$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: DVs5TMDFdhuLzQZcuCY2WX7hDX4/89qLF1lWg7ddfP8= Subject key identifier: 06:E7:75:CF:60:FE:17:0F:E1:D3:4E:09:7D:7A:D6:16:C8:7B:11:F5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DBA3AE5E785B3ADA1F1BAC380 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e5:e7:85:b3:ad:a1:f1:ba:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=c7d007d7-eb2c-4584-abcb-4fce4da8be56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:99:bb:14:07:55:48:dc:48:1a:84:3c:6d: ba:66:44:ab:d8:04:c7:0a:2a:a5:16:8f:ee:f9:df: 8e:b6:ae:a4:46:78:2b:b5:f1:4c:d0:d5:a0:36:eb: 4f:a7:1e:ff:39:8b:41:40:ae:8e:6b:cb:21:f2:3a: da:39:4a:08:6a:69:ba:72:70:a9:67:8e:90:e8:eb: 4e:bd:73:48:4e:9a:3b:86:5f:d8:39:c8:fc:d7:5b: 49:d9:d1:1e:9a:ea:b7:66:0f:eb:47:e9:9c:11:a7: 32:7e:47:8a:19:d3:e5:6f:70:57:bc:b9:08:c3:35: fb:aa:bc:a0:60:bd:dc:7e:4c:a6:a9:09:80:be:92: ca:e9:ae:96:9a:c6:b3:04:3f:5b:dc:cf:1d:f5:0f: 77:08:fb:47:36:e7:f2:32:a0:e7:ec:05:a9:76:2b: ca:bf:45:73:52:3b:14:a5:92:2d:ea:22:c0:21:22: 00:1d:eb:a2:ec:76:4f:f1:a8:34:b1:93:fd:49:b3: 44:70:35:0f:60:97:1d:d0:f4:0b:16:3e:a5:60:b3: b5:c4:be:66:cd:0d:20:91:e4:c5:34:02:9c:b8:b0: 56:5e:f0:b3:b0:2a:d9:03:ff:fa:33:d1:7b:f8:20: 2d:25:79:ec:59:c7:63:05:1e:fd:0f:31:2b:a9:15: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:75:CF:60:FE:17:0F:E1:D3:4E:09:7D:7A:D6:16:C8:7B:11:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:95:10:18:3e:e0:64:b8:79:84:ab:5e:08:2b:e5:ce:02:34: 6f:90:6d:15:54:70:35:d0:2f:9a:b4:8b:b2:8c:b2:f4:ec:cf: a3:03:74:d5:8c:ee:8e:87:59:4e:5f:9d:7c:8f:d4:c8:2f:18: 54:27:d5:b3:c4:63:72:e4:a2:0e:0b:60:6c:62:8b:21:23:54: c4:06:81:ad:97:ff:d2:58:a8:91:e2:13:84:76:d6:be:de:90: 31:96:4d:70:84:c2:22:0d:d0:8c:f7:81:f1:d7:51:5f:e8:75: b8:a3:be:cc:6f:48:15:1a:b8:92:65:42:62:4d:4b:a2:e7:b4: 12:52:9a:d7:a0:b3:ea:70:2f:a1:34:3d:b1:94:aa:51:b8:15: 69:70:0d:7c:66:47:d5:24:fd:af:06:b0:35:b2:91:16:0b:89: d1:cb:6e:59:9c:60:5b:7f:38:3f:6a:64:4c:76:48:ab:77:f3: 43:32:40:24:da:2b:a8:30:0c:0a:40:7f:73:c1:8c:43:88:25: 68:08:5a:1f:32:d2:39:d2:96:8e:bd:71:63:17:cc:17:a1:e1: e0:5a:e1:e3:18:af:2f:6a:6e:e7:eb:18:d9:2c:2e:b9:72:60: 44:21:4b:43:ec:82:d4:d3:96:98:a7:ae:4c:82:63:3e:4d:b2: bb:06:e6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuXnhbOtofG6w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk YzdkMDA3ZDctZWIyYy00NTg0LWFiY2ItNGZjZTRkYThiZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrGZuxQHVUjcSBqEPG26ZkSr2ATHCiqlFo/u +d+Otq6kRngrtfFM0NWgNutPpx7/OYtBQK6Oa8sh8jraOUoIamm6cnCpZ46Q6OtO vXNITpo7hl/YOcj811tJ2dEemuq3Zg/rR+mcEacyfkeKGdPlb3BXvLkIwzX7qryg YL3cfkymqQmAvpLK6a6WmsazBD9b3M8d9Q93CPtHNufyMqDn7AWpdivKv0VzUjsU pZIt6iLAISIAHeui7HZP8ag0sZP9SbNEcDUPYJcd0PQLFj6lYLO1xL5mzQ0gkeTF NAKcuLBWXvCzsCrZA//6M9F7+CAtJXnsWcdjBR79DzErqRXVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbndc9g/hcP4dNOCX161hbIexH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCVEBg+4GS4eYSrXggr5c4CNG+QbRVUcDXQL5q0i7KMsvTsz6MDdNWM 7o6HWU5fnXyP1MgvGFQn1bPEY3Lkog4LYGxiiyEjVMQGga2X/9JYqJHiE4R21r7e kDGWTXCEwiIN0Iz3gfHXUV/odbijvsxvSBUauJJlQmJNS6LntBJSmtegs+pwL6E0 PbGUqlG4FWlwDXxmR9Uk/a8GsDWykRYLidHLblmcYFt/OD9qZEx2SKt380MyQCTa K6gwDApAf3PBjEOIJWgIWh8y0jnSlo69cWMXzBeh4eBa4eMYry9qbufrGNksLrly YEQhS0PsgtTTlpinrkyCYz5NsrsG5qI= -----END CERTIFICATE-----Generated at Wed May 13 18:34:16 2026 by rpki-client