$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa File: 2cb447ce-9c11-3486-b23b-1f9b99970a85.roa (raw, json) Hash identifier: h51CkwR2LrPoE3eSLW86uKToB9TDTJRHQ6V8e+2oZwQ= Subject key identifier: C6:28:90:09:47:EE:D7:80:06:21:2A:99:5A:C9:0B:70:6A:94:11:E7 Certificate issuer: /CN=73c71714-99de-4588-bd63-3b2ad60412ad Certificate serial: 010D0C9F4328584D2A74DEFA210BB1FEDF664600 Authority key identifier: 2B:8D:20:69:2E:23:E0:2B:E1:34:EF:7A:0A:E3:1E:4D:65:44:CD:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 204.89.44.0/24 maxlen: 24 204.89.45.0/24 maxlen: 24 204.89.46.0/24 maxlen: 24 204.89.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:de:fa:21:0b:b1:fe:df:66:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c71714-99de-4588-bd63-3b2ad60412ad Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9db750f3-65b0-44a8-b85f-99bf8f5e1ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:97:82:1f:a1:28:ee:d2:68:89:c1:ad:34: 17:25:31:91:b4:d1:ef:68:79:f7:63:51:b9:2c:80: 50:bc:2a:04:0b:dd:27:44:e6:19:68:fc:1a:a0:8d: 18:c2:d8:70:c5:11:2a:f1:21:23:c2:a3:d8:22:d2: 44:a6:1e:f8:f5:07:36:e5:86:a6:91:1f:46:5e:dc: 67:be:05:25:96:11:59:bb:39:fe:78:84:c2:da:b2: 06:f2:2c:e2:17:0c:da:e5:bd:03:f9:f0:f4:80:9b: 0e:39:68:c8:fb:ed:fb:d2:4d:bb:52:e0:ee:1f:58: b3:a0:c0:85:14:09:ad:5d:df:c6:b1:bf:1b:6b:68: 55:ba:0a:5b:4a:6e:f8:2e:52:92:04:06:f1:69:1f: 72:78:8a:19:4d:c2:39:c5:06:03:07:f8:63:54:ba: 5e:fb:0b:4c:be:c5:67:be:84:f0:f6:a4:25:f0:db: c5:cc:18:48:a2:52:9e:56:c8:7d:59:cc:b4:59:19: d9:29:2c:0d:0d:b0:c3:eb:ed:2f:bb:f6:f6:0c:a2: 8e:ff:4b:bf:18:81:80:44:f4:15:7b:b7:e2:39:8f: 20:46:06:2b:08:d2:2f:ad:b5:ee:e5:52:55:d0:d9: e8:e4:96:6f:72:19:f4:d8:b3:7d:1d:62:39:cc:c1: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:28:90:09:47:EE:D7:80:06:21:2A:99:5A:C9:0B:70:6A:94:11:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/2cb447ce-9c11-3486-b23b-1f9b99970a85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad/73c71714-99de-4588-bd63-3b2ad60412ad.crl X509v3 Authority Key Identifier: keyid:2B:8D:20:69:2E:23:E0:2B:E1:34:EF:7A:0A:E3:1E:4D:65:44:CD:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73c71714-99de-4588-bd63-3b2ad60412ad.cer sbgp-ipAddrBlock: critical IPv4: 204.89.