$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: u7Yw1s1jo+EwCjyNSsKzWrtvu0ASC0pLRigqYa+8PsM= Subject key identifier: B0:3E:0C:F8:86:46:10:5E:F6:EC:E0:46:92:33:26:97:7F:A1:89:17 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584E0005D3754C58D7C8953B4A40 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:d3:75:4c:58:d7:c8:95:3b:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=d52ec414-5c8e-41c5-9bb1-2ea5b54bd43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:df:bb:5e:52:01:13:97:17:fd:4a:27:31:0f: 40:a5:73:33:bc:6c:c0:bb:65:60:c7:6e:6a:eb:08: d1:16:49:6f:cc:3b:56:0d:80:86:b9:5d:63:1e:61: b4:2b:2c:d0:66:a3:8e:dc:41:91:8c:ec:7e:40:fa: d9:0b:9f:ad:02:f7:45:ec:78:95:7d:b3:c6:d0:52: 18:5a:d7:de:c4:ba:57:b4:c0:e9:80:f1:53:eb:3a: d5:58:6f:94:04:ac:f0:bf:7f:8b:82:7f:07:70:94: c1:ca:ba:9f:fc:a9:35:83:fa:f7:89:93:7e:4b:88: fa:4a:e0:80:91:35:87:bd:f5:4e:6c:5e:02:e4:b2: 1b:6f:22:20:97:51:14:5c:6f:f8:4b:70:8c:fb:d9: ac:4a:fe:0c:28:de:1b:d5:74:fe:ef:aa:68:fc:c6: 3a:49:bf:d8:b8:94:05:36:2f:b4:dd:61:9f:1f:1d: 88:2a:af:60:cb:a3:85:08:2d:ef:d5:b9:1b:3f:7a: 76:aa:40:b3:19:7c:e3:07:d4:2b:2c:ba:3c:1d:5e: d5:6e:d8:20:46:ff:b2:0a:ac:66:f6:69:9f:e7:83: 9a:3b:37:e8:bc:15:43:60:6d:87:f0:a7:2c:c2:c4: b3:aa:12:12:f6:80:bd:75:14:9c:8a:2c:45:90:df: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3E:0C:F8:86:46:10:5E:F6:EC:E0:46:92:33:26:97:7F:A1:89:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7a:55:78:02:0b:65:ac:11:4d:7b:ec:2f:1e:63:78:51:46: f0:1e:a4:40:d6:36:72:48:94:59:3c:91:4d:37:68:28:b0:10: 64:a7:6f:e5:d8:a4:8a:bf:70:62:0d:69:f7:77:31:a6:5f:ec: dc:ac:77:1c:1c:e2:95:50:e2:b1:1c:f3:04:b2:cc:be:ee:2e: 88:82:9f:02:b0:7c:0d:30:61:65:cd:77:3f:5c:31:29:fc:4f: 28:fa:31:b8:1c:1d:ba:e5:43:6f:25:0a:b6:8d:53:fa:65:e5: e9:31:8b:43:39:ae:a8:e2:fb:a0:04:c6:bc:4c:a6:d4:d7:55: 80:df:a6:e5:47:d4:db:4e:fa:66:03:46:81:76:50:03:14:76: c3:7e:fc:83:06:d2:c8:58:ea:4f:44:70:7d:3e:21:aa:16:71: 0a:8c:d8:51:a4:21:67:6a:ae:cc:c9:e9:c4:71:52:c8:68:71: d9:0b:33:31:38:bf:f2:50:5b:70:f6:11:99:2f:f7:46:9c:b1: 5d:ed:d7:ac:fa:6a:c9:9f:5f:c1:5f:8f:6c:3b:e4:6b:9a:e6: 75:13:a6:64:f7:64:19:62:29:62:2d:20:0d:b5:83:60:5a:d0: 5c:a0:b2:26:9b:f0:8e:5c:c8:35:8b:98:c4:96:7c:ee:05:af: 44:47:71:03 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4ABdN1TFjXyJU7SkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk ZDUyZWM0MTQtNWM4ZS00MWM1LTliYjEtMmVhNWI1NGJkNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9+7XlIBE5cX/UonMQ9ApXMzvGzAu2Vgx25q 6wjRFklvzDtWDYCGuV1jHmG0KyzQZqOO3EGRjOx+QPrZC5+tAvdF7HiVfbPG0FIY WtfexLpXtMDpgPFT6zrVWG+UBKzwv3+Lgn8HcJTByrqf/Kk1g/r3iZN+S4j6SuCA kTWHvfVObF4C5LIbbyIgl1EUXG/4S3CM+9msSv4MKN4b1XT+76po/MY6Sb/YuJQF Ni+03WGfHx2IKq9gy6OFCC3v1bkbP3p2qkCzGXzjB9QrLLo8HV7VbtggRv+yCqxm 9mmf54OaOzfovBVDYG2H8KcswsSzqhIS9oC9dRSciixFkN88DQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLA+DPiGRhBe9uzgRpIzJpd/oYkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAfXpVeAILZawRTXvsLx5jeFFG8B6kQNY2ckiUWTyRTTdo KLAQZKdv5dikir9wYg1p93cxpl/s3Kx3HBzilVDisRzzBLLMvu4uiIKfArB8DTBh Zc13P1wxKfxPKPoxuBwduuVDbyUKto1T+mXl6TGLQzmuqOL7oATGvEym1NdVgN+m 5UfU2076ZgNGgXZQAxR2w378gwbSyFjqT0RwfT4hqhZxCozYUaQhZ2quzMnpxHFS yGhx2QszMTi/8lBbcPYRmS/3RpyxXe3XrPpqyZ9fwV+PbDvka5rmdROmZPdkGWIp Yi0gDbWDYFrQXKCyJpvwjlzINYuYxJZ87gWvREdxAw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:26:50 2026 by rpki-client