f3:28:b2:a2:16:19:06:bb: c4:43:dd:d7:da:c6:28:a9:ae:36:12:56:33:08:44:12:fe:5c: 5e:07:3c:b7:1a:7f:11:f4:34:99:11:5b:e2:0d:82:e3:cd:25: 28:c4:63:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUQP7AHSOHwIsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk N2UwNDg2NzUtMjM2OS00ZDNjLTg5NmMtNTJjZmRhMjQ1MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH4J4p2x8n/jVEd+84Sktaa/uYe2QlDXjV4k uyYOwkQspzHjj85aaIiW7DMEkdljPn85S/GqlYZ58PccmVZ7xshiS0H4ZqgN9Me4 jaVr38qUD2z3BIzraLPRs9PitHtHMtKVose7jU6UfqByN22RWdF7l6pkoQfLtOxr BoYmZQde4nFhI29VjqAd+apuRsnjj7pHT5JMK0nUr/xtDbe1RWNE88+u//Okp2uB HWyV7nwBRuUeBFJaWAy9DSpXGMYHQSM46SsYGDFVO7FDjbI4GzPV5hHCrKyDVT0H UBiZMN2OdjBCxR2jsXM91wufdeELK5LJq3ZtwMGyqsPjhm1JjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjOyWGx4za1p0d69+jZidtKtFFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMmIyYWMxMWItZTQ4ZS0z ZDdiLWJiNDctNzRiODgyOTg2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtm/FyMTJSYaQ56QdwmZV6kqLVYL0tqD5PGL5x/+1sgwRj44kFbx2kA O2Q4VIfi+ZXPE6k6r4J7w1G6jLLRhQfSy3djfcVdWAfsm64kiygMuNYmedw2ed1Z HkqvfQwU1bWDLueQ6534ltyQKCU3XNLZ9xhrKzhxqWOAwMbdochh+5jqijFkSq4E SdmArUTvw7W27FviZj4Uxh53PpvORAU4InRlnLr8cGfpB3WQcmX7JEtjSZuHqbrZ 7G+q3eOGLVN/AQPmsDOBFky9h1cr0YHzKLKiFhkGu8RD3dfaxiiprjYSVjMIRBL+ XF4HPLcafxH0NJkRW+INguPNJSjEYyc= -----END CERTIFICATE-----Generated at Sun Apr 19 02:24:12 2026 by rpki-client