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:66:5a:3d:a2:bd:60:7b:9f:f8:18:6b:e2:d2:23:f7:d4:69: fc:5c:b4:48:1b:ad:2d:87:83:c4:74:5e:f2:0c:88:5e:b5:b5: 39:85:68:a0:5b:23:b0:cd:53:1d:f0:61:1c:71:9a:b2:30:b4: 85:ea:d5:42:b4:3c:01:16:00:b4:17:d6:0b:55:8f:30:23:e8: 0f:0d:81:e7:34:53:a0:df:04:79:f7:0b:d8:d1:85:6b:3f:4c: a5:64:3c:e3:c7:3e:b9:76:93:1d:73:9f:d4:a9:90:35:66:77: f6:8b:66:74:69:d5:de:94:1d:21:e5:34:04:fe:a6:63:e0:ce: 0a:e9:72:26:e8:ae:15:0e:40:60:88:d6:09:ee:51:9c:91:44: e6:d3:59:dd:96:72:e4:d9:d2:ac:ec:ab:fc:1f:31:4b:29:f9: d7:da:b9:8c:5c:6f:a5:92:ec:12:e9:32:e9:1a:36:d2:0d:4b: 3a:3e:ce:57:5c:fa:dd:ca:74:ac:99:fe:db:3a:e5:8a:1a:7e: 52:9d:b8:13:83:a4:0c:ea:c1:6f:12:ee:53:60:b8:ef:c3:7b: b4:31:12:0f:df:50:d5:c1:a1:91:54:ed:40:11:10:fc:a6:01: 03:b2:be:12:0b:b3:db:52:9f:7e:53:1f:f1:b0:34:62:6c:1a: c0:ac:c5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdN76IQux/t9mRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjNzE3MTQtOTlkZS00NTg4LWJkNjMtM2IyYWQ2MDQx MmFkMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWRiNzUwZjMtNjViMC00NGE4LWI4NWYtOTliZjhmNWUxZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoOXgh+hKO7SaInBrTQXJTGRtNHvaHn3Y1G5 LIBQvCoEC90nROYZaPwaoI0YwthwxREq8SEjwqPYItJEph749Qc25YamkR9GXtxn vgUllhFZuzn+eITC2rIG8iziFwza5b0D+fD0gJsOOWjI++370k27UuDuH1izoMCF FAmtXd/Gsb8ba2hVugpbSm74LlKSBAbxaR9yeIoZTcI5xQYDB/hjVLpe+wtMvsVn voTw9qQl8NvFzBhIolKeVsh9Wcy0WRnZKSwNDbDD6+0vu/b2DKKO/0u/GIGARPQV e7fiOY8gRgYrCNIvrbXu5VJV0Nno5JZvchn02LN9HWI5zMEClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYokAlH7teABiEqmVrJC3BqlBHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83M2M3 MTcxNC05OWRlLTQ1ODgtYmQ2My0zYjJhZDYwNDEyYWQvMmNiNDQ3Y2UtOWMxMS0z NDg2LWIyM2ItMWY5Yjk5OTcwYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzNjNzE3MTQtOTlkZS00NTg4LWJk NjMtM2IyYWQ2MDQxMmFkLzczYzcxNzE0LTk5ZGUtNDU4OC1iZDYzLTNiMmFkNjA0 MTJhZC5jcmwwHwYDVR0jBBgwFoAUK40gaS4j4CvhNO96CuMeTWVEzU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83M2M3MTcxNC05OWRlLTQ1ODgtYmQ2My0zYjJh ZDYwNDEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzFksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdmWj2ivWB7n/gYa+LSI/fUafxctEgbrS2Hg8R0XvIMiF61tTmFaKBb I7DNUx3wYRxxmrIwtIXq1UK0PAEWALQX1gtVjzAj6A8Ngec0U6DfBHn3C9jRhWs/ TKVkPOPHPrl2kx1zn9SpkDVmd/aLZnRp1d6UHSHlNAT+pmPgzgrpciborhUOQGCI 1gnuUZyRRObTWd2WcuTZ0qzsq/wfMUsp+dfauYxcb6WS7BLpMukaNtINSzo+zldc +t3KdKyZ/ts65YoaflKduBODpAzqwW8S7lNguO/De7QxEg/fUNXBoZFU7UAREPym AQOyvhILs9tSn35TH/GwNGJsGsCsxfk= -----END CERTIFICATE-----Generated at Thu Mar 19 12:34:05 2026 by rpki-client