$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa File: cf72ba59-053f-3de2-833b-4c405ca166b0.roa (raw, json) Hash identifier: 8DgwIYwxs+Dz5wZ0rWjgWM7wweFSLfkGXcpsFh4ep2Y= Subject key identifier: B4:2D:31:CC:5D:81:2B:22:42:2A:72:B7:E3:F6:EC:63:AC:AE:A8:B8 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D8EF5583C12B87411255E1B00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 14061 IP address blocks: 209.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:58:3c:12:b8:74:11:25:5e:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1fdcc72a-8454-4067-be84-783f3ea27f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:1f:e1:e5:ad:13:a1:66:80:f1:fe:d6:90: ca:db:81:fd:e6:ce:d6:ca:4c:c2:f5:09:d7:46:74: 3c:b2:71:f6:24:1d:cd:1a:6b:4a:8f:88:4a:12:42: 97:46:18:60:b2:58:14:de:e4:05:42:c8:e4:1a:36: dc:e8:c5:6a:1b:87:a0:7c:b9:23:ef:99:91:a6:51: 1e:fd:b6:cc:d9:e8:47:bf:95:cf:ca:f7:a9:c1:00: 66:c8:d0:35:29:b2:45:d0:5c:3d:17:df:95:38:13: 5c:fe:83:9e:ff:48:9f:49:cf:f4:74:88:d2:74:80: 60:aa:68:08:00:10:67:fc:dc:67:83:ad:47:cf:16: da:74:fc:1c:77:be:6c:61:9c:ce:70:a3:cb:d3:90: 1c:f8:b6:0a:98:63:53:e4:a2:00:4f:fd:9d:b6:ba: 22:da:ca:f3:6e:49:4f:9d:88:81:6c:aa:a7:b9:74: 0a:94:f3:bf:29:6b:d7:47:ac:89:a1:fd:e6:a3:c6: 36:ea:cb:91:74:0f:3f:49:d9:af:81:cb:21:c9:fd: 3b:40:18:70:9f:e0:71:97:e6:d1:28:ac:8b:4a:39: 43:73:22:94:3e:31:1a:93:2a:9d:c1:e2:39:fc:e2: 20:82:2d:73:18:13:6c:c4:68:90:40:ab:df:14:74: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:31:CC:5D:81:2B:22:42:2A:72:B7:E3:F6:EC:63:AC:AE:A8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:fa:a8:05:86:09:a3:41:f8:a2:5a:af:ed:fb:bc:c3:f5:4d: fd:5d:3d:c7:36:f2:c2:63:c3:72:29:fe:8e:8f:6f:74:5f:80: e4:32:48:e3:0a:03:d8:49:23:cb:f3:d7:96:cb:fb:d2:7b:f9: ec:2a:5d:fc:7a:b2:08:12:99:f9:0b:52:f8:0c:df:6d:d0:d1: 2f:67:5c:bb:d1:e1:a9:a2:dc:76:5c:ce:26:ef:71:c4:7c:bb: 0f:7c:93:62:94:19:68:7e:9d:75:61:d9:16:3d:b0:c0:23:bb: f7:49:98:c5:42:5b:ed:31:fe:29:15:a6:cb:25:82:c4:27:b5: d3:b4:3b:9f:4f:f3:3c:0a:72:4f:69:07:76:bc:67:7c:60:75: a0:2c:04:b2:5e:84:9e:f3:68:c7:99:6c:17:1b:1d:36:c2:b1: f6:cf:97:12:a9:66:43:80:56:13:40:38:d9:bd:13:fb:16:ac: 02:af:b7:03:e3:dc:71:81:c8:99:98:c8:16:3c:5f:67:e1:57: 58:9a:90:d9:a8:f1:ba:50:3d:44:b2:9a:3b:a2:d7:91:bf:ac: 23:04:b3:86:0e:88:9a:e4:4c:fb:a5:72:75:dc:14:f4:8b:36: e4:d6:e5:ca:98:30:f8:f5:4f:cf:68:fd:ea:47:b2:a4:36:03: 34:cb:41:9c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2O9Vg8Erh0ESVeGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MWZkY2M3MmEtODQ1NC00MDY3LWJlODQtNzgzZjNlYTI3ZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRIf4eWtE6FmgPH+1pDK24H95s7WykzC9QnX RnQ8snH2JB3NGmtKj4hKEkKXRhhgslgU3uQFQsjkGjbc6MVqG4egfLkj75mRplEe /bbM2ehHv5XPyvepwQBmyNA1KbJF0Fw9F9+VOBNc/oOe/0ifSc/0dIjSdIBgqmgI ABBn/Nxng61HzxbadPwcd75sYZzOcKPL05Ac+LYKmGNT5KIAT/2dtroi2srzbklP nYiBbKqnuXQKlPO/KWvXR6yJof3mo8Y26suRdA8/Sdmvgcshyf07QBhwn+Bxl+bR KKyLSjlDcyKUPjEakyqdweI5/OIggi1zGBNsxGiQQKvfFHQnLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLQtMcxdgSsiQipyt+P27GOsrqi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2Y3MmJhNTktMDUzZi0z ZGUyLTgzM2ItNGM0MDVjYTE2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0SYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAffqoBYYJo0H4olqv7fu8w/VN/V09xzbywmPDcin+jo9vdF+A5DJI4woD 2Ekjy/PXlsv70nv57Cpd/HqyCBKZ+QtS+AzfbdDRL2dcu9HhqaLcdlzOJu9xxHy7 D3yTYpQZaH6ddWHZFj2wwCO790mYxUJb7TH+KRWmyyWCxCe107Q7n0/zPApyT2kH drxnfGB1oCwEsl6EnvNox5lsFxsdNsKx9s+XEqlmQ4BWE0A42b0T+xasAq+3A+Pc cYHImZjIFjxfZ+FXWJqQ2ajxulA9RLKaO6LXkb+sIwSzhg6ImuRM+6VyddwU9Is2 5Nblypgw+PVPz2j96keypDYDNMtBnA== -----END CERTIFICATE-----Generated at Wed May 13 06:35:29 2026 by rpki-client