$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa File: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (raw, json) Hash identifier: 6W+Oiicp5gMoTzlkV4+8OjeNxLf4kk9i54HQQgyIXzc= Subject key identifier: C9:EB:47:1F:11:9B:59:81:E6:FB:C2:D7:AB:47:15:7A:EC:60:75:1C Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584DC6CAFFA0A540BBD2D2657C80 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 41458 IP address blocks: 162.210.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:ff:a0:a5:40:bb:d2:d2:65:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=80931603-95ae-46f0-9371-163e1b3d9bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:5b:96:8e:0a:08:1e:21:80:3f:a7:d4:95: cb:3a:e7:51:bc:21:65:ed:37:c3:2a:ab:f6:2d:ef: 82:6e:09:e0:14:d1:78:3a:9e:71:f6:8c:ab:b3:bf: 76:12:fb:f0:39:35:9b:ad:91:22:87:77:0e:6a:bb: 30:1a:e1:bd:f2:75:9c:59:4f:15:11:e7:77:20:07: ba:fb:49:51:46:68:08:ef:24:dc:1c:6d:f2:e4:bd: 09:36:e4:fa:63:44:43:f5:02:9b:66:fe:19:8f:19: 19:4a:e1:7c:90:16:dd:9d:de:0e:df:96:2d:54:0b: 02:f2:1e:66:96:b1:0c:c3:de:6d:c7:4f:4d:9c:29: 24:68:44:bd:e5:7e:b6:07:92:c7:fa:06:18:03:89: d5:dc:07:fa:d5:05:e2:2b:ff:1d:85:a5:d4:8f:f5: 5a:a7:34:8c:ab:62:30:a0:a0:5d:d0:dc:e7:0c:09: d8:be:4d:a4:16:2d:73:65:3c:a5:bd:0c:a7:58:c6: c1:cf:a8:90:5e:32:b5:f6:ed:e8:1d:19:22:50:fa: 36:85:30:d2:bc:89:34:5a:d0:67:19:88:d4:54:0e: a8:60:ee:70:29:af:8a:b8:65:e8:b4:34:aa:ec:67: 42:8d:06:9e:ce:b2:e0:81:6e:7c:17:ee:6d:5b:a9: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EB:47:1F:11:9B:59:81:E6:FB:C2:D7:AB:47:15:7A:EC:60:75:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: 162.210.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:19:99:3f:9f:52:a4:03:54:e6:25:e3:31:8e:f6:4b:84:11: b9:c1:de:44:a2:15:b9:20:78:0e:1a:aa:32:5f:59:d4:75:15: b9:64:b7:d0:66:80:09:ea:76:d9:4b:97:b3:65:89:c6:26:0c: ba:84:ac:e6:58:18:b0:15:69:09:27:3c:ea:3e:04:d1:2f:b7: f7:fd:22:3c:ab:0b:c8:90:61:f5:e2:29:96:28:6b:21:d9:cc: 18:b6:a1:ea:bf:f0:5b:36:55:3e:68:0a:50:c3:0d:54:44:b3: 8f:20:80:db:83:9a:35:db:7d:de:e3:02:2a:d4:de:18:d6:b7: e0:0e:5d:19:b9:df:7c:81:c4:c5:83:24:30:7a:b0:26:fb:98: 03:6d:f6:5b:71:59:54:46:aa:7e:d5:17:04:f0:e1:47:e1:69: bc:d3:2e:75:77:85:5d:2e:1a:db:63:46:bf:81:ef:ba:65:e5: 37:2a:49:42:46:6e:fa:30:cd:d6:56:a5:d6:98:cf:e6:75:38: 15:5b:b3:76:cd:64:0e:a1:22:7c:e4:e5:81:25:6b:70:27:c0: 05:2f:1f:ce:bc:0a:1c:c9:fe:cf:b0:bf:81:94:3f:2e:17:35: a9:c9:96:6e:56:46:d3:49:55:9c:35:19:ee:1d:08:88:64:72: 3a:7b:29:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyv+gpUC70tJlfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ODA5MzE2MDMtOTVhZS00NmYwLTkzNzEtMTYzZTFiM2Q5YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCtblo4KCB4hgD+n1JXLOudRvCFl7TfDKqv2 Le+CbgngFNF4Op5x9oyrs792EvvwOTWbrZEih3cOarswGuG98nWcWU8VEed3IAe6 +0lRRmgI7yTcHG3y5L0JNuT6Y0RD9QKbZv4ZjxkZSuF8kBbdnd4O35YtVAsC8h5m lrEMw95tx09NnCkkaES95X62B5LH+gYYA4nV3Af61QXiK/8dhaXUj/VapzSMq2Iw oKBd0NznDAnYvk2kFi1zZTylvQynWMbBz6iQXjK19u3oHRkiUPo2hTDSvIk0WtBn GYjUVA6oYO5wKa+KuGXotDSq7GdCjQaezrLggW58F+5tW6mALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnrRx8Rm1mB5vvC16tHFXrsYHUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvOTdiOGM2NDAtZmIyYy0z NjllLTkwZDctOTBhZGUxMTQyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgZmT+fUqQDVOYl4zGO9kuEEbnB3kSiFbkgeA4aqjJfWdR1Fblkt9Bm gAnqdtlLl7NlicYmDLqErOZYGLAVaQknPOo+BNEvt/f9IjyrC8iQYfXiKZYoayHZ zBi2oeq/8Fs2VT5oClDDDVREs48ggNuDmjXbfd7jAirU3hjWt+AOXRm533yBxMWD JDB6sCb7mANt9ltxWVRGqn7VFwTw4UfhabzTLnV3hV0uGttjRr+B77pl5TcqSUJG bvowzdZWpdaYz+Z1OBVbs3bNZA6hInzk5YEla3AnwAUvH868ChzJ/s+wv4GUPy4X NanJlm5WRtNJVZw1Ge4dCIhkcjp7KTE= -----END CERTIFICATE-----Generated at Wed May 13 14:05:31 2026 by rpki-client