$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa File: 439be47f-ad79-3de0-a5e7-1bb882c73b27.roa (raw, json) Hash identifier: 3CWRgLITRIs8jKtJzHSFE3fHEa2/KektJDcVY6V1u6U= Subject key identifier: 91:21:28:88:38:18:E1:2D:04:A3:2C:87:7A:F1:CF:FC:86:03:71:F6 Certificate issuer: /CN=3d270043-5069-4b58-b6cb-4496aa37669d Certificate serial: 010D0C9F4328584D86954BFAC2B59AF054CB5C30 Authority key identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14079 IP address blocks: 207.2.112.0/22 maxlen: 22 2602:fbd4::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4b:fa:c2:b5:9a:f0:54:cb:5c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d270043-5069-4b58-b6cb-4496aa37669d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=4dc35367-9700-4c84-8f0f-a33ac619d079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:47:b5:a3:5c:81:ba:65:04:cd:76:ea:c1: 47:73:81:79:1d:d5:36:80:dc:f6:88:70:51:c7:ac: ae:7d:45:93:a1:49:7c:4a:72:74:4f:a0:22:db:1b: 4e:04:bf:98:80:71:7d:a9:aa:87:6d:ff:78:f5:6f: c3:d4:4e:72:14:bb:98:04:22:34:99:41:91:c2:dc: 52:de:21:1c:19:71:45:d7:85:b6:a6:fc:f4:b4:8b: 61:a0:c1:8b:c4:b6:d9:8c:fd:53:e7:24:10:55:6c: 4d:8c:2c:bc:81:5f:ed:3c:c2:b9:40:b8:fc:12:90: 54:bb:0e:ba:77:c5:01:53:fe:75:bd:76:bd:1b:9e: a6:b4:8a:35:9f:aa:c6:b0:70:11:1a:93:95:41:ce: fb:39:c4:fd:ae:6d:e4:09:ba:90:db:b4:0b:81:b1: 1d:81:00:fd:36:47:64:cf:9f:0e:21:cd:86:a2:09: f5:7e:8d:f8:8e:ac:52:a9:cf:ba:f5:fa:81:dc:e9: dd:cb:3c:2d:a5:8e:78:0c:27:12:d1:2c:53:23:ec: 3d:fa:43:ad:27:3a:89:91:75:4e:34:3c:d6:69:52: 86:f6:36:fc:0a:c2:f3:e9:d0:52:d3:bb:a1:bb:72: 4f:34:ed:1d:8f:d2:b0:2c:1c:71:37:46:f1:45:14: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:21:28:88:38:18:E1:2D:04:A3:2C:87:7A:F1:CF:FC:86:03:71:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl X509v3 Authority Key Identifier: keyid:CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer sbgp-ipAddrBlock: critical IPv4: 207.2.112.0/22 IPv6: 2602:fbd4::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d6:b5:92:99:44:6f:f6:2e:97:35:41:58:f5:24:d0:2d:22: aa:4f:fa:82:30:86:29:f3:94:55:37:3a:81:93:b4:af:b7:d9: 3e:e3:19:0c:e1:7e:18:88:f4:70:08:40:93:8a:91:80:1e:9f: 4d:77:25:ab:a4:bc:aa:b2:ec:e8:f5:ac:3e:91:f5:f7:0f:a7: 8f:fb:c0:3a:6a:3e:c5:d0:54:9c:1c:9a:f1:74:81:19:81:5e: a8:47:ae:27:2c:e5:d8:ea:8c:d0:9a:a4:82:19:0e:3b:6d:26: 00:80:b7:6a:1a:3b:04:91:e7:3d:68:9a:7d:5d:61:4b:7f:91: 6c:47:0b:df:c4:e2:7d:13:3e:3b:b3:ee:2d:3b:84:fe:ca:b9: 29:cb:28:66:bb:91:5d:0f:c3:31:0d:10:b2:a0:db:24:9c:46: a8:10:fc:1f:d9:c7:ef:af:b7:85:20:ec:29:18:4e:cf:73:0a: 6a:56:2b:33:38:0f:7c:03:d4:a8:d5:84:34:03:c6:a5:47:4a: 2a:80:21:83:60:30:76:60:d4:e4:93:37:62:99:c9:88:61:fc: 40:d3:5d:b9:2d:04:3a:05:89:a5:ce:40:92:91:2c:8a:6b:b3: 66:30:d6:a0:b5:1b:3d:bf:d9:e7:70:a4:46:b2:0e:3b:37:7f: 38:51:4b:6d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2GlUv6wrWa8FTLXDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyNzAwNDMtNTA2OS00YjU4LWI2Y2ItNDQ5NmFhMzc2 NjlkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NGRjMzUzNjctOTcwMC00Yzg0LThmMGYtYTMzYWM2MTlkMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0blHtaNcgbplBM126sFHc4F5HdU2gNz2iHBR x6yufUWToUl8SnJ0T6Ai2xtOBL+YgHF9qaqHbf949W/D1E5yFLuYBCI0mUGRwtxS 3iEcGXFF14W2pvz0tIthoMGLxLbZjP1T5yQQVWxNjCy8gV/tPMK5QLj8EpBUuw66 d8UBU/51vXa9G56mtIo1n6rGsHARGpOVQc77OcT9rm3kCbqQ27QLgbEdgQD9Nkdk z58OIc2Gogn1fo34jqxSqc+69fqB3OndyzwtpY54DCcS0SxTI+w9+kOtJzqJkXVO NDzWaVKG9jb8CsLz6dBS07uhu3JPNO0dj9KwLBxxN0bxRRRMXQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJEhKIg4GOEtBKMsh3rxz/yGA3H2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3 MDA0My01MDY5LTRiNTgtYjZjYi00NDk2YWEzNzY2OWQvNDM5YmU0N2YtYWQ3OS0z ZGUwLWE1ZTctMWJiODgyYzczYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2QyNzAwNDMtNTA2OS00YjU4LWI2 Y2ItNDQ5NmFhMzc2NjlkLzNkMjcwMDQzLTUwNjktNGI1OC1iNmNiLTQ0OTZhYTM3 NjY5ZC5jcmwwHwYDVR0jBBgwFoAUy1/0GqAt+h6hmbYpNwkXOg7MT8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3MDA0My01MDY5LTRiNTgtYjZjYi00NDk2 YWEzNzY2OWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCzwJwMA4E AgACMAgDBgQmAvvUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJ1rWSmURv9i6XNUFY9STQLSKqT/qCMIYp 85RVNzqBk7Svt9k+4xkM4X4YiPRwCECTipGAHp9NdyWrpLyqsuzo9aw+kfX3D6eP +8A6aj7F0FScHJrxdIEZgV6oR64nLOXY6ozQmqSCGQ47bSYAgLdqGjsEkec9aJp9 XWFLf5FsRwvfxOJ9Ez47s+4tO4T+yrkpyyhmu5FdD8MxDRCyoNsknEaoEPwf2cfv r7eFIOwpGE7PcwpqViszOA98A9So1YQ0A8alR0oqgCGDYDB2YNTkkzdimcmIYfxA 0125LQQ6BYmlzkCSkSyKa7NmMNagtRs9v9nncKRGsg47N384UUtt -----END CERTIFICATE-----Generated at Sat Apr 18 06:28:08 2026 by rpki-client