$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa File: b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json) Hash identifier: 8+QrfdvPfm+rizmhc/OUkOx3V0BGNV8N1OI29ggSh9o= Subject key identifier: 6C:21:C0:6F:38:B9:48:F6:18:08:09:1C:3A:D7:6A:85:66:13:03:B7 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584DBA3AFCA2F6A5E99A9BCF6B40 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 19905 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:fc:a2:f6:a5:e9:9a:9b:cf:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=4f990945-8a81-490d-a69f-02117ab30a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:5b:fe:67:d3:bc:b0:b7:28:96:06:7e:f7: f7:0a:06:89:ea:b1:af:52:3d:e4:ee:f1:ba:eb:9e: e1:d8:a9:fc:fb:18:d3:f6:db:8d:f7:be:6e:07:66: 58:6f:82:f1:54:7f:b3:16:8f:42:d1:da:6d:61:98: 51:41:d2:c2:a7:a2:c6:91:78:91:e2:d3:f3:b9:10: 92:1a:73:34:82:19:9c:ec:45:ef:3b:e0:7f:fa:36: a9:99:c1:48:65:46:60:1c:f1:8c:ea:69:90:87:df: 7f:cb:00:b1:28:4b:7a:49:a4:b8:72:02:ff:d1:62: ff:ba:53:92:68:67:48:d8:bd:ea:5f:41:75:a3:28: 64:48:65:a0:bd:43:a8:e9:7b:b5:06:37:57:b1:6b: a6:ca:4b:3f:98:b5:c7:7f:47:20:03:3a:76:ad:93: 58:5e:98:71:49:76:59:dc:9c:4b:2f:da:13:49:83: 22:4b:c1:a1:db:af:11:e5:58:02:3f:5c:7d:74:95: 0f:80:f1:8d:f1:a5:25:31:6e:f1:06:f4:ad:18:2a: 30:b4:ab:75:75:93:e3:e6:dd:39:16:30:bc:07:f1: 1c:35:d6:84:28:d2:e3:c4:76:24:8c:06:48:1d:39: 4b:28:23:6e:15:d0:8c:b2:2e:0c:a7:5f:b4:82:04: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:21:C0:6F:38:B9:48:F6:18:08:09:1C:3A:D7:6A:85:66:13:03:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:df:4d:0e:4d:23:b4:48:4c:ac:ca:f9:1b:eb:2c:04:e4:18: 2f:09:54:40:79:b3:8d:e9:69:e2:db:fa:66:22:05:22:32:ca: d9:96:b2:a0:06:78:9c:76:bf:e8:e9:4f:c3:df:9c:f7:e8:1a: 33:dd:14:28:fc:b7:cf:7d:92:dc:d6:c2:58:48:b7:63:d9:7d: 36:4a:39:d4:12:f1:d9:df:f2:d9:b4:89:c8:45:5e:4e:03:6c: 6e:03:88:34:cc:07:bc:c6:60:42:5f:82:dc:9f:bb:40:5e:b0: 33:e7:1c:b5:d7:4c:59:52:dc:cc:be:ce:55:ee:7e:ea:fc:d4: 6e:bf:01:23:7e:74:0b:a2:c6:cc:3d:a9:11:2e:8f:59:68:1c: 53:b2:58:ff:3c:52:1b:42:83:d1:aa:11:24:e3:8c:44:73:77: b4:81:e3:69:7b:18:a5:9e:5f:c2:f4:cc:04:c5:e8:c8:0f:a8: cb:8b:c7:08:ab:b4:34:ff:e8:93:f4:34:10:e9:c0:26:1e:f6: 98:73:9a:d0:67:00:85:53:5d:b7:ce:a8:37:04:06:da:a1:9a: 59:d2:ed:8b:e4:07:34:5e:3e:7a:6b:4e:95:f1:81:9a:0f:88: 3b:0a:0e:48:bf:0b:7d:09:f8:b3:e1:26:22:c6:21:59:65:4a: ff:f2:91:ec -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWE26Ovyi9qXpmpvPa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NGY5OTA5NDUtOGE4MS00OTBkLWE2OWYtMDIxMTdhYjMwYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9xb/mfTvLC3KJYGfvf3CgaJ6rGvUj3k7vG6 657h2Kn8+xjT9tuN975uB2ZYb4LxVH+zFo9C0dptYZhRQdLCp6LGkXiR4tPzuRCS GnM0ghmc7EXvO+B/+japmcFIZUZgHPGM6mmQh99/ywCxKEt6SaS4cgL/0WL/ulOS aGdI2L3qX0F1oyhkSGWgvUOo6Xu1BjdXsWumyks/mLXHf0cgAzp2rZNYXphxSXZZ 3JxLL9oTSYMiS8Gh268R5VgCP1x9dJUPgPGN8aUlMW7xBvStGCowtKt1dZPj5t05 FjC8B/EcNdaEKNLjxHYkjAZIHTlLKCNuFdCMsi4Mp1+0ggQkZQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFGwhwG84uUj2GAgJHDrXaoVmEwO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvYjAwOTU4OWQtYzJhZS0z ZTdjLWFlNjItMGRiNTA0MGY5M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJ99NDk0jtEhMrMr5G+ssBOQYLwlUQHmzjelp4tv6ZiIF IjLK2ZayoAZ4nHa/6OlPw9+c9+gaM90UKPy3z32S3NbCWEi3Y9l9Nko51BLx2d/y 2bSJyEVeTgNsbgOINMwHvMZgQl+C3J+7QF6wM+cctddMWVLczL7OVe5+6vzUbr8B I350C6LGzD2pES6PWWgcU7JY/zxSG0KD0aoRJOOMRHN3tIHjaXsYpZ5fwvTMBMXo yA+oy4vHCKu0NP/ok/Q0EOnAJh72mHOa0GcAhVNdt86oNwQG2qGaWdLti+QHNF4+ emtOlfGBmg+IOwoOSL8LfQn4s+EmIsYhWWVK//KR7A== -----END CERTIFICATE-----Generated at Wed May 13 04:46:31 2026 by rpki-client