$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa File: d3d52428-3366-3940-ba48-6c79fec227e0.roa (raw, json) Hash identifier: cv+j/LfCwPgbl3xm/MBuNEHZK7fmLSR02ITt2zsEVXQ= Subject key identifier: AE:4D:43:E6:17:51:6C:94:57:6C:BF:47:05:ED:F4:BE:47:1B:E7:16 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584DA6B012455C7729F82DBBAEC0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 11736 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:12:45:5c:77:29:f8:2d:bb:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=31cca329-e0d5-4c1c-ba2d-b2b3da60687d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:5d:fb:47:0b:77:99:6a:79:29:1a:f1:4f: f0:4d:f6:42:5f:51:96:37:a2:5c:89:89:ac:bb:08: 77:e6:d2:6a:ff:ea:1e:33:68:ed:a1:dc:3b:68:a0: 96:b4:0b:e0:af:af:98:39:bd:b9:79:e4:cf:e1:3b: fe:48:c9:81:79:28:8c:7c:10:8c:52:13:fb:50:7e: b4:a3:f9:3c:c3:dd:bc:c3:93:0f:df:45:eb:f5:51: f8:d8:b1:13:a8:3a:f7:ea:13:b5:2a:0f:20:bc:18: 2c:2e:b8:7f:80:ab:9a:54:d2:b1:6c:59:24:6a:af: 89:be:fc:38:cc:b6:03:3c:0c:7b:7a:4c:40:36:e1: 56:d7:d7:e8:e2:91:54:a4:17:df:41:65:43:34:45: 5a:d8:82:7f:b7:67:72:9d:c3:39:e0:45:d1:0e:aa: 41:ab:03:1e:04:71:6b:07:5b:a4:64:4c:ae:7b:26: 80:8c:0a:5a:79:f9:a2:0e:d6:e0:18:15:0e:57:43: e8:9e:8c:56:36:1c:9e:4d:ad:f3:a6:f2:66:01:f2: f8:7e:27:33:ab:3c:c3:ab:36:ba:76:81:19:94:76: 17:5b:ec:03:41:6c:80:3e:2e:f8:3d:78:4c:c2:c6: 5f:0a:5e:c6:62:1e:da:f7:26:a8:dc:84:99:74:43: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:43:E6:17:51:6C:94:57:6C:BF:47:05:ED:F4:BE:47:1B:E7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:71:72:d4:58:9d:82:1b:37:4c:ed:3d:80:b7:a9:c6:b6:62: 16:b6:61:31:c1:2c:a1:b2:ac:b0:59:95:bf:21:ac:26:52:fa: 2d:70:7a:f4:30:7c:69:47:82:7e:1a:a4:d9:3b:a5:b7:dc:3b: ed:83:ce:33:b0:5f:5c:64:25:90:a1:5c:59:28:73:47:71:a0: 9e:68:3b:30:3f:68:d7:90:d7:29:76:7e:6c:f9:d0:f5:9b:31: 77:8d:17:cb:0a:bc:35:44:67:01:8c:ab:f4:1f:4b:0a:06:27: 8c:04:cc:8c:9c:26:18:56:76:f0:68:c5:d4:80:df:a0:b9:05: c8:72:b3:39:9d:53:4b:bb:57:11:24:4e:07:2c:52:39:ce:cf: 6d:3b:b7:fe:db:0e:bc:e5:9f:d3:fe:bd:fc:f7:e0:56:c1:30: 4b:ff:05:7d:ee:1a:8f:a9:66:f4:26:ae:3b:8d:b4:d0:96:bc: 71:fc:42:d4:5b:4c:e4:e8:34:37:ac:03:fb:d8:eb:16:89:ac: 51:5b:96:63:ae:e2:15:41:65:ce:59:df:7b:45:de:d5:d7:b6: 2e:5e:3d:69:fe:a6:77:6d:cf:67:5a:0e:51:13:77:e7:75:ec: 4d:13:f1:7b:f6:66:96:db:77:2f:98:d5:0e:7e:31:a8:f3:38: b1:7b:22:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBJFXHcp+C27rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MzFjY2EzMjktZTBkNS00YzFjLWJhMmQtYjJiM2RhNjA2ODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVJd+0cLd5lqeSka8U/wTfZCX1GWN6JciYms uwh35tJq/+oeM2jtodw7aKCWtAvgr6+YOb25eeTP4Tv+SMmBeSiMfBCMUhP7UH60 o/k8w928w5MP30Xr9VH42LETqDr36hO1Kg8gvBgsLrh/gKuaVNKxbFkkaq+Jvvw4 zLYDPAx7ekxANuFW19fo4pFUpBffQWVDNEVa2IJ/t2dyncM54EXRDqpBqwMeBHFr B1ukZEyueyaAjApaefmiDtbgGBUOV0PonoxWNhyeTa3zpvJmAfL4ficzqzzDqza6 doEZlHYXW+wDQWyAPi74PXhMwsZfCl7GYh7a9yao3ISZdEONawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5NQ+YXUWyUV2y/RwXt9L5HG+cWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvZDNkNTI0MjgtMzM2Ni0z OTQwLWJhNDgtNmM3OWZlYzIyN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElxctRYnYIbN0ztPYC3qca2Yha2YTHBLKGyrLBZlb8hrCZS+i1wevQw fGlHgn4apNk7pbfcO+2DzjOwX1xkJZChXFkoc0dxoJ5oOzA/aNeQ1yl2fmz50PWb MXeNF8sKvDVEZwGMq/QfSwoGJ4wEzIycJhhWdvBoxdSA36C5BchyszmdU0u7VxEk TgcsUjnOz207t/7bDrzln9P+vfz34FbBMEv/BX3uGo+pZvQmrjuNtNCWvHH8QtRb TOToNDesA/vY6xaJrFFblmOu4hVBZc5Z33tF3tXXti5ePWn+pndtz2daDlETd+d1 7E0T8Xv2Zpbbdy+Y1Q5+MajzOLF7Ih8= -----END CERTIFICATE-----Generated at Wed May 13 14:18:52 2026 by rpki-client