$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa File: be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json) Hash identifier: XyaCCrYFoxmi1/ElIcen87kl9Pxk6FW2Er2Px+WKRFE= Subject key identifier: A9:A1:7C:20:58:2F:52:A4:5C:8A:0E:7B:0E:17:46:57:B9:F8:25:F8 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584DEDE0981F38594ADAB6EA8300 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 31813 IP address blocks: 209.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:98:1f:38:59:4a:da:b6:ea:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=615e3697-9d28-40c6-987c-cea559f71e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:8c:dc:09:65:b5:16:80:3c:a0:8e:59:94: 9f:17:ac:da:a8:fd:b0:07:e1:8b:1d:47:ba:d9:1b: b0:f3:e6:30:fd:36:f0:24:49:22:19:f2:94:97:98: 40:9a:9b:19:65:eb:bb:ca:85:10:e3:5f:b1:bd:e1: 56:d9:77:7e:ae:73:24:a1:5f:e6:de:58:45:07:62: 28:72:35:dd:d3:61:08:7a:82:f0:ea:45:ff:c9:7a: 14:fa:1b:5c:0d:57:c8:89:01:47:46:2b:1c:40:08: 50:1c:ae:c8:54:80:83:44:4a:ae:ff:4c:5f:ca:fa: 78:40:1e:eb:4c:df:16:c7:85:86:15:0b:62:2b:56: 3b:70:54:15:a2:e6:e2:15:0a:09:c1:aa:08:80:85: d1:86:05:f6:73:b1:79:65:c8:48:64:04:b3:29:d6: 27:11:df:32:7a:3f:60:cf:ab:57:10:77:4d:34:67: 0c:cf:7c:82:13:e7:a3:d8:4a:2a:16:f1:c5:c3:c4: f3:0c:3d:c4:fd:53:2e:c5:fb:0b:93:57:be:6a:5b: 48:20:c3:97:f5:8e:d4:d3:0e:bf:02:b6:7c:de:18: 28:77:24:4a:1d:90:b2:31:aa:41:61:b5:f0:f2:c4: eb:0b:9e:5b:89:6b:af:ac:e2:5c:37:a8:15:1e:6e: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:7C:20:58:2F:52:A4:5C:8A:0E:7B:0E:17:46:57:B9:F8:25:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:04:f2:a5:5d:e9:79:d4:38:1f:b1:40:37:d8:7f:7c:63:b4: e5:50:d9:82:05:64:2c:5f:e8:38:59:9b:67:21:3a:97:db:65: d0:02:93:2a:5e:44:38:c8:e5:03:4f:7d:9d:ed:46:01:e8:64: a3:da:1f:88:d0:e6:47:b9:55:2d:6b:ef:bd:01:28:da:ed:f4: 6a:51:c0:d8:bc:78:b9:7c:b9:41:78:7b:c5:85:0d:ac:14:ea: 61:24:94:4c:3e:c0:56:75:1a:b7:61:6f:57:85:10:99:06:c2: 87:14:7a:d7:b8:f8:94:5f:9f:9e:0f:55:7b:18:43:59:79:93: b8:db:2e:fe:25:c6:88:36:a0:0e:e5:ef:9e:a8:40:c7:cb:97: 37:07:fd:c6:42:02:eb:4a:97:b9:27:86:de:03:61:54:1a:07: 04:0d:5e:39:61:ee:4c:77:4e:d3:2f:07:ed:aa:12:51:b8:6e: df:24:5c:d1:d5:6a:41:de:ac:94:45:56:c0:d0:8c:61:d1:64: 6c:25:0b:79:94:5f:92:e4:b8:78:e7:aa:7e:28:65:e1:dc:3d: f9:f4:77:36:f3:65:59:8a:37:0b:66:1d:b3:a4:8e:34:1f:f7: f6:07:b2:28:bd:d5:b5:30:77:03:b3:7f:77:aa:63:66:a2:16: 9c:ca:64:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JgfOFlK2rbqgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk NjE1ZTM2OTctOWQyOC00MGM2LTk4N2MtY2VhNTU5ZjcxZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgmM3AlltRaAPKCOWZSfF6zaqP2wB+GLHUe6 2Ruw8+Yw/TbwJEkiGfKUl5hAmpsZZeu7yoUQ41+xveFW2Xd+rnMkoV/m3lhFB2Io cjXd02EIeoLw6kX/yXoU+htcDVfIiQFHRiscQAhQHK7IVICDREqu/0xfyvp4QB7r TN8Wx4WGFQtiK1Y7cFQVoubiFQoJwaoIgIXRhgX2c7F5ZchIZASzKdYnEd8yej9g z6tXEHdNNGcMz3yCE+ej2EoqFvHFw8TzDD3E/VMuxfsLk1e+altIIMOX9Y7U0w6/ ArZ83hgodyRKHZCyMapBYbXw8sTrC55biWuvrOJcN6gVHm7gYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmhfCBYL1KkXIoOew4XRle5+CX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYmU2MDNiY2UtZDcwMi0z YTM4LWE1NDctZGFlMjBiNWRlMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwE8qVd6XnUOB+xQDfYf3xjtOVQ2YIFZCxf6DhZm2chOpfbZdACkype RDjI5QNPfZ3tRgHoZKPaH4jQ5ke5VS1r770BKNrt9GpRwNi8eLl8uUF4e8WFDawU 6mEklEw+wFZ1Grdhb1eFEJkGwocUete4+JRfn54PVXsYQ1l5k7jbLv4lxog2oA7l 756oQMfLlzcH/cZCAutKl7knht4DYVQaBwQNXjlh7kx3TtMvB+2qElG4bt8kXNHV akHerJRFVsDQjGHRZGwlC3mUX5LkuHjnqn4oZeHcPfn0dzbzZVmKNwtmHbOkjjQf 9/YHsii91bUwdwOzf3eqY2aiFpzKZNk= -----END CERTIFICATE-----Generated at Fri Jun 12 12:41:25 2026 by rpki-client