$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa File: d28bb973-d770-325f-809f-41fd4697ed68.roa (raw, json) Hash identifier: mhuFJ4BZBWPDpQ0rEy61lklc/qAgWptNGA//KC6gkZA= Subject key identifier: 14:64:66:14:C1:5D:1C:0E:45:20:6F:F1:A2:F6:51:AD:5D:1A:83:5B Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F4328584D9E5007458BE3EA66F2835E80 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 19529 IP address blocks: 207.2.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:07:45:8b:e3:ea:66:f2:83:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=bf797723-bf12-4533-8895-86a9b1c08768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e8:2f:5d:46:22:19:b0:e5:89:a7:6b:3e:62: 11:ed:4b:f7:93:a2:12:7a:a9:67:cf:a6:41:93:03: 05:71:cb:99:6a:1b:53:95:1a:15:a6:e5:50:92:f1: 57:77:f1:cd:c9:4c:bc:ec:db:be:61:5b:ed:0b:9a: b1:e8:12:b5:15:d5:ef:bd:ad:33:84:d6:e9:bc:30: 86:27:97:7f:c3:92:bd:d3:8f:44:29:ac:cf:53:a5: ce:12:1b:d4:62:71:9f:f3:48:64:df:8d:28:a4:74: 34:b8:6c:83:c2:1c:97:8f:4a:66:f0:54:f8:4b:9c: 5d:80:d2:c2:77:2c:2a:08:8e:9f:3e:52:cc:a9:9d: 22:77:c4:5c:be:fd:5b:36:67:ca:08:fe:38:81:0b: ff:b1:c4:2c:14:ff:14:5c:6c:a4:1c:60:cb:c7:32: 59:31:60:ca:17:d5:3c:1d:31:3e:a6:70:36:d4:da: 41:56:e2:2d:af:4e:85:db:e6:b7:69:80:5f:aa:3d: 1f:09:df:bc:8e:25:72:67:91:23:85:d8:95:3e:17: 1d:5b:df:ed:85:e8:b7:34:c5:f5:9b:4f:83:53:5c: 29:df:39:56:24:99:6e:51:43:d9:48:89:de:36:4d: 2e:a4:d5:ea:88:05:a5:4c:1f:57:c1:c5:18:7c:58: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:64:66:14:C1:5D:1C:0E:45:20:6F:F1:A2:F6:51:AD:5D:1A:83:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv4: 207.2.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:82:77:99:84:85:a6:70:67:e8:62:a0:5f:7d:39:c8:27:d1: f3:3c:63:b1:6d:81:81:ab:38:c1:55:49:8c:9d:91:b6:d2:8d: 7e:69:4e:bc:35:e8:81:c2:c7:8d:40:6d:71:7f:d9:e9:78:e0: eb:31:00:aa:26:d3:0e:1a:be:79:a5:2e:a5:ef:e9:e3:a2:df: 44:f1:0e:48:20:bf:e0:73:ca:bc:93:9e:4e:6c:2d:98:33:ea: e8:29:fc:71:5a:c3:78:c8:94:9d:d8:b2:9d:0e:54:a3:3d:ca: ad:40:36:5d:28:9f:0d:be:d9:5b:76:ae:ba:ac:3e:0e:1b:ba: 30:1d:17:85:b9:f7:49:9b:3b:99:79:59:cd:ae:2e:69:ca:de: 4d:ec:45:17:da:ba:fd:57:3d:44:31:2a:cf:98:48:2c:6f:08: 36:68:75:23:93:03:7b:1d:f7:d8:0a:d9:ca:a8:df:d5:3b:2a: 2b:28:5e:32:0c:26:0a:5a:4f:f7:89:13:37:c0:18:d5:01:27: 11:85:e7:67:1f:ab:c3:88:50:18:dc:49:e7:8e:13:52:de:92: 28:c3:82:4b:4b:85:9b:af:f5:7e:2b:6c:06:a7:ae:28:8a:87: e4:f0:b0:00:0e:34:99:76:d8:64:e0:51:36:03:12:5a:64:f8: 37:c8:b1:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAdFi+PqZvKDXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YmY3OTc3MjMtYmYxMi00NTMzLTg4OTUtODZhOWIxYzA4NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+gvXUYiGbDliadrPmIR7Uv3k6ISeqlnz6ZB kwMFccuZahtTlRoVpuVQkvFXd/HNyUy87Nu+YVvtC5qx6BK1FdXvva0zhNbpvDCG J5d/w5K9049EKazPU6XOEhvUYnGf80hk340opHQ0uGyDwhyXj0pm8FT4S5xdgNLC dywqCI6fPlLMqZ0id8Rcvv1bNmfKCP44gQv/scQsFP8UXGykHGDLxzJZMWDKF9U8 HTE+pnA21NpBVuItr06F2+a3aYBfqj0fCd+8jiVyZ5EjhdiVPhcdW9/thei3NMX1 m0+DU1wp3zlWJJluUUPZSIneNk0upNXqiAWlTB9XwcUYfFhOuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRkZhTBXRwORSBv8aL2Ua1dGoNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZDI4YmI5NzMtZDc3MC0z MjVmLTgwOWYtNDFmZDQ2OTdlZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzwJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOCd5mEhaZwZ+hioF99Ocgn0fM8Y7FtgYGrOMFVSYydkbbSjX5pTrw1 6IHCx41AbXF/2el44OsxAKom0w4avnmlLqXv6eOi30TxDkggv+BzyryTnk5sLZgz 6ugp/HFaw3jIlJ3Ysp0OVKM9yq1ANl0onw2+2Vt2rrqsPg4bujAdF4W590mbO5l5 Wc2uLmnK3k3sRRfauv1XPUQxKs+YSCxvCDZodSOTA3sd99gK2cqo39U7KisoXjIM JgpaT/eJEzfAGNUBJxGF52cfq8OIUBjcSeeOE1LekijDgktLhZuv9X4rbAanriiK h+TwsAAONJl22GTgUTYDElpk+DfIsdo= -----END CERTIFICATE-----Generated at Wed May 13 16:00:45 2026 by rpki-client