$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c916614b-3ed7-3be8-afe2-885d2a91625d.roa File: c916614b-3ed7-3be8-afe2-885d2a91625d.roa (raw, json) Hash identifier: 2SoV7aXsp/oOjCBoHrsVGmtQ02uSrpCWkQ1S3FpmT5M= Subject key identifier: 44:E7:CC:81:56:78:E9:22:9D:31:4A:11:36:FE:95:4C:9D:EA:DB:2C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D949F258AD1FE1D4A4E5F4F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c916614b-3ed7-3be8-afe2-885d2a91625d.roa Signing time: Tue 21 Apr 2026 13:41:52 +0000 ROA not before: Tue 21 Apr 2026 13:41:52 +0000 ROA not after: Mon 20 Jul 2026 13:41:52 +0000 asID: 0 IP address blocks: 209.115.29.0/24 maxlen: 24 216.29.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:9f:25:8a:d1:fe:1d:4a:4e:5f:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 21 13:41:52 2026 GMT Not After : Jul 20 13:41:52 2026 GMT Subject: CN=0f8667d2-502c-48b4-b5f4-08a15b0665f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:a3:6a:a0:24:1b:ae:bc:49:b9:6d:82:15: 6f:25:6b:f8:5f:55:2a:6a:2c:db:62:63:e2:b3:d9: b4:f2:2c:67:9a:97:51:ee:1b:84:4a:23:ab:91:6a: c4:e9:70:b5:cc:04:d7:98:98:ae:be:59:7c:4e:a4: f8:a1:a2:45:59:a8:ca:90:38:75:d7:9b:6a:17:80: 74:77:63:22:36:b8:c3:95:23:11:3b:10:cc:5c:d1: 5f:60:f5:3d:61:6d:9e:f2:51:61:42:5b:e6:40:de: 87:ea:04:98:fc:4c:dc:2a:e7:d6:ed:0d:06:75:96: 18:8f:27:7e:c4:27:6f:37:71:08:7d:11:ba:82:3d: 44:3e:87:65:44:8b:11:c0:75:be:13:ea:37:28:a7: 79:43:69:04:ef:3a:29:3f:83:2a:c9:0c:62:d4:76: c6:0b:e2:08:98:9a:b1:ac:76:2f:3e:ee:35:50:e1: 52:87:a3:cc:0b:97:c5:9e:67:86:fd:9e:35:93:5a: 0f:87:e5:c0:26:da:ea:71:07:51:1b:ba:16:88:fc: 92:83:c9:c8:0e:64:fe:a2:f2:3e:6b:23:22:54:bc: 07:62:c6:e8:54:d5:d7:a1:54:4b:d9:af:d5:51:8f: 04:f7:45:12:dc:2f:80:bc:9d:eb:79:1d:7d:23:5b: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:CC:81:56:78:E9:22:9D:31:4A:11:36:FE:95:4C:9D:EA:DB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c916614b-3ed7-3be8-afe2-885d2a91625d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.115.29.0/24 216.29.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:2d:1e:7e:54:cf:3e:a4:34:51:85:35:ec:14:55:92:5b:26: cb:67:78:b8:00:89:f4:49:93:06:7c:3f:43:8a:55:23:cb:08: 50:fc:35:be:a9:f2:6e:ad:02:01:ad:b7:91:bb:3f:3c:a6:b9: d9:34:ba:ab:2b:57:f6:6a:ad:7e:4d:32:34:d5:83:9f:ac:b6: 77:14:ab:26:6f:66:f0:9c:61:3b:87:b5:24:32:8f:3a:d8:2b: 7c:20:2d:83:66:60:c6:67:83:07:d6:2a:e3:65:90:15:49:d4: dc:22:f8:5c:f1:72:1f:03:42:10:0f:ba:8f:fa:37:a7:b1:c4: 4c:a5:37:a0:31:33:10:33:00:8d:4f:49:64:0b:a9:10:c8:4e: 76:ea:ad:a3:1f:75:bd:b0:3d:3a:2b:fd:1d:88:05:3a:62:b7: 3a:aa:8f:fd:d6:47:f0:28:2a:c8:ea:61:a9:ec:6a:f4:f0:ae: a2:44:5e:61:3e:95:e9:73:e5:09:2f:85:ce:96:03:55:f3:8a: 3d:6f:2b:33:51:d1:10:f5:3b:73:29:d7:2d:c5:4a:0c:ea:ba: 97:5a:5b:84:5b:eb:f1:50:a4:c9:77:0e:46:aa:3b:a0:8c:04: b4:ef:a0:02:9e:ea:70:30:62:44:2f:df:8a:b7:a3:03:a7:4c: 11:34:18:dc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2UnyWK0f4dSk5fTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMTEzNDE1MloXDTI2MDcyMDEzNDE1MlowLzEtMCsGA1UEAxMk MGY4NjY3ZDItNTAyYy00OGI0LWI1ZjQtMDhhMTViMDY2NWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/yjaqAkG668SbltghVvJWv4X1UqaizbYmPi s9m08ixnmpdR7huESiOrkWrE6XC1zATXmJiuvll8TqT4oaJFWajKkDh115tqF4B0 d2MiNrjDlSMROxDMXNFfYPU9YW2e8lFhQlvmQN6H6gSY/EzcKufW7Q0GdZYYjyd+ xCdvN3EIfRG6gj1EPodlRIsRwHW+E+o3KKd5Q2kE7zopP4MqyQxi1HbGC+IImJqx rHYvPu41UOFSh6PMC5fFnmeG/Z41k1oPh+XAJtrqcQdRG7oWiPySg8nIDmT+ovI+ ayMiVLwHYsboVNXXoVRL2a/VUY8E90US3C+AvJ3reR19I1sOGwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFETnzIFWeOkinTFKETb+lUyd6tssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzkxNjYxNGItM2VkNy0z YmU4LWFmZTItODg1ZDJhOTE2MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0XMdAwQA 2B2ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALQtHn5Uzz6kNFGFNewUVZJbJstneLgAifRJkwZ8P0OKVSPL CFD8Nb6p8m6tAgGtt5G7Pzymudk0uqsrV/ZqrX5NMjTVg5+stncUqyZvZvCcYTuH tSQyjzrYK3wgLYNmYMZngwfWKuNlkBVJ1Nwi+Fzxch8DQhAPuo/6N6exxEylN6Ax MxAzAI1PSWQLqRDITnbqraMfdb2wPTor/R2IBTpitzqqj/3WR/AoKsjqYansavTw rqJEXmE+lelz5Qkvhc6WA1Xzij1vKzNR0RD1O3Mp1y3FSgzqupdaW4Rb6/FQpMl3 DkaqO6CMBLTvoAKe6nAwYkQv34q3owOnTBE0GNw= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:02 2026 by rpki-client