$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa File: 949b4d0e-326e-3bba-8a22-f9d6056bf712.roa (raw, json) Hash identifier: yHSG7/5RsDtBty7WWtJq8CIqNi9nLVyy5tHf8JNtRpU= Subject key identifier: A4:24:7E:D4:E5:63:E1:F8:E9:2D:D7:65:35:68:CE:9B:6C:66:76:97 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584D9E50055D202D7622A17E5680 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 62856 IP address blocks: 209.112.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:05:5d:20:2d:76:22:a1:7e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=232c0117-d2ca-44a5-be7a-9ee45e02254e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2c:58:f0:ab:5d:47:26:f3:f1:b7:55:ed:9d: fa:73:0d:ca:98:a8:c1:db:d5:41:37:7e:29:66:de: f8:27:c9:92:50:cd:42:02:23:a0:a8:bc:c6:a8:74: 45:0a:0b:3a:08:69:a1:88:af:ac:b2:56:91:00:0f: 94:cd:8b:bb:b4:53:0b:e9:23:36:d8:c6:93:23:4e: 62:4c:73:df:9e:24:47:e1:70:06:bd:9f:2c:3d:75: 0e:7a:32:1b:8c:63:67:c8:43:22:eb:ae:ee:c0:ed: f1:08:fc:6a:85:27:c8:93:50:85:23:e3:ef:ac:d2: 5c:b0:bb:c2:b9:bd:3a:31:0e:f5:3e:86:61:40:e2: d2:d3:56:a7:25:d4:bb:a7:6c:10:61:39:bc:d7:c3: d9:a2:9c:b2:57:66:70:59:22:46:a6:ae:ab:79:fe: a8:5b:b4:ec:fa:c8:09:43:95:9a:c2:8c:f5:e2:d7: 74:0e:09:28:27:d8:0f:4a:0c:d1:7a:5d:9d:71:5c: 4a:38:cf:f1:59:0f:96:af:f2:fd:c0:1b:07:5b:5b: da:a3:73:d4:31:98:b0:a1:8a:70:57:e7:b7:d5:a6: da:1b:64:25:20:5a:5a:88:46:1c:66:99:53:c6:1c: bc:8d:47:b7:06:4b:cd:d0:60:f9:7a:55:d6:32:72: 2f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:24:7E:D4:E5:63:E1:F8:E9:2D:D7:65:35:68:CE:9B:6C:66:76:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ff:74:e9:58:10:56:7e:de:28:33:52:43:f1:50:45:8a:4e: cb:48:58:73:61:41:0d:04:9c:bc:34:c4:83:b5:1e:70:4f:cc: 13:3d:28:95:6c:b5:a8:c1:1b:dd:c1:ef:90:db:50:12:8a:61: 61:5a:3e:73:83:2a:74:5e:84:4e:6b:8c:2e:55:89:ab:2f:ac: 11:11:54:43:bd:6c:3c:d0:b6:f5:64:7c:f9:20:ec:08:dc:0e: 99:01:67:29:2e:60:84:bb:74:24:c4:24:2c:4e:2a:b7:8f:fe: 96:03:ca:1b:e9:bd:be:94:19:7b:2b:6e:ad:96:f1:4c:36:7f: 8f:be:de:6a:d3:bb:c1:45:46:42:26:d5:c0:88:02:95:ad:ed: 1b:a4:be:d7:2c:69:66:98:fc:ef:51:d7:85:fa:72:8e:20:37: d7:9b:d7:50:4e:2d:7c:56:b1:58:f1:77:e2:4f:5e:f7:e2:eb: 04:1a:a2:2e:f8:64:74:50:e8:18:ed:0c:28:dc:33:18:8c:97: 81:e6:ca:67:8e:e8:56:86:4e:bb:8c:29:af:d3:fd:72:96:9b: 74:43:cd:f2:fd:de:1e:38:4e:b2:fe:1a:e2:18:fb:03:23:ac: 0d:f0:4e:28:77:a7:fa:db:51:ea:86:ef:f7:8d:8e:5b:d2:e2: ef:02:a1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAVdIC12IqF+VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjMyYzAxMTctZDJjYS00NGE1LWJlN2EtOWVlNDVlMDIyNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCxY8KtdRybz8bdV7Z36cw3KmKjB29VBN34p Zt74J8mSUM1CAiOgqLzGqHRFCgs6CGmhiK+sslaRAA+UzYu7tFML6SM22MaTI05i THPfniRH4XAGvZ8sPXUOejIbjGNnyEMi667uwO3xCPxqhSfIk1CFI+PvrNJcsLvC ub06MQ71PoZhQOLS01anJdS7p2wQYTm818PZopyyV2ZwWSJGpq6ref6oW7Ts+sgJ Q5Wawoz14td0DgkoJ9gPSgzRel2dcVxKOM/xWQ+Wr/L9wBsHW1vao3PUMZiwoYpw V+e31abaG2QlIFpaiEYcZplTxhy8jUe3BkvN0GD5elXWMnIvHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQkftTlY+H46S3XZTVozptsZnaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvOTQ5YjRkMGUtMzI2ZS0z YmJhLThhMjItZjlkNjA1NmJmNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP/dOlYEFZ+3igzUkPxUEWKTstIWHNhQQ0EnLw0xIO1HnBPzBM9KJVs tajBG93B75DbUBKKYWFaPnODKnRehE5rjC5ViasvrBERVEO9bDzQtvVkfPkg7Ajc DpkBZykuYIS7dCTEJCxOKreP/pYDyhvpvb6UGXsrbq2W8Uw2f4++3mrTu8FFRkIm 1cCIApWt7RukvtcsaWaY/O9R14X6co4gN9eb11BOLXxWsVjxd+JPXvfi6wQaoi74 ZHRQ6BjtDCjcMxiMl4HmymeO6FaGTruMKa/T/XKWm3RDzfL93h44TrL+GuIY+wMj rA3wTih3p/rbUeqG7/eNjlvS4u8Cofk= -----END CERTIFICATE-----Generated at Wed May 13 06:47:08 2026 by rpki-client