$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa File: 240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa (raw, json) Hash identifier: KKQCxZ8HN6tjpU77/yUocspdoprkHaRNgWk2fJHKR74= Subject key identifier: 38:20:50:1C:3C:37:07:E7:F0:52:0E:88:E1:71:12:AA:87:84:4E:E9 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584DDE87FBDEA69F3F237238AC00 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 40509 IP address blocks: 204.8.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:fb:de:a6:9f:3f:23:72:38:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=c821595f-edf1-46f3-913b-feeec7277294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:68:e7:a1:b9:3d:8f:66:a7:03:d1:d5:0f: 9a:d4:92:c7:ba:ac:c1:ee:0a:a1:66:ea:fd:de:a1: 1e:06:5b:a9:e9:85:cf:f1:06:e0:92:df:97:35:08: 08:fa:31:c5:ee:a3:ab:10:44:28:82:94:1f:1f:e3: d2:ec:74:83:84:3c:1f:24:b1:cc:e8:97:f9:3c:0f: 7d:cd:04:49:c4:69:9c:15:98:62:de:89:35:1f:cf: 43:8b:ae:d7:fa:13:3e:8b:2a:3d:86:2b:6e:82:5a: bb:14:63:28:f2:3f:5e:e1:2d:b5:cb:1c:c8:a3:74: aa:aa:21:dc:cd:83:6e:27:bd:25:e7:e9:48:02:e3: c7:81:4c:f9:22:9c:f8:3d:91:49:aa:14:51:21:0f: 1c:8b:d4:c5:c0:8a:0f:65:e8:9e:17:8c:20:b2:83: 38:99:1c:3d:08:f5:7b:01:8f:3f:27:30:79:9b:d1: 5b:66:8b:5d:5b:0a:51:b9:15:99:c3:a0:d2:b2:15: 26:61:20:49:04:9c:5f:47:be:f8:5d:3e:fd:1a:14: 5e:f5:38:c7:53:83:e6:66:72:86:1e:f4:fc:f9:c6: 32:85:b8:9a:29:00:ac:21:3b:03:ee:98:cf:8a:9c: 8a:c1:30:e2:0b:01:97:6d:d4:44:05:d0:32:b1:eb: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:20:50:1C:3C:37:07:E7:F0:52:0E:88:E1:71:12:AA:87:84:4E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.8.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c6:b6:0f:28:c0:d4:c0:b3:e8:b8:6c:44:b4:93:d1:f1:85: 75:ca:e0:c7:ab:8a:8f:f4:84:e4:3f:5a:26:58:f8:2f:6d:f9: 1c:1d:e3:d7:b3:07:af:91:2f:2d:39:6c:01:6e:c7:56:14:cd: 78:20:91:4a:86:0a:4e:2d:f4:53:46:89:5e:f7:60:fd:cb:ba: f5:2c:09:b2:2c:b4:21:79:f3:99:19:06:48:65:39:53:5c:00: 6a:98:23:c9:f5:e1:d4:ab:1f:83:60:92:43:02:03:20:ff:99: d3:b0:78:ba:c3:0e:ad:b2:fc:e6:50:af:d4:dc:e2:84:90:0f: 12:4d:46:6d:b3:f7:f0:da:00:c3:f0:db:2a:2f:08:35:7a:ac: a4:2f:b9:b0:c0:66:1e:bb:8b:fb:2c:91:88:13:75:07:39:68: 46:da:50:56:e3:42:70:5c:55:2a:28:b0:74:7e:49:f5:43:b9: 1a:0f:fa:19:2e:55:8b:26:05:7c:8f:2d:ee:49:33:05:ce:5f: 84:8f:56:6d:e2:27:c6:d9:a7:ee:18:a4:43:4d:2e:31:77:a2: 76:a8:59:a9:ac:f2:1b:2b:eb:e5:f4:8c:9b:bf:9f:b9:42:8a: ee:00:13:e9:ab:b6:f6:31:77:f0:eb:ab:d6:7a:2d:e7:1f:c8: 91:61:88:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eh/vepp8/I3I4rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YzgyMTU5NWYtZWRmMS00NmYzLTkxM2ItZmVlZWM3Mjc3Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9xo56G5PY9mpwPR1Q+a1JLHuqzB7gqhZur9 3qEeBlup6YXP8Qbgkt+XNQgI+jHF7qOrEEQogpQfH+PS7HSDhDwfJLHM6Jf5PA99 zQRJxGmcFZhi3ok1H89Di67X+hM+iyo9hituglq7FGMo8j9e4S21yxzIo3SqqiHc zYNuJ70l5+lIAuPHgUz5Ipz4PZFJqhRRIQ8ci9TFwIoPZeieF4wgsoM4mRw9CPV7 AY8/JzB5m9FbZotdWwpRuRWZw6DSshUmYSBJBJxfR774XT79GhRe9TjHU4PmZnKG HvT8+cYyhbiaKQCsITsD7pjPipyKwTDiCwGXbdREBdAysevNlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDggUBw8Nwfn8FIOiOFxEqqHhE7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjQwYmU2YWYtYWFkZi0z ZjI0LWJlYmUtOWVhMzhhMGE2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHGtg8owNTAs+i4bES0k9HxhXXK4Merio/0hOQ/WiZY+C9t+Rwd49ez B6+RLy05bAFux1YUzXggkUqGCk4t9FNGiV73YP3LuvUsCbIstCF585kZBkhlOVNc AGqYI8n14dSrH4NgkkMCAyD/mdOweLrDDq2y/OZQr9Tc4oSQDxJNRm2z9/DaAMPw 2yovCDV6rKQvubDAZh67i/sskYgTdQc5aEbaUFbjQnBcVSoosHR+SfVDuRoP+hku VYsmBXyPLe5JMwXOX4SPVm3iJ8bZp+4YpENNLjF3onaoWams8hsr6+X0jJu/n7lC iu4AE+mrtvYxd/Drq9Z6LecfyJFhiAU= -----END CERTIFICATE-----Generated at Mon May 25 05:50:02 2026 by rpki-client