$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json) Hash identifier: cO9FkUK/gg3QFFW79YaWkExIaF9GfdeL0LizD8Mxep4= Subject key identifier: 8D:45:FE:FB:21:2A:C8:85:0E:05:1D:05:32:3B:84:6E:91:D5:D9:92 Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F4328584DA3E55FF575F0D81041EB3BB0 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 4393 IP address blocks: 209.251.198.0/23 maxlen: 23 209.251.200.0/21 maxlen: 21 209.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5f:f5:75:f0:d8:10:41:eb:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=7ae52a9f-ca0e-4160-8262-cddea1287970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:87:88:3b:63:76:a6:c9:53:22:01:78:9b:61: bb:83:3b:6f:06:cf:62:74:35:de:6c:20:4f:15:b2: d5:5e:fa:22:66:54:42:3c:9b:ab:10:1a:59:e3:65: 1b:c4:ca:1d:8f:87:c2:ed:de:3a:26:0f:c5:96:3b: 80:b3:23:5f:92:c7:40:45:34:a1:98:fc:09:d4:41: 2b:a3:2d:ee:b8:34:82:e3:60:49:3c:e6:3b:46:92: 28:be:f9:c5:27:f8:d7:0b:c8:3e:9f:f2:68:cb:ee: 7e:cf:5d:18:ae:74:af:f8:4c:ae:94:a8:c5:a4:d9: 24:43:fc:bb:a1:03:72:31:7d:a5:e7:a2:06:d2:99: ea:a4:73:fa:a4:e4:ca:76:fb:db:bf:fd:c1:d6:6b: 30:23:1d:74:d3:ba:04:06:94:8e:c1:b7:2c:1b:ae: f8:17:ff:e0:bd:c8:8e:a3:8e:15:f7:f0:7e:b6:ee: fd:c1:39:96:3d:8a:db:5a:0d:f3:b2:6c:d6:5f:0b: 6f:c7:11:03:65:40:02:1b:f0:33:3a:d0:16:01:63: 6a:53:1d:2d:83:05:17:7f:23:79:ab:58:8e:f5:0d: b0:3f:67:cb:fb:bc:ff:89:13:d9:49:5a:7f:16:48: 4c:67:b3:cf:af:41:1f:b0:87:96:3d:10:18:29:19: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:45:FE:FB:21:2A:C8:85:0E:05:1D:05:32:3B:84:6E:91:D5:D9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 209.251.198.0-209.251.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d5:91:89:19:be:72:b9:74:42:bb:7e:24:40:59:bb:60:6b: 96:77:06:65:e8:53:8a:7e:6e:b6:d5:34:50:f6:6c:e1:30:43: e1:e6:82:39:19:70:06:b0:2e:77:3f:6f:8d:02:eb:3c:d7:74: 34:c8:1e:73:14:55:04:99:81:ae:a3:2f:6a:49:8f:be:b7:bd: 4a:2e:b7:07:b1:c0:7f:67:9b:90:54:9c:5c:4e:6d:aa:c8:fb: d9:1c:ad:f9:29:71:34:94:8f:18:17:71:0d:97:20:3e:a9:92: bd:ae:80:6a:52:11:e7:65:43:f9:97:77:80:00:95:cd:83:19: c5:bf:4c:2d:27:a7:0e:ae:29:bc:bd:9e:a1:ba:31:f6:fe:1e: 5c:d0:73:be:e2:97:a4:a3:3d:6a:61:de:33:d0:7f:bb:3d:92: 53:58:6f:b1:11:55:f0:1f:30:ac:1d:14:b5:fc:4c:72:da:ec: 2e:77:f8:6c:62:69:59:02:25:14:d4:8d:8c:f2:31:40:d5:b3: 03:d0:03:42:fe:1c:2e:e1:7c:fa:60:5e:6b:db:9c:86:b5:bb: 27:36:08:44:03:f4:86:b9:63:5c:a6:d0:1d:fb:08:51:1a:75: 56:51:de:33:fe:35:0b:48:4e:b3:15:3d:71:42:b6:c3:46:0f: c1:9f:78:19 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2j5V/1dfDYEEHrO7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk N2FlNTJhOWYtY2EwZS00MTYwLTgyNjItY2RkZWExMjg3OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYeIO2N2pslTIgF4m2G7gztvBs9idDXebCBP FbLVXvoiZlRCPJurEBpZ42UbxModj4fC7d46Jg/FljuAsyNfksdARTShmPwJ1EEr oy3uuDSC42BJPOY7RpIovvnFJ/jXC8g+n/Joy+5+z10YrnSv+EyulKjFpNkkQ/y7 oQNyMX2l56IG0pnqpHP6pOTKdvvbv/3B1mswIx1007oEBpSOwbcsG674F//gvciO o44V9/B+tu79wTmWPYrbWg3zsmzWXwtvxxEDZUACG/AzOtAWAWNqUx0tgwUXfyN5 q1iO9Q2wP2fL+7z/iRPZSVp/FkhMZ7PPr0EfsIeWPRAYKRkCxwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFI1F/vshKsiFDgUdBTI7hG6R1dmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNWM4MGEwOGMtZTQ5ZC0z M2Y0LWI2MTctNWFkYTVmMmFmODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHR+8YD BAXR+8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgdWRiRm+crl0Qrt+JEBZu2BrlncGZehTin5uttU0UPZs 4TBD4eaCORlwBrAudz9vjQLrPNd0NMgecxRVBJmBrqMvakmPvre9Si63B7HAf2eb kFScXE5tqsj72Ryt+SlxNJSPGBdxDZcgPqmSva6AalIR52VD+Zd3gACVzYMZxb9M LSenDq4pvL2eobox9v4eXNBzvuKXpKM9amHeM9B/uz2SU1hvsRFV8B8wrB0UtfxM ctrsLnf4bGJpWQIlFNSNjPIxQNWzA9ADQv4cLuF8+mBea9uchrW7JzYIRAP0hrlj XKbQHfsIURp1VlHeM/41C0hOsxU9cUK2w0YPwZ94GQ== -----END CERTIFICATE-----Generated at Wed May 13 16:12:56 2026 by rpki-client