$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/cfa1c4cf-3c2b-3f44-9cd9-462e61528841.roa File: cfa1c4cf-3c2b-3f44-9cd9-462e61528841.roa (raw, json) Hash identifier: iISgTzfTmOtRvmsjhfgWPU0BDJgJ3PWSsRvojU/h/Rg= Subject key identifier: 32:BB:71:66:A7:7F:DE:E8:06:4F:53:46:FC:E7:D4:8F:0F:CC:C9:2F Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381 Certificate serial: 010D0C9F4328584DF37F66C06C5CABD7BE7DAA00 Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/cfa1c4cf-3c2b-3f44-9cd9-462e61528841.roa Signing time: Mon 25 May 2026 13:19:42 +0000 ROA not before: Mon 25 May 2026 13:19:42 +0000 ROA not after: Sun 23 Aug 2026 13:19:42 +0000 asID: 6079 IP address blocks: 209.205.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:7f:66:c0:6c:5c:ab:d7:be:7d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de519df3-4594-450e-ac51-a7e085408381 Validity Not Before: May 25 13:19:42 2026 GMT Not After : Aug 23 13:19:42 2026 GMT Subject: CN=213c945d-a237-4ba7-801a-5fb0c3ae82b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:80:76:51:18:a0:5c:cf:18:35:72:c0:95: 02:58:9a:60:bc:33:2b:dc:2f:a3:dc:90:1b:2d:1c: fb:6f:3e:41:2c:db:78:86:13:f1:b7:5e:f7:d8:c0: 84:4c:4b:0a:48:d6:24:c6:fb:e5:13:12:38:a0:4d: 5b:52:04:37:e4:88:3b:6c:83:14:00:b8:d2:99:17: ea:50:b7:d1:67:48:60:3c:44:b1:35:3e:06:d7:ef: a9:7e:4b:18:e6:6d:48:d8:98:13:64:bf:9b:25:9a: ab:2f:65:be:4e:a7:b6:ce:bc:fb:96:7b:f2:ae:24: ab:bc:17:72:08:75:31:5d:e6:16:c9:c6:df:41:08: 7a:4a:2a:15:83:69:94:14:f0:46:c2:f8:40:77:20: a4:dc:45:77:c5:00:63:20:a9:80:6a:7b:5a:8c:80: 99:6b:5c:f5:62:af:9b:02:3c:27:33:8d:b9:78:96: 19:08:3f:93:db:b3:c4:ce:ea:be:01:cb:ec:c7:d6: 10:f8:fd:6f:24:0b:48:ec:1d:5d:48:3e:79:67:33: 33:32:61:a7:4a:17:99:f2:a7:b2:56:e0:1e:74:02: c3:a6:ce:9c:66:95:2a:96:cd:12:9f:ae:d0:b5:45: 55:fb:c0:9c:88:09:a3:ad:11:d1:54:4c:ac:22:cf: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BB:71:66:A7:7F:DE:E8:06:4F:53:46:FC:E7:D4:8F:0F:CC:C9:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/cfa1c4cf-3c2b-3f44-9cd9-462e61528841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl X509v3 Authority Key Identifier: keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer sbgp-ipAddrBlock: critical IPv4: 209.205.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5a:f9:e3:33:a1:ee:3d:b4:ea:89:96:ef:4a:a0:93:b8:56: 82:45:93:e5:c7:9b:86:93:92:20:9e:17:d5:4e:7b:c6:18:36: 37:01:bd:e4:b8:6a:01:49:2a:81:c3:cc:a0:a3:6e:ef:50:13: fe:79:03:7c:a4:e8:6f:ad:68:41:df:bf:6c:e7:24:17:6f:27: 4b:31:b4:82:6e:51:04:9b:67:fe:7e:ea:b2:da:01:7f:cf:ee: 5b:ba:9c:f6:79:45:7e:19:39:50:0f:db:12:96:57:37:16:4e: e8:9f:a3:11:ea:a7:d1:8a:63:0d:8d:7c:9a:10:34:10:0d:a4: 41:af:cf:19:59:f8:c0:e1:72:56:c7:20:a1:94:3a:2a:31:1e: 3c:20:66:9f:53:44:bb:2a:aa:d2:09:51:9f:44:01:eb:59:a0: c8:9d:07:07:10:c8:bf:c2:38:a4:46:4a:a3:cc:8e:8e:b9:67: 1b:28:1f:92:c4:e2:40:d2:ff:6c:5e:57:2d:51:fa:a8:97:44: 15:11:d1:f0:6d:24:d7:9f:eb:15:29:43:4d:06:e6:6c:5f:1f: e8:3e:72:5f:50:54:71:41:c4:6e:2c:e5:27:3a:ef:4c:81:05: 4c:11:f3:54:f1:fd:d0:6b:b6:d3:7c:fe:62:ee:bc:ec:4a:73: a7:55:e5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zf2bAbFyr1759qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4 MzgxMB4XDTI2MDUyNTEzMTk0MloXDTI2MDgyMzEzMTk0MlowLzEtMCsGA1UEAxMk MjEzYzk0NWQtYTIzNy00YmE3LTgwMWEtNWZiMGMzYWU4MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM2AdlEYoFzPGDVywJUCWJpgvDMr3C+j3JAb LRz7bz5BLNt4hhPxt1732MCETEsKSNYkxvvlExI4oE1bUgQ35Ig7bIMUALjSmRfq ULfRZ0hgPESxNT4G1++pfksY5m1I2JgTZL+bJZqrL2W+Tqe2zrz7lnvyriSrvBdy CHUxXeYWycbfQQh6SioVg2mUFPBGwvhAdyCk3EV3xQBjIKmAantajICZa1z1Yq+b AjwnM425eJYZCD+T27PEzuq+Acvsx9YQ+P1vJAtI7B1dSD55ZzMzMmGnSheZ8qey VuAedALDps6cZpUqls0Sn67QtUVV+8CciAmjrRHRVEysIs+vqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK7cWanf97oBk9TRvzn1I8PzMkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvY2ZhMWM0Y2YtM2MyYi0z ZjQ0LTljZDktNDYyZTYxNTI4ODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIha+eMzoe49tOqJlu9KoJO4VoJFk+XHm4aTkiCeF9VOe8YYNjcBveS4 agFJKoHDzKCjbu9QE/55A3yk6G+taEHfv2znJBdvJ0sxtIJuUQSbZ/5+6rLaAX/P 7lu6nPZ5RX4ZOVAP2xKWVzcWTuifoxHqp9GKYw2NfJoQNBANpEGvzxlZ+MDhclbH IKGUOioxHjwgZp9TRLsqqtIJUZ9EAetZoMidBwcQyL/COKRGSqPMjo65ZxsoH5LE 4kDS/2xeVy1R+qiXRBUR0fBtJNef6xUpQ00G5mxfH+g+cl9QVHFBxG4s5Sc670yB BUwR81Tx/dBrttN8/mLuvOxKc6dV5e8= -----END CERTIFICATE-----Generated at Wed Jun 3 08:31:15 2026 by rpki-client