$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa File: 60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa (raw, json) Hash identifier: Yz7Dm38MgO/fnXw0E71vCBbnVUQsQ8Fv7iCnt+oACeo= Subject key identifier: 3B:C3:D2:C5:C7:9A:11:0F:59:F6:4B:20:F8:33:1B:95:19:08:9B:1D Certificate issuer: /CN=625741fb-b66a-49be-918d-1b4752e68175 Certificate serial: 010D0C9F4328584DCDC5A3352A5BFBA88021C5C8 Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 15038 IP address blocks: 204.9.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:a3:35:2a:5b:fb:a8:80:21:c5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=08d25d00-49b5-4c4b-80fe-4c5803c48821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:e1:17:f6:c1:da:ce:f1:04:63:81:02:67: 7f:25:04:68:cb:84:e2:69:77:d7:d2:cc:45:c1:67: 2d:ae:f5:d0:c9:99:0e:4b:86:79:e1:26:d6:9a:c0: 4e:73:a9:cf:4f:6c:15:2b:34:a7:cf:03:76:74:23: 6e:d5:b2:fb:28:d7:d4:87:37:eb:42:fc:6f:51:e7: 1a:69:0e:3f:f3:6e:dd:f1:6c:5f:66:55:50:8f:53: 9f:cd:4c:e8:90:ab:18:6c:75:1e:da:ea:8b:02:36: 9a:c1:0a:05:28:f5:a4:89:27:39:74:6d:0c:be:81: 32:d5:f9:da:26:86:fc:1e:ce:4d:71:37:14:75:23: 9c:ec:39:c4:ac:60:c1:de:2b:92:22:87:b8:c1:33: 57:33:39:42:23:74:68:e2:48:00:ad:50:f2:36:00: 3f:d1:e6:c2:d4:90:41:b2:ab:bf:64:46:cc:8b:f7: a0:04:05:be:4d:f0:71:ad:2e:22:4e:fa:e1:72:43: b1:be:7e:7c:e2:63:87:11:2a:7e:b5:3f:e1:ea:09: 49:b8:9e:fe:da:9d:4d:08:e0:8d:dc:32:e6:dd:0e: a6:8a:80:f7:30:79:12:b5:fb:8f:bd:5a:bf:ae:dd: 24:27:de:39:5a:ac:0f:40:1d:38:5b:09:62:d3:ef: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:D2:C5:C7:9A:11:0F:59:F6:4B:20:F8:33:1B:95:19:08:9B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl X509v3 Authority Key Identifier: keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer sbgp-ipAddrBlock: critical IPv4: 204.9.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:31:e5:58:8a:74:fc:88:13:f7:c6:e6:2f:e0:16:36:ff:0a: 8c:bf:bf:84:da:af:52:25:30:01:be:7e:5d:ea:0c:d5:01:35: 70:1a:27:eb:38:62:9a:86:ff:8c:d9:43:53:65:a7:f6:7a:1c: 10:22:8c:ee:8d:7c:5f:90:d0:e3:06:9a:73:6b:35:ed:84:6e: 35:47:de:43:e4:7e:97:39:5c:45:99:4d:04:94:f5:c0:21:b6: 69:4e:78:26:6e:ec:00:47:62:70:a5:91:c7:45:4e:52:e2:af: 30:3a:78:24:7e:da:a4:20:58:a1:c3:70:c1:30:64:fb:11:81: 64:6c:6e:3c:e3:2c:d3:77:09:a4:9f:58:41:a9:b3:b2:01:b3: 7d:ab:e0:bb:e9:16:10:98:59:a1:1a:be:e4:aa:37:d5:90:07: e7:4b:99:51:03:1f:dc:d4:78:60:b4:f3:5b:a7:1c:a9:c5:bc: 50:60:91:b5:38:c0:be:0a:fb:be:1c:3b:f8:f4:7d:08:86:f5: c2:5f:62:0e:6e:db:5f:9b:51:8b:8b:15:04:bc:38:3e:e7:ce: 07:1f:3a:5b:fb:6c:1d:14:61:19:2c:ef:94:04:78:9f:a4:a9: 1a:eb:1c:f9:e9:c1:36:12:c3:64:65:23:8d:1a:a1:38:87:92: 9f:b4:d5:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxaM1Klv7qIAhxcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI1NzQxZmItYjY2YS00OWJlLTkxOGQtMWI0NzUyZTY4 MTc1MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk MDhkMjVkMDAtNDliNS00YzRiLTgwZmUtNGM1ODAzYzQ4ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJjhF/bB2s7xBGOBAmd/JQRoy4TiaXfX0sxF wWctrvXQyZkOS4Z54SbWmsBOc6nPT2wVKzSnzwN2dCNu1bL7KNfUhzfrQvxvUeca aQ4/827d8WxfZlVQj1OfzUzokKsYbHUe2uqLAjaawQoFKPWkiSc5dG0MvoEy1fna Job8Hs5NcTcUdSOc7DnErGDB3iuSIoe4wTNXMzlCI3Ro4kgArVDyNgA/0ebC1JBB squ/ZEbMi/egBAW+TfBxrS4iTvrhckOxvn584mOHESp+tT/h6glJuJ7+2p1NCOCN 3DLm3Q6mioD3MHkStfuPvVq/rt0kJ945WqwPQB04Wwli0+/TrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvD0sXHmhEPWfZLIPgzG5UZCJsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MjU3 NDFmYi1iNjZhLTQ5YmUtOTE4ZC0xYjQ3NTJlNjgxNzUvNjAyMTcwMjMtNWQ0My0z ZjlhLWI5YTQtYzRiOGM1MjZjMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjI1NzQxZmItYjY2YS00OWJlLTkx OGQtMWI0NzUyZTY4MTc1LzYyNTc0MWZiLWI2NmEtNDliZS05MThkLTFiNDc1MmU2 ODE3NS5jcmwwHwYDVR0jBBgwFoAUAlK0IrCFlJsA/ZZqCvwdM/q0FFkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MjU3NDFmYi1iNjZhLTQ5YmUtOTE4ZC0xYjQ3 NTJlNjgxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwx5ViKdPyIE/fG5i/gFjb/Coy/v4Tar1IlMAG+fl3qDNUBNXAaJ+s4 YpqG/4zZQ1Nlp/Z6HBAijO6NfF+Q0OMGmnNrNe2EbjVH3kPkfpc5XEWZTQSU9cAh tmlOeCZu7ABHYnClkcdFTlLirzA6eCR+2qQgWKHDcMEwZPsRgWRsbjzjLNN3CaSf WEGps7IBs32r4LvpFhCYWaEavuSqN9WQB+dLmVEDH9zUeGC081unHKnFvFBgkbU4 wL4K+74cO/j0fQiG9cJfYg5u21+bUYuLFQS8OD7nzgcfOlv7bB0UYRks75QEeJ+k qRrrHPnpwTYSw2RlI40aoTiHkp+01Uw= -----END CERTIFICATE-----Generated at Wed May 13 15:29:54 2026 by rpki-client