$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/d45455ed-79d2-3c15-a001-e3b039bd6655.roa File: d45455ed-79d2-3c15-a001-e3b039bd6655.roa (raw, json) Hash identifier: Df4csBQ7qI7IFHTb8tC7iNspsKy+H+TNCt+mVyihaiQ= Subject key identifier: A2:D3:E0:77:D0:42:84:5F:A6:5C:DE:81:33:38:E2:31:A6:41:96:3C Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584DC3E6D4E6762F26C94792E540 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/d45455ed-79d2-3c15-a001-e3b039bd6655.roa Signing time: Fri 08 May 2026 12:09:18 +0000 ROA not before: Fri 08 May 2026 12:09:18 +0000 ROA not after: Thu 06 Aug 2026 12:09:18 +0000 asID: 63448 IP address blocks: 209.46.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c3:e6:d4:e6:76:2f:26:c9:47:92:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: May 8 12:09:18 2026 GMT Not After : Aug 6 12:09:18 2026 GMT Subject: CN=cf75b34c-e773-4d80-b7dd-1b391dc165bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:e9:1c:f8:46:b2:ef:27:0a:52:0c:66:b8: fc:b8:d4:20:83:26:44:66:ab:cb:d1:d6:ac:77:55: 61:9a:db:ce:58:22:06:a3:8e:33:4f:0e:1a:26:9c: d5:2a:f0:58:e2:9e:a9:55:98:d1:07:4e:5c:96:80: 04:0f:45:a8:e8:69:6d:46:97:fd:c5:92:1a:7a:ea: a3:22:21:23:b7:c7:86:ab:07:bd:d5:d7:3a:4d:e9: 43:bf:f3:80:7b:28:bd:56:c1:fc:0a:ec:fe:f3:49: 69:54:05:12:86:bf:cb:4f:86:24:ed:af:24:2c:c3: 83:1e:b0:5d:62:05:6f:38:89:13:04:88:51:90:43: 90:27:ad:20:a9:a0:d9:08:13:6f:62:1b:23:b8:dc: 44:61:31:93:16:6d:d8:8f:3b:e4:78:dd:80:92:13: d4:5f:ad:88:8d:2a:b4:1f:5c:76:76:bd:86:25:bd: df:fc:5a:ff:6a:0a:f5:8b:66:5b:ac:ef:36:ef:6c: 80:c5:aa:a0:b3:85:2c:f7:16:22:0c:d5:58:3d:4e: c4:14:1b:91:7a:b7:3f:41:fe:6d:46:0b:9a:28:9d: b4:79:c3:7b:5a:c9:71:44:02:ed:33:67:e3:36:85: 45:fb:9c:15:6d:be:da:1d:d0:78:e0:cd:a5:f0:c1: 24:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D3:E0:77:D0:42:84:5F:A6:5C:DE:81:33:38:E2:31:A6:41:96:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/d45455ed-79d2-3c15-a001-e3b039bd6655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 209.46.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:09:f3:5d:25:23:3e:dc:4d:83:e0:e9:40:1c:f6:57:1c:0c: a7:f9:88:64:98:f8:4d:86:e6:09:07:3a:6f:40:b2:e2:16:ed: 0e:e6:9c:3b:e4:16:3d:e7:04:a5:d5:99:4f:8c:b3:ef:5a:a3: 68:43:9e:45:14:80:40:cc:4c:a6:e5:52:26:61:8f:62:7a:22: 33:5d:f1:8c:12:13:00:95:99:d0:ef:31:de:e2:99:d5:e5:fd: f3:71:b6:3f:60:a7:58:83:1f:4d:91:69:e1:d2:1c:7d:0f:75: da:cc:69:4b:d0:26:44:23:bd:c4:90:22:d4:fe:84:ce:15:7a: 17:af:a3:ca:38:48:8f:e8:34:d8:34:25:a6:79:dc:e8:61:e9: 4f:e9:25:35:0a:2e:61:8b:f6:16:14:64:01:b1:a4:72:9e:46: b3:86:e7:a0:e1:37:0e:e3:2c:a1:c4:6a:9b:ca:91:02:1d:93: 4a:cb:9f:4d:c4:e5:27:7f:32:e0:85:e6:da:b2:a6:c1:0d:b7: 97:cd:b3:bb:81:44:23:bd:d0:af:0f:d4:8e:bc:6b:52:15:d3: 54:7d:0d:18:2f:c1:09:aa:92:a5:fb:bb:d2:e8:8e:68:ff:0f: 6c:d3:9a:09:b2:01:78:8a:dd:72:8f:8a:61:d2:e7:72:a2:b7: 1d:3c:f0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3D5tTmdi8myUeS5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDUwODEyMDkxOFoXDTI2MDgwNjEyMDkxOFowLzEtMCsGA1UEAxMk Y2Y3NWIzNGMtZTc3My00ZDgwLWI3ZGQtMWIzOTFkYzE2NWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghLpHPhGsu8nClIMZrj8uNQggyZEZqvL0das d1VhmtvOWCIGo44zTw4aJpzVKvBY4p6pVZjRB05cloAED0Wo6GltRpf9xZIaeuqj IiEjt8eGqwe91dc6TelDv/OAeyi9VsH8Cuz+80lpVAUShr/LT4Yk7a8kLMODHrBd YgVvOIkTBIhRkEOQJ60gqaDZCBNvYhsjuNxEYTGTFm3YjzvkeN2AkhPUX62IjSq0 H1x2dr2GJb3f/Fr/agr1i2ZbrO8272yAxaqgs4Us9xYiDNVYPU7EFBuRerc/Qf5t RguaKJ20ecN7WslxRALtM2fjNoVF+5wVbb7aHdB44M2l8MEktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLT4HfQQoRfplzegTM44jGmQZY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvZDQ1NDU1ZWQtNzlkMi0z YzE1LWEwMDEtZTNiMDM5YmQ2NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0S4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAJ810lIz7cTYPg6UAc9lccDKf5iGSY+E2G5gkHOm9AsuIW7Q7mnDvk Fj3nBKXVmU+Ms+9ao2hDnkUUgEDMTKblUiZhj2J6IjNd8YwSEwCVmdDvMd7imdXl /fNxtj9gp1iDH02RaeHSHH0PddrMaUvQJkQjvcSQItT+hM4Vehevo8o4SI/oNNg0 JaZ53Ohh6U/pJTUKLmGL9hYUZAGxpHKeRrOG56DhNw7jLKHEapvKkQIdk0rLn03E 5Sd/MuCF5tqypsENt5fNs7uBRCO90K8P1I68a1IV01R9DRgvwQmqkqX7u9Lojmj/ D2zTmgmyAXiK3XKPimHS53Kitx088OQ= -----END CERTIFICATE-----Generated at Wed May 13 08:29:14 2026 by rpki-client