$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/e87206cd-95e3-3a2d-9eab-ddcf4cad3909.roa File: e87206cd-95e3-3a2d-9eab-ddcf4cad3909.roa (raw, json) Hash identifier: hYxPB9sTjstRbWo1JONxqQaN89EiS1ywbLZrko3epiY= Subject key identifier: 40:A2:38:62:82:7E:D5:80:2D:8D:41:42:8D:B1:30:4D:5D:1D:D5:9B Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584D91C017B03E6A0824DC9B8A80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/e87206cd-95e3-3a2d-9eab-ddcf4cad3909.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 46887 IP address blocks: 207.237.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:17:b0:3e:6a:08:24:dc:9b:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1eab2458-f6a5-4128-96dd-e7e106e56092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:cc:12:19:fa:80:9e:31:fd:e1:c0:2c:39: ed:c2:ac:e9:b0:3d:0e:51:73:f1:a7:1b:d2:77:6d: a0:34:91:e7:d3:8e:e7:c2:f6:b3:5e:e7:c2:10:d8: 0c:b6:0f:63:b6:51:e4:ad:a4:a8:1d:a6:2a:7b:71: 02:23:0d:33:06:e0:17:7e:0f:22:07:00:39:b2:81: 1f:b1:c5:4d:e4:98:da:ad:2b:f4:f2:ad:d0:b8:b3: 3c:5b:15:20:ac:92:c5:54:46:79:b6:88:34:0e:da: a8:5b:5b:fb:78:9a:81:7a:a7:ee:d6:5b:f2:c7:bb: e3:26:51:a1:36:68:a5:c9:5a:5f:49:61:e3:f6:ad: 57:b8:83:02:b3:c1:d6:42:e6:ec:02:f2:bc:40:cd: 62:6c:02:2b:35:33:93:70:31:3c:95:b1:b0:dd:d2: af:27:a3:ae:09:de:6b:77:6c:c0:d8:48:a9:4d:23: e9:3a:c9:9c:b8:d7:13:88:c9:5b:41:4f:33:ec:82: 84:91:1a:5c:c4:22:f8:de:c4:9e:2e:b8:e8:09:ae: 43:a8:6e:d7:1a:e1:a8:ed:c3:06:6a:14:c7:c2:4c: b5:74:af:ed:f0:f3:f0:46:50:18:33:4a:48:7c:24: f2:10:5c:14:e0:27:65:48:87:d7:7d:af:c8:36:9c: 35:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:38:62:82:7E:D5:80:2D:8D:41:42:8D:B1:30:4D:5D:1D:D5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/e87206cd-95e3-3a2d-9eab-ddcf4cad3909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.237.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:80:2a:6d:b5:2b:4c:4e:b6:1c:d4:51:8b:0a:02:af:a1:69: 8d:9d:f7:97:2f:ea:0a:89:bf:77:56:0d:b6:63:d4:c2:00:32: 94:88:f2:16:4f:04:a9:5f:e0:e8:57:09:e4:f6:bf:84:bb:e6: 71:37:aa:6b:c0:e2:81:8c:4b:3e:a7:f1:7e:3b:85:c1:66:b4: 6e:69:ca:94:71:bf:14:d9:df:8f:eb:06:3a:e5:e9:78:60:0b: bb:c6:a9:5a:9d:38:19:26:5a:b9:9f:71:e8:40:e5:3c:48:e8: a0:9a:8c:92:f5:18:8e:e8:59:bb:7e:fa:fd:64:d1:da:12:b5: 62:8b:48:b4:fb:b4:c2:13:75:84:58:e7:6f:b0:35:be:6a:a1: d6:6e:73:76:a2:ac:a6:e7:da:8e:38:38:9c:ed:d3:3d:d5:a5: 3d:dd:4c:4d:c4:81:75:f3:b3:bf:19:02:fc:c4:3c:ba:db:9d: 68:e0:a1:c9:e3:b0:0d:43:f9:53:87:ea:6c:6c:ea:a1:f6:15: ca:6c:70:37:e4:50:59:4e:d8:08:cc:d9:5c:c8:5d:a8:24:80: d7:c3:17:ea:e8:20:bd:bb:98:df:d0:fb:26:79:00:af:d0:0c: b8:e5:95:bf:7b:d2:ea:46:ea:11:5b:57:db:5a:25:ee:cf:e9: be:91:94:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBewPmoIJNybioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MWVhYjI0NTgtZjZhNS00MTI4LTk2ZGQtZTdlMTA2ZTU2MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4jMEhn6gJ4x/eHALDntwqzpsD0OUXPxpxvS d22gNJHn047nwvazXufCENgMtg9jtlHkraSoHaYqe3ECIw0zBuAXfg8iBwA5soEf scVN5JjarSv08q3QuLM8WxUgrJLFVEZ5tog0DtqoW1v7eJqBeqfu1lvyx7vjJlGh NmilyVpfSWHj9q1XuIMCs8HWQubsAvK8QM1ibAIrNTOTcDE8lbGw3dKvJ6OuCd5r d2zA2EipTSPpOsmcuNcTiMlbQU8z7IKEkRpcxCL43sSeLrjoCa5DqG7XGuGo7cMG ahTHwky1dK/t8PPwRlAYM0pIfCTyEFwU4CdlSIfXfa/INpw1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECiOGKCftWALY1BQo2xME1dHdWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvZTg3MjA2Y2QtOTVlMy0z YTJkLTllYWItZGRjZjRjYWQzOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISAKm21K0xOthzUUYsKAq+haY2d95cv6gqJv3dWDbZj1MIAMpSI8hZP BKlf4OhXCeT2v4S75nE3qmvA4oGMSz6n8X47hcFmtG5pypRxvxTZ34/rBjrl6Xhg C7vGqVqdOBkmWrmfcehA5TxI6KCajJL1GI7oWbt++v1k0doStWKLSLT7tMITdYRY 52+wNb5qodZuc3airKbn2o44OJzt0z3VpT3dTE3EgXXzs78ZAvzEPLrbnWjgocnj sA1D+VOH6mxs6qH2FcpscDfkUFlO2AjM2VzIXagkgNfDF+roIL27mN/Q+yZ5AK/Q DLjllb970upG6hFbV9taJe7P6b6RlNA= -----END CERTIFICATE-----Generated at Mon Apr 27 23:19:04 2026 by rpki-client