$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa File: 47d3484f-4726-3190-8c44-831e3dafc9f7.roa (raw, json) Hash identifier: C+CAjZ/6K/NeVrsj/hWUf7B1TCTJb2WvN4KjQgL9XJw= Subject key identifier: CC:0C:E7:01:47:1A:77:AC:06:70:5C:C0:F6:1A:8E:FA:DC:40:86:B9 Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297 Certificate serial: 010D0C9F4328584DBFD0588AE81B344D4ECA1600 Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 6233 IP address blocks: 74.211.120.0/22 maxlen: 22 74.211.124.0/22 maxlen: 22 98.142.132.0/22 maxlen: 22 150.242.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:58:8a:e8:1b:34:4d:4e:ca:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=52806d5a-cedd-408a-9eac-f187dff46a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:22:60:1a:6e:d9:15:30:c6:ef:1a:5a:70: ec:b5:36:93:bf:9a:7e:de:98:b1:30:5b:cc:e6:e8: c3:c2:9c:df:28:10:3d:35:8b:e6:b4:5b:6b:fe:d3: 96:c4:40:68:e1:f0:74:4a:a4:c7:1e:e1:12:cc:be: 4c:47:a7:f8:4c:e5:65:02:60:5c:6b:5c:0a:19:fe: 45:7e:d2:10:dc:af:00:e3:0d:ae:5e:78:5d:44:7e: 44:66:f4:e8:a0:22:50:31:a4:08:1b:13:fe:82:4b: fa:3c:59:7e:e5:02:7c:13:de:da:3a:6f:07:51:53: 36:28:9d:14:53:35:66:82:b3:06:71:fc:cf:d9:73: e4:59:fc:4d:2d:15:2b:d6:f6:33:fc:87:6c:e7:f8: b3:28:a5:b5:c8:2f:a5:bf:dc:09:e7:0f:9f:c0:83: 68:bd:f8:29:1f:a8:3b:e4:5f:17:91:36:22:c3:77: 5d:d8:53:91:d3:a1:aa:6c:a9:79:aa:e9:77:61:af: 04:da:f1:f8:7b:4d:b6:a2:49:27:57:22:5b:63:7c: cd:c2:d7:18:49:e2:ed:41:d0:0e:a6:9b:9d:ae:8c: 47:8c:b1:25:87:52:42:c8:11:9a:06:14:e9:42:6c: 7a:d7:57:3c:71:7a:e3:e4:3b:5d:74:31:f0:0a:f8: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0C:E7:01:47:1A:77:AC:06:70:5C:C0:F6:1A:8E:FA:DC:40:86:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl X509v3 Authority Key Identifier: keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer sbgp-ipAddrBlock: critical IPv4: 74.211.120.0/21 98.142.132.0/22 150.242.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:38:31:d2:4a:ee:76:19:02:f5:2a:7a:e1:ed:d1:f5:80:97: 45:92:26:4a:48:49:32:33:ca:01:f4:86:0f:68:37:61:b6:fa: 46:2b:0f:4e:56:f6:4a:e7:e1:12:5c:4a:b3:78:d2:58:60:ae: 55:71:41:36:e4:1d:76:ed:c4:ba:41:04:b4:b1:38:8f:86:3d: ee:bf:a7:1b:75:cc:12:91:47:73:55:69:4f:5e:4d:ef:8a:f8: 48:60:2b:a8:e0:39:36:88:c4:f9:53:71:80:6c:5b:05:fc:ec: 4d:00:5b:4f:16:7d:ff:4b:e0:00:41:21:c9:a6:61:cc:39:a4: 8e:6d:eb:b4:d2:f4:ea:23:52:c9:16:32:37:1a:e2:99:0e:2a: f4:65:5b:1f:77:8e:84:e9:07:cb:a4:06:3c:7f:42:a8:fd:7e: c8:e3:bd:50:ef:3e:7f:74:19:28:9a:fa:04:39:32:36:69:a8: cf:bf:50:2b:72:ac:f0:8d:c2:4e:f6:04:3f:c6:b5:98:e4:72: 80:7b:f0:f8:d8:a0:07:6b:6b:a1:26:b3:72:7f:b0:17:67:3c: 4b:39:57:04:9a:dd:d6:0b:5b:55:db:75:84:5a:a8:1c:56:06: bc:86:81:cc:35:9f:61:2a:71:e9:4f:a7:d5:37:c9:84:c8:c9: d5:6c:e2:f5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2/0FiK6Bs0TU7KFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMWIyOGEtNDM2ZC00MmRkLTg3NTAtNTM2MWYyMzA5 Mjk3MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NTI4MDZkNWEtY2VkZC00MDhhLTllYWMtZjE4N2RmZjQ2YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio4iYBpu2RUwxu8aWnDstTaTv5p+3pixMFvM 5ujDwpzfKBA9NYvmtFtr/tOWxEBo4fB0SqTHHuESzL5MR6f4TOVlAmBca1wKGf5F ftIQ3K8A4w2uXnhdRH5EZvTooCJQMaQIGxP+gkv6PFl+5QJ8E97aOm8HUVM2KJ0U UzVmgrMGcfzP2XPkWfxNLRUr1vYz/Ids5/izKKW1yC+lv9wJ5w+fwINovfgpH6g7 5F8XkTYiw3dd2FOR06GqbKl5qul3Ya8E2vH4e022okknVyJbY3zNwtcYSeLtQdAO ppudroxHjLElh1JCyBGaBhTpQmx611c8cXrj5DtddDHwCvhvMQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMwM5wFHGnesBnBcwPYajvrcQIa5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAx YjI4YS00MzZkLTQyZGQtODc1MC01MzYxZjIzMDkyOTcvNDdkMzQ4NGYtNDcyNi0z MTkwLThjNDQtODMxZTNkYWZjOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2IwMWIyOGEtNDM2ZC00MmRkLTg3 NTAtNTM2MWYyMzA5Mjk3L2NiMDFiMjhhLTQzNmQtNDJkZC04NzUwLTUzNjFmMjMw OTI5Ny5jcmwwHwYDVR0jBBgwFoAUoD/XgfdrhiAFQLOw8V5XSYqIHsQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAxYjI4YS00MzZkLTQyZGQtODc1MC01MzYx ZjIzMDkyOTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDStN4AwQC Yo6EAwQAlvJaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABM4MdJK7nYZAvUqeuHt0fWAl0WSJkpISTIzygH0 hg9oN2G2+kYrD05W9krn4RJcSrN40lhgrlVxQTbkHXbtxLpBBLSxOI+GPe6/pxt1 zBKRR3NVaU9eTe+K+EhgK6jgOTaIxPlTcYBsWwX87E0AW08Wff9L4ABBIcmmYcw5 pI5t67TS9OojUskWMjca4pkOKvRlWx93joTpB8ukBjx/Qqj9fsjjvVDvPn90GSia +gQ5MjZpqM+/UCtyrPCNwk72BD/GtZjkcoB78PjYoAdra6Ems3J/sBdnPEs5VwSa 3dYLW1XbdYRaqBxWBryGgcw1n2EqcelPp9U3yYTIydVs4vU= -----END CERTIFICATE-----Generated at Wed May 13 15:28:47 2026 by rpki-client