$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d59a2b3-620c-36cd-8bd8-f97048a4465c.roa File: 6d59a2b3-620c-36cd-8bd8-f97048a4465c.roa (raw, json) Hash identifier: hOZln6G55JXkFG/WTaBuhGEa1rB0eMby7d/YSEcAdm8= Subject key identifier: 4A:0A:35:FD:77:BF:FE:4D:D6:8D:5B:B6:EC:51:A4:1A:F5:55:71:9D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D9A202E1371D696B1EE271EB4 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d59a2b3-620c-36cd-8bd8-f97048a4465c.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 265629 IP address blocks: 209.14.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:2e:13:71:d6:96:b1:ee:27:1e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=b2b5d85f-4d3e-4ad5-ba8e-fa6dae13acba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:ec:87:d2:c4:17:72:50:c1:46:7e:45:45: 00:c6:99:0d:15:5f:06:9b:9b:d5:23:e6:8f:ec:c0: 04:fc:7c:54:e9:0b:68:34:61:da:68:79:29:50:27: fe:7a:68:64:a2:a5:b9:58:3d:99:75:3c:bc:7a:4f: e4:38:b4:19:55:72:57:bb:d6:d0:ef:d6:1e:1e:30: 14:ce:c5:56:a8:1a:92:df:89:f9:7b:ac:f5:dd:cd: da:47:4f:b3:23:1b:4c:72:02:c3:44:58:33:86:27: 01:0c:a8:43:aa:5b:ca:4c:a3:ea:77:35:90:0a:74: 01:6f:32:b1:b1:ae:73:6c:75:0f:80:ed:20:14:b1: 41:9c:d2:58:68:ce:d9:8c:86:ab:eb:6e:f6:56:93: 16:55:f5:74:fc:53:39:a5:59:88:5a:c1:c1:95:52: bd:87:98:36:fc:d0:f9:68:32:ca:74:09:8c:7a:85: 19:2f:ef:43:30:12:ee:2a:41:01:71:79:64:ee:b5: 8d:54:e6:39:42:9c:aa:d7:de:d1:e4:9f:8b:4b:a2: 8f:d8:62:9a:8e:34:69:52:cf:ca:62:52:3e:2f:cc: 74:2a:81:79:e0:f8:ed:ab:0f:88:ed:fa:9d:bd:cf: ae:30:4c:dc:db:a0:df:14:80:35:ed:10:ab:54:7b: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0A:35:FD:77:BF:FE:4D:D6:8D:5B:B6:EC:51:A4:1A:F5:55:71:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d59a2b3-620c-36cd-8bd8-f97048a4465c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.14.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:58:dd:b4:c4:04:18:e6:52:48:b3:d6:4e:46:49:59:85:4c: f1:67:65:95:0a:2f:79:96:c5:30:f6:6b:1f:27:84:9c:bd:43: a6:49:8e:f9:f8:5f:5c:9a:0b:45:bd:ff:87:8b:da:10:ba:f0: 2c:52:d7:cb:f2:6f:e8:cc:df:72:72:07:ba:a1:bc:1d:9e:4d: 44:ca:4b:a5:5b:25:2b:3b:68:2f:61:c9:a1:ce:a9:e8:9e:82: 31:12:c9:09:e1:4b:a9:72:c9:ec:b3:47:57:22:f9:2f:db:0a: d5:87:35:71:30:e4:54:0b:76:64:9c:d0:9b:78:a8:b3:5b:7a: 39:22:93:d4:cc:d4:10:e2:66:a8:a2:15:cb:5b:70:a4:68:e9: b1:8d:0d:37:08:72:96:b6:5b:83:e0:ed:73:43:35:52:eb:dd: 24:ab:ad:32:a0:e0:fa:5c:f4:21:52:8d:f5:2f:55:e3:16:c1: 73:b2:8b:1d:52:0f:46:a1:af:10:5c:3e:27:ae:1a:d3:5f:c8: 8d:35:77:82:da:df:f6:95:a0:1f:fa:47:16:8e:c1:50:24:82: 05:78:04:09:5d:ca:e1:d8:c1:cc:0e:6f:ca:ab:60:68:cd:50: 60:3b:9a:33:b2:8d:8a:c5:47:eb:ca:0a:19:e6:44:81:c8:50: 2c:53:76:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIC4TcdaWse4nHrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YjJiNWQ4NWYtNGQzZS00YWQ1LWJhOGUtZmE2ZGFlMTNhY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvXsh9LEF3JQwUZ+RUUAxpkNFV8Gm5vVI+aP 7MAE/HxU6QtoNGHaaHkpUCf+emhkoqW5WD2ZdTy8ek/kOLQZVXJXu9bQ79YeHjAU zsVWqBqS34n5e6z13c3aR0+zIxtMcgLDRFgzhicBDKhDqlvKTKPqdzWQCnQBbzKx sa5zbHUPgO0gFLFBnNJYaM7ZjIar6272VpMWVfV0/FM5pVmIWsHBlVK9h5g2/ND5 aDLKdAmMeoUZL+9DMBLuKkEBcXlk7rWNVOY5Qpyq197R5J+LS6KP2GKajjRpUs/K YlI+L8x0KoF54Pjtqw+I7fqdvc+uMEzc26DfFIA17RCrVHsizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoKNf13v/5N1o1btuxRpBr1VXGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNmQ1OWEyYjMtNjIwYy0z NmNkLThiZDgtZjk3MDQ4YTQ0NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Q5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZY3bTEBBjmUkiz1k5GSVmFTPFnZZUKL3mWxTD2ax8nhJy9Q6ZJjvn4 X1yaC0W9/4eL2hC68CxS18vyb+jM33JyB7qhvB2eTUTKS6VbJSs7aC9hyaHOqeie gjESyQnhS6lyyeyzR1ci+S/bCtWHNXEw5FQLdmSc0Jt4qLNbejkik9TM1BDiZqii FctbcKRo6bGNDTcIcpa2W4Pg7XNDNVLr3SSrrTKg4Ppc9CFSjfUvVeMWwXOyix1S D0ahrxBcPieuGtNfyI01d4La3/aVoB/6RxaOwVAkggV4BAldyuHYwcwOb8qrYGjN UGA7mjOyjYrFR+vKChnmRIHIUCxTduE= -----END CERTIFICATE-----Generated at Tue Apr 28 21:14:41 2026 by rpki-client