$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa File: cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa (raw, json) Hash identifier: pjUgZGs21zqIwneyC2Nc78KDmb3vwVFKlV+ig2QHMtw= Subject key identifier: 41:F3:2C:39:42:DD:3B:A0:81:76:29:4A:4B:F5:40:58:FE:50:47:A7 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584DA81582B3CE875B0889BDE240 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 393878 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:82:b3:ce:87:5b:08:89:bd:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=45e5b7cc-7a17-4326-8f13-d17888172f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:b3:cd:f3:39:8d:9b:bb:d4:9c:ef:97:d2: 3b:f0:22:c5:fc:0d:1e:8b:6d:f8:26:67:55:3c:24: a6:bf:26:05:10:67:ab:ed:0d:e4:7b:db:37:9f:fe: 9a:f9:8c:d8:14:32:28:dd:af:09:8f:47:aa:94:9a: 60:cf:9c:12:06:35:87:83:7a:1c:b2:35:87:75:5b: 4b:84:75:16:c1:ee:40:58:cd:eb:f3:65:94:03:bf: 17:a6:b1:c3:b4:69:24:ae:82:30:2c:e3:3a:0c:0c: 87:89:d8:f0:8e:1b:00:16:e4:f6:3f:02:07:88:9d: e0:ee:f6:ae:af:6b:d9:99:f9:5c:4a:5e:0f:b1:f4: 20:58:bc:c1:51:a1:49:08:b2:0a:8f:9c:b4:e3:bc: b5:5b:82:cf:ce:87:bf:4f:f6:04:5e:9d:0a:26:02: bc:36:a6:46:54:f1:f9:eb:a5:73:b0:61:ab:dc:13: 92:ec:0c:81:4e:8c:2f:3b:8b:f7:b5:71:85:95:55: c0:95:80:98:95:22:78:e9:19:85:80:0d:a5:79:30: 25:d1:93:94:5d:ab:a4:0f:af:2d:5b:53:5e:2b:0b: e5:b0:d1:f6:c9:2a:fe:f1:44:77:f0:1e:48:90:42: 11:f8:2b:3e:6c:ff:97:e8:29:66:45:09:14:ee:b6: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:2C:39:42:DD:3B:A0:81:76:29:4A:4B:F5:40:58:FE:50:47:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2c:8a:a7:53:e9:30:2d:eb:9c:98:be:a0:2f:a9:b3:41:84: a3:26:71:12:b5:d1:6d:c8:93:d4:3a:52:f6:61:9b:10:77:94: 44:57:ed:ca:21:75:12:bd:d9:b6:f0:f8:3c:e0:91:b0:73:03: b8:39:f8:6d:c6:55:59:c7:83:42:22:0d:37:04:a3:d5:1a:1b: 61:61:fb:4e:b9:5b:85:fb:7b:10:09:c9:cd:17:41:f0:7f:86: 8a:e5:f7:b8:2d:02:00:28:79:8f:00:6b:e4:83:a5:36:49:77: 95:2f:0f:dc:ce:44:72:bc:a7:29:2a:73:d6:de:e9:a9:51:9a: 14:11:93:f2:df:4b:5d:1c:42:33:c5:3c:ac:ae:03:c8:bf:95: 73:fe:cb:95:e0:42:af:f1:13:5c:a8:08:8f:56:03:6a:7a:96: 8d:88:cf:e0:da:03:fd:5b:7e:cd:70:82:e3:b0:99:b8:12:ff: 2d:69:37:c6:87:02:75:2f:6a:47:64:a8:91:27:5c:6d:b7:05: 85:0b:88:cf:60:d2:c4:db:e2:6a:44:22:11:b2:01:42:b8:36: 77:64:1e:7b:7d:c8:aa:94:eb:42:aa:c3:20:6a:4b:23:1c:7c: 22:e6:63:63:29:dc:a0:cf:e7:7c:1c:fd:d3:a0:6f:29:6c:43: 84:0e:2c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYKzzodbCIm94kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NDVlNWI3Y2MtN2ExNy00MzI2LThmMTMtZDE3ODg4MTcyZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z2zzfM5jZu71Jzvl9I78CLF/A0ei234JmdV PCSmvyYFEGer7Q3ke9s3n/6a+YzYFDIo3a8Jj0eqlJpgz5wSBjWHg3ocsjWHdVtL hHUWwe5AWM3r82WUA78XprHDtGkkroIwLOM6DAyHidjwjhsAFuT2PwIHiJ3g7vau r2vZmflcSl4PsfQgWLzBUaFJCLIKj5y047y1W4LPzoe/T/YEXp0KJgK8NqZGVPH5 66VzsGGr3BOS7AyBTowvO4v3tXGFlVXAlYCYlSJ46RmFgA2leTAl0ZOUXaukD68t W1NeKwvlsNH2ySr+8UR38B5IkEIR+Cs+bP+X6ClmRQkU7rZHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHzLDlC3TuggXYpSkv1QFj+UEenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2QyNjExYzYtZmZjMy0z YzhkLWJiMTktYTUyZmM3Njg4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMsiqdT6TAt65yYvqAvqbNBhKMmcRK10W3Ik9Q6UvZhmxB3lERX7coh dRK92bbw+DzgkbBzA7g5+G3GVVnHg0IiDTcEo9UaG2Fh+065W4X7exAJyc0XQfB/ horl97gtAgAoeY8Aa+SDpTZJd5UvD9zORHK8pykqc9be6alRmhQRk/LfS10cQjPF PKyuA8i/lXP+y5XgQq/xE1yoCI9WA2p6lo2Iz+DaA/1bfs1wguOwmbgS/y1pN8aH AnUvakdkqJEnXG23BYULiM9g0sTb4mpEIhGyAUK4NndkHnt9yKqU60KqwyBqSyMc fCLmY2Mp3KDP53wc/dOgbylsQ4QOLD0= -----END CERTIFICATE-----Generated at Wed May 13 11:34:30 2026 by rpki-client