$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa File: 0ecb879e-98c9-3896-bc6d-f8030a714e58.roa (raw, json) Hash identifier: ipMsR3cBhqbAZuxqvq9gdv25ytA/dA7TqbM17CGH9eM= Subject key identifier: 9C:F6:D1:57:87:63:E3:9C:4D:64:AD:EA:D7:41:F6:6E:58:E9:78:99 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584D91C0079847F306BB88204500 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 7311 IP address blocks: 67.21.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:07:98:47:f3:06:bb:88:20:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1030bd79-2304-4780-80a4-4b65aaec25e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e8:04:c0:dc:30:21:b9:bf:7e:60:aa:9b:57: e2:d8:99:c0:8b:ec:64:3d:cc:db:92:f3:a7:87:e9: 29:d3:b3:d7:7b:bd:db:c0:53:21:34:06:2b:5b:bb: 8e:9c:8b:c1:ae:d5:1e:30:b9:7b:4e:d2:ca:f3:91: 20:07:16:7b:24:82:37:8c:20:b7:00:16:42:04:0a: ea:f9:45:59:db:1f:db:38:c6:31:b1:e6:3e:5d:0e: 22:66:64:b0:af:f9:2d:e5:12:0e:43:60:cb:59:f8: 78:f5:d2:09:17:17:83:62:f2:85:b7:d5:51:2e:db: ab:e6:48:cf:9a:bf:80:5b:23:c4:05:fc:db:a7:d3: f3:72:c3:35:26:13:c2:aa:9a:20:f3:91:ed:88:24: 0a:19:c9:be:28:0d:0c:e9:37:16:84:55:df:0f:40: ed:d0:bd:7d:66:33:13:ac:47:21:91:cf:61:a6:48: 6a:8f:c6:2e:c8:a4:b9:4e:46:55:f7:76:0a:62:f7: d2:54:0b:25:99:f4:54:37:54:03:47:a8:2a:1c:32: be:94:a1:8e:c7:0c:90:1b:c5:3a:15:a8:e8:19:b4: 22:fc:52:8f:cf:20:fc:d1:bb:6e:eb:db:1d:e0:ae: 11:02:5e:49:64:28:0c:7d:79:2d:60:2f:98:42:e3: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:D1:57:87:63:E3:9C:4D:64:AD:EA:D7:41:F6:6E:58:E9:78:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 67.21.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bd:25:bf:a6:ef:ef:0c:a9:64:c2:e6:f8:4a:52:4b:4e:3a: 4b:b9:91:76:eb:5d:e9:d2:73:85:81:27:00:03:66:76:b1:40: c2:2e:9b:2e:14:89:07:9d:49:50:57:45:2c:39:d5:30:21:6a: af:bc:7b:e7:d5:55:fd:41:d6:79:ed:57:4d:8d:75:28:38:fc: 85:96:bf:dd:be:e6:34:c6:26:c2:13:a4:3d:73:86:fb:01:9e: a3:49:42:6b:a3:e5:ba:7a:c2:1d:8b:3b:a3:7b:ae:86:4a:03: ce:07:f8:0c:4e:cb:7d:bb:d0:6c:d8:45:93:87:7f:8b:d8:2e: 9f:ba:a9:96:f2:db:24:fc:7a:48:0a:7a:aa:f7:08:d8:0e:9c: 63:3a:2a:1c:04:05:cf:7f:d2:8b:a3:68:e9:7a:80:7a:f3:f9: de:2b:16:f0:e6:36:bb:c9:99:38:d4:77:5a:0e:1f:1a:2c:31: 30:20:ac:a7:4c:bb:70:45:57:97:ca:22:df:dd:3b:8c:5e:f2: e8:4a:70:12:38:7f:b2:8c:c4:b4:f8:e8:a9:7b:2a:33:6c:64: 0d:95:33:3b:bd:2a:32:3f:1e:80:81:d5:23:59:db:60:84:28: a9:2f:37:12:f9:b5:04:b2:00:e1:93:19:2f:2d:70:05:10:99: 86:9e:09:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAeYR/MGu4ggRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MTAzMGJkNzktMjMwNC00NzgwLTgwYTQtNGI2NWFhZWMyNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiegEwNwwIbm/fmCqm1fi2JnAi+xkPczbkvOn h+kp07PXe73bwFMhNAYrW7uOnIvBrtUeMLl7TtLK85EgBxZ7JII3jCC3ABZCBArq +UVZ2x/bOMYxseY+XQ4iZmSwr/kt5RIOQ2DLWfh49dIJFxeDYvKFt9VRLtur5kjP mr+AWyPEBfzbp9PzcsM1JhPCqpog85HtiCQKGcm+KA0M6TcWhFXfD0Dt0L19ZjMT rEchkc9hpkhqj8YuyKS5TkZV93YKYvfSVAslmfRUN1QDR6gqHDK+lKGOxwyQG8U6 FajoGbQi/FKPzyD80btu69sd4K4RAl5JZCgMfXktYC+YQuPmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz20VeHY+OcTWSt6tdB9m5Y6XiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvMGVjYjg3OWUtOThjOS0z ODk2LWJjNmQtZjgwMzBhNzE0ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQxWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG9Jb+m7+8MqWTC5vhKUktOOku5kXbrXenSc4WBJwADZnaxQMIumy4U iQedSVBXRSw51TAhaq+8e+fVVf1B1nntV02NdSg4/IWWv92+5jTGJsITpD1zhvsB nqNJQmuj5bp6wh2LO6N7roZKA84H+AxOy3270GzYRZOHf4vYLp+6qZby2yT8ekgK eqr3CNgOnGM6KhwEBc9/0oujaOl6gHrz+d4rFvDmNrvJmTjUd1oOHxosMTAgrKdM u3BFV5fKIt/dO4xe8uhKcBI4f7KMxLT46Kl7KjNsZA2VMzu9KjI/HoCB1SNZ22CE KKkvNxL5tQSyAOGTGS8tcAUQmYaeCcI= -----END CERTIFICATE-----Generated at Wed May 13 12:33:16 2026 by rpki-client