$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa File: 2f150563-516d-3fdb-aef9-541f51b900e4.roa (raw, json) Hash identifier: 6ojmXGJz86N4lXKi8t9fUelpMrFnW4smLIpBMsguHJ4= Subject key identifier: 91:D7:7B:88:CD:F1:18:D2:7E:8E:A6:37:32:66:93:E9:68:B5:BF:D2 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584D5E1A820E56B7BFE78B888340 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6079 IP address blocks: 209.127.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:82:0e:56:b7:bf:e7:8b:88:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=81d1acc4-fa41-4329-8ff9-b3d80f36fb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:c7:b2:dd:94:04:3e:f4:5c:b9:08:79:4d: 8b:2a:3d:05:68:5f:a1:8d:9e:6d:01:61:a0:56:14: 9d:e5:95:5a:66:31:a2:57:4c:c5:84:3f:3c:e0:ef: 1a:ec:4e:ae:dd:26:d4:d7:f7:b5:ed:f7:c4:63:0c: 93:2a:39:19:cd:4e:e2:6a:62:d8:e0:c8:e6:78:8b: 34:7a:0c:da:7a:26:c7:94:a4:fb:ad:5d:f5:cd:79: 55:fb:43:88:24:05:0e:c1:bf:db:48:a8:92:bc:f8: b4:ad:a0:f5:58:74:a5:9f:01:48:f1:17:1d:f2:90: 70:e1:3f:a4:35:36:ae:45:9c:a5:52:cd:90:e9:64: 35:66:d9:39:44:61:12:d6:24:10:47:d1:89:33:7a: bd:32:b4:2c:7f:c4:42:2c:ad:4f:02:65:70:ca:89: 6c:ef:4c:c9:00:da:44:10:15:7a:f3:21:1d:52:25: eb:53:e7:0d:f3:ed:f8:bf:1c:cf:0c:6e:b0:06:1c: d6:a9:37:42:a6:f3:5c:57:82:e0:d4:82:ab:a3:53: 4b:9b:8e:c7:32:2d:92:0d:8e:e4:74:ef:b3:66:59: c4:79:af:0a:b8:d7:af:47:f2:3f:ae:8b:0d:6a:80: f5:56:fe:a0:b5:ae:31:a1:79:58:da:c4:53:51:54: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:7B:88:CD:F1:18:D2:7E:8E:A6:37:32:66:93:E9:68:B5:BF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:19:c0:7e:0d:e2:ae:19:03:a0:3c:fa:e6:22:19:c8:7b:bc: 29:f8:b2:5c:ee:57:a0:88:24:5f:e4:9f:49:eb:8c:1e:5c:08: 02:0b:db:55:28:b7:e2:71:e7:0f:99:35:bb:09:f8:71:67:07: 02:6b:f8:85:11:8c:d9:43:e1:8e:8c:97:92:68:80:35:88:29: 92:03:6f:a3:36:2d:e0:ab:06:45:04:52:73:4a:ea:88:47:6c: 5c:7e:52:88:32:2c:03:9d:91:3b:85:5b:cc:d8:f4:88:bc:f4: 7e:f3:4e:37:15:0a:55:a8:22:ab:e4:e3:c0:e6:92:f2:8f:bc: d2:52:54:1c:12:3e:fa:43:e4:10:37:c6:24:77:cc:12:2a:09: 54:7d:81:55:73:4d:9e:ee:fe:9b:85:ed:06:37:88:0c:70:3e: bf:18:aa:f4:35:d4:ff:71:d6:85:4d:a0:82:36:b7:f1:4d:fe: 9d:4c:53:d4:b2:ed:f4:30:3d:8c:e1:a9:09:26:7a:86:78:1b: a4:b0:d9:91:34:04:6e:55:c6:44:76:c7:10:1f:cc:68:65:ee: fd:e3:fb:03:fe:88:04:c2:c9:f4:00:16:7e:d9:f8:02:55:3e: 41:b7:d9:83:4e:f9:20:df:3c:4a:a8:92:66:80:7b:44:ea:54: 3d:18:25:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoIOVre/54uIg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODFkMWFjYzQtZmE0MS00MzI5LThmZjktYjNkODBmMzZmYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUXHst2UBD70XLkIeU2LKj0FaF+hjZ5tAWGg VhSd5ZVaZjGiV0zFhD884O8a7E6u3SbU1/e17ffEYwyTKjkZzU7iamLY4MjmeIs0 egzaeibHlKT7rV31zXlV+0OIJAUOwb/bSKiSvPi0raD1WHSlnwFI8Rcd8pBw4T+k NTauRZylUs2Q6WQ1Ztk5RGES1iQQR9GJM3q9MrQsf8RCLK1PAmVwyols70zJANpE EBV68yEdUiXrU+cN8+34vxzPDG6wBhzWqTdCpvNcV4Lg1IKro1NLm47HMi2SDY7k dO+zZlnEea8KuNevR/I/rosNaoD1Vv6gta4xoXlY2sRTUVShUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHXe4jN8RjSfo6mNzJmk+lotb/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMmYxNTA1NjMtNTE2ZC0z ZmRiLWFlZjktNTQxZjUxYjkwMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0X9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4ZwH4N4q4ZA6A8+uYiGch7vCn4slzuV6CIJF/kn0nrjB5cCAIL21Uo t+Jx5w+ZNbsJ+HFnBwJr+IURjNlD4Y6Ml5JogDWIKZIDb6M2LeCrBkUEUnNK6ohH bFx+UogyLAOdkTuFW8zY9Ii89H7zTjcVClWoIqvk48DmkvKPvNJSVBwSPvpD5BA3 xiR3zBIqCVR9gVVzTZ7u/puF7QY3iAxwPr8YqvQ11P9x1oVNoII2t/FN/p1MU9Sy 7fQwPYzhqQkmeoZ4G6Sw2ZE0BG5VxkR2xxAfzGhl7v3j+wP+iATCyfQAFn7Z+AJV PkG32YNO+SDfPEqokmaAe0TqVD0YJXI= -----END CERTIFICATE-----Generated at Mon Apr 13 03:42:22 2026 by rpki-client