$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa File: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (raw, json) Hash identifier: QDOMJGQJJo8Mg6qo3FPlRkTnOyHVgTwN5ZXBG66J0dw= Subject key identifier: 32:55:34:9A:37:87:7C:D4:EE:E8:44:AC:0F:A3:D0:09:52:DD:F3:5D Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584DA6B01276B7F3E8D53119D500 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:12:76:b7:f3:e8:d5:31:19:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=84bdf0a3-86ef-4875-9874-00e71425ab37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ed:b3:c8:71:fd:91:97:a1:7e:52:f3:1a:03: 76:53:d6:82:50:79:2f:fb:7b:b0:e3:32:48:e0:28: 5a:a2:5a:5f:ac:66:67:29:7d:05:77:25:67:43:36: 97:a7:ed:ed:31:c2:26:34:12:31:b3:5b:a9:8b:ee: 18:b2:7d:d6:14:c3:67:4e:fb:c0:8a:ec:37:fa:47: 8f:bc:df:a3:52:3b:97:b4:1c:2e:48:2e:87:36:32: 35:81:f8:f0:72:04:5b:91:fd:cf:23:1b:28:d2:30: 5c:f8:44:bb:cf:50:ab:ea:03:6d:64:8e:65:8c:56: 87:b2:53:bf:52:ad:81:70:3e:68:42:ad:12:ab:23: 88:fb:78:50:a8:0e:ac:51:c5:14:d8:35:20:e6:30: 66:0b:b5:1e:4c:70:1e:ed:b2:02:aa:f4:5f:48:5e: 7c:f1:d1:d6:39:27:8c:3e:81:9b:be:25:2e:ae:45: d4:6e:84:72:1d:19:29:25:4b:86:84:24:85:6d:a5: 98:c2:d2:8e:9f:86:3d:c2:1e:e7:58:d3:88:24:88: 82:fe:33:02:cf:29:61:ce:ac:ae:ea:8d:d9:f7:5c: a5:88:d5:f1:0a:3d:09:03:fb:21:1b:58:df:ab:07: 94:f1:e8:1d:78:f3:ff:b3:e3:98:55:8c:d2:d8:f3: 4a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:34:9A:37:87:7C:D4:EE:E8:44:AC:0F:A3:D0:09:52:DD:F3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b3:e0:36:e8:37:4e:b5:14:f1:b6:8a:e0:c0:d7:10:ab:4c: 48:5b:2c:02:3c:2b:12:42:d5:de:7a:15:8e:21:94:9d:72:47: 06:42:cc:31:ac:39:51:cf:cc:6b:97:9c:5d:3d:a9:21:f2:72: e0:1d:ab:67:03:53:61:2f:92:85:ba:d7:5d:f1:05:4d:de:b5: af:5e:0c:c7:1f:c1:08:0b:97:7c:35:26:23:40:02:90:60:2c: 62:99:7c:a7:39:28:c3:d0:d7:ce:a2:e7:55:f6:71:86:e7:27: 1c:c8:dc:7b:9f:ca:86:9f:94:6d:e1:89:b0:68:72:fb:9b:c1: 97:10:66:a5:da:85:fe:24:01:2a:24:a7:b3:01:d9:3f:a4:ab: 55:9c:bc:8d:de:4d:e6:42:53:50:e1:81:9e:ff:ec:f4:86:10: 8c:97:4b:d4:e0:fa:06:cf:89:16:6e:d2:99:4c:be:bf:3f:4f: a4:7c:2b:51:ca:6a:5e:be:0e:60:f6:6a:18:ff:36:b0:48:e8: ab:3b:3a:0d:4e:f6:96:91:6d:36:30:06:e3:61:69:5f:6c:f8: 68:ec:1e:98:fb:c5:8c:5e:98:a8:87:4a:dd:de:30:9a:60:17: 83:dd:a3:a8:8f:6b:09:ca:a4:2e:a7:7a:59:7f:34:aa:eb:dc: 8a:8f:fc:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBJ2t/Po1TEZ1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ODRiZGYwYTMtODZlZi00ODc1LTk4NzQtMDBlNzE0MjVhYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge2zyHH9kZehflLzGgN2U9aCUHkv+3uw4zJI 4ChaolpfrGZnKX0FdyVnQzaXp+3tMcImNBIxs1upi+4Ysn3WFMNnTvvAiuw3+keP vN+jUjuXtBwuSC6HNjI1gfjwcgRbkf3PIxso0jBc+ES7z1Cr6gNtZI5ljFaHslO/ Uq2BcD5oQq0SqyOI+3hQqA6sUcUU2DUg5jBmC7UeTHAe7bICqvRfSF588dHWOSeM PoGbviUurkXUboRyHRkpJUuGhCSFbaWYwtKOn4Y9wh7nWNOIJIiC/jMCzylhzqyu 6o3Z91yliNXxCj0JA/shG1jfqweU8egdePP/s+OYVYzS2PNKnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJVNJo3h3zU7uhErA+j0AlS3fNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvOTAwOTc0ZDctODk4OS0z MDdmLWE4ZGQtZjI3ZmJlNTczZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+z4DboN061FPG2iuDA1xCrTEhbLAI8KxJC1d56FY4hlJ1yRwZCzDGs OVHPzGuXnF09qSHycuAdq2cDU2EvkoW6113xBU3eta9eDMcfwQgLl3w1JiNAApBg LGKZfKc5KMPQ186i51X2cYbnJxzI3HufyoaflG3hibBocvubwZcQZqXahf4kASok p7MB2T+kq1WcvI3eTeZCU1DhgZ7/7PSGEIyXS9Tg+gbPiRZu0plMvr8/T6R8K1HK al6+DmD2ahj/NrBI6Ks7Og1O9paRbTYwBuNhaV9s+GjsHpj7xYxemKiHSt3eMJpg F4Pdo6iPawnKpC6nell/NKrr3IqP/Os= -----END CERTIFICATE-----Generated at Wed May 13 13:40:17 2026 by rpki-client