$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa File: 975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa (raw, json) Hash identifier: f49gFa7QB5pfaphPXHnnrf+4h5N+COOn9aIIvmVM4bI= Subject key identifier: 03:E1:D5:F3:78:EF:E8:53:3A:22:62:B8:39:2C:13:97:22:A5:95:05 Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F4328584DC565C98C560326E1EB06BF80 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 16509 IP address blocks: 204.11.172.0/24 maxlen: 24 204.11.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:c9:8c:56:03:26:e1:eb:06:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=4db63a97-24e5-4fab-b3c7-10fd4c2537b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:09:17:e5:82:d4:84:13:4d:bd:fe:ba:ab:94: ac:3a:06:81:62:e7:39:08:07:57:2f:57:37:9f:85: 75:09:df:af:10:cc:ae:cf:8a:33:b4:cc:07:29:d8: 21:3f:cb:ab:45:2a:b4:a1:31:40:19:bd:63:29:d6: c3:ff:7a:8f:19:2c:52:b3:ec:b6:70:63:1e:8b:4e: 7a:5f:6d:a5:7f:08:1b:c3:c8:5f:6b:c5:21:95:12: 7f:14:9a:5f:3f:7c:6e:58:95:82:88:8c:a5:bf:70: 30:3a:95:11:91:d2:df:fe:7f:6e:92:bf:b2:a0:9d: c6:f2:4f:87:6e:61:74:50:57:0a:cf:35:15:a1:ec: 76:8f:f0:62:f0:72:37:c9:8a:cb:c6:58:ed:70:e6: e2:74:f6:28:8b:f0:a5:2e:2f:c6:a3:24:70:2d:78: 40:37:73:9c:ce:a1:fc:65:82:c5:8e:cf:24:f1:06: 23:f7:b2:dc:cf:dc:46:bb:1a:47:60:61:8c:a8:26: 71:8e:cf:dd:06:a6:7e:d4:b5:a5:dd:0b:a2:a9:e3: 58:36:86:98:50:9f:11:98:bc:69:5b:5e:72:36:69: ff:18:aa:d7:37:3c:83:94:07:b3:81:cc:24:ce:09: 51:f7:91:16:eb:3f:f8:5a:91:58:a3:35:3f:56:d1: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E1:D5:F3:78:EF:E8:53:3A:22:62:B8:39:2C:13:97:22:A5:95:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:8c:d2:1e:ec:7c:a1:2c:6a:bd:23:30:e6:6f:6f:55:22: 0e:ce:8a:85:20:cb:e0:d5:e6:11:ed:97:28:39:69:97:35:a1: da:0c:6a:c0:09:b4:69:af:44:f6:5d:23:35:df:65:3e:7d:f4: 25:51:ea:af:d9:35:11:f1:93:d2:1d:22:1d:05:b5:99:c5:8e: 31:e2:c1:ce:95:77:f0:44:99:70:57:a5:55:cb:0c:b4:26:50: e1:05:a0:9f:a5:cc:ae:05:d3:4f:f6:9d:c5:cd:4d:1b:a6:09: d3:9f:0c:e7:cd:18:60:93:d3:12:0d:28:34:a9:87:03:86:75: ee:a9:a4:ba:82:b4:95:93:a5:10:82:29:f8:b9:dc:40:75:2f: 61:ab:c3:77:17:01:9e:73:bc:3b:85:7a:51:f7:fe:d3:de:15: 62:db:13:8e:db:db:88:4f:33:e0:98:b8:2d:3f:3c:6b:4a:3b: e4:e5:c2:b4:a8:ab:f3:69:1e:36:81:7b:d7:6d:a5:a8:06:12: 17:82:6b:57:2f:4d:fe:4c:4d:59:f3:5e:41:95:86:2c:b0:ab: 37:7b:30:0d:bb:6b:ab:35:0c:63:7d:2b:82:95:f3:6f:6c:d5: f5:0d:3d:d7:e8:22:f2:0d:88:a8:90:8f:c3:13:0b:72:91:5d: 43:bd:09:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcmMVgMm4esGv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk NGRiNjNhOTctMjRlNS00ZmFiLWIzYzctMTBmZDRjMjUzN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwkX5YLUhBNNvf66q5SsOgaBYuc5CAdXL1c3 n4V1Cd+vEMyuz4oztMwHKdghP8urRSq0oTFAGb1jKdbD/3qPGSxSs+y2cGMei056 X22lfwgbw8hfa8UhlRJ/FJpfP3xuWJWCiIylv3AwOpURkdLf/n9ukr+yoJ3G8k+H bmF0UFcKzzUVoex2j/Bi8HI3yYrLxljtcObidPYoi/ClLi/GoyRwLXhAN3OczqH8 ZYLFjs8k8QYj97Lcz9xGuxpHYGGMqCZxjs/dBqZ+1LWl3QuiqeNYNoaYUJ8RmLxp W15yNmn/GKrXNzyDlAezgcwkzglR95EW6z/4WpFYozU/VtEVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPh1fN47+hTOiJiuDksE5cipZUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvOTc1ZGM1ZWMtMWFmMS0z ZGNhLWE3N2ItMGI5MzkxMjY0YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtqjNIe7HyhLGq9IzDmb29VIg7OioUgy+DV5hHtlyg5aZc1odoMasAJ tGmvRPZdIzXfZT599CVR6q/ZNRHxk9IdIh0FtZnFjjHiwc6Vd/BEmXBXpVXLDLQm UOEFoJ+lzK4F00/2ncXNTRumCdOfDOfNGGCT0xINKDSphwOGde6ppLqCtJWTpRCC Kfi53EB1L2Grw3cXAZ5zvDuFelH3/tPeFWLbE47b24hPM+CYuC0/PGtKO+TlwrSo q/NpHjaBe9dtpagGEheCa1cvTf5MTVnzXkGVhiywqzd7MA27a6s1DGN9K4KV829s 1fUNPdfoIvINiKiQj8MTC3KRXUO9Ceg= -----END CERTIFICATE-----Generated at Wed May 13 10:04:37 2026 by rpki-client