$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa File: dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa (raw, json) Hash identifier: HcPKJdKRabr2O0nXkzxLfj55YBm0NsX9BRY0BNf48MQ= Subject key identifier: 33:A8:A8:70:69:EF:41:70:55:76:70:D8:E9:53:AD:A8:55:DF:34:AA Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584D98BAB609C656DC801BCFAC58 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 214022 IP address blocks: 208.70.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b6:09:c6:56:dc:80:1b:cf:ac:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=2ed15dc8-1234-4566-a5ba-14ea2f344e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:35:c0:fd:7b:2c:cb:e6:f1:a9:38:c7:a9: ad:01:09:01:4f:10:ef:a9:84:9e:29:53:db:f3:14: 71:88:1e:b9:6a:12:6b:84:64:a3:87:5e:85:ba:25: c7:ed:21:fa:88:a0:38:96:5e:94:f9:3f:81:f2:0d: 75:10:03:91:cd:77:08:0b:88:d6:97:b3:54:7f:e7: 0a:a4:a7:d1:5c:72:8a:16:bd:dd:b7:02:2e:e7:ac: 98:47:74:ed:b5:90:88:19:0a:d5:46:cb:1b:6d:25: 6e:c1:4a:52:61:f9:69:75:bc:d4:8c:26:0e:85:b9: 2f:09:4e:74:4c:c3:03:ae:ad:2e:ca:84:01:5d:42: 2c:f2:7a:2b:25:65:0e:1e:c1:95:6e:30:e6:a2:85: cf:93:6c:f4:a2:ab:58:43:52:57:c4:9c:94:c5:9b: 62:24:b1:7e:d3:a3:a6:5c:c8:f7:86:72:1a:c9:74: a9:bc:5c:23:a2:34:b2:55:d2:a8:0a:3d:8c:b4:15: 1d:d4:21:a0:06:13:3a:26:6a:91:43:23:e1:60:6a: b0:2a:75:ad:78:63:a5:53:71:86:9f:7f:2a:ab:f5: 95:13:60:c8:71:09:eb:7a:67:36:86:76:7d:cb:db: 3f:8e:35:10:16:80:08:83:bb:ca:99:23:30:a1:4e: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A8:A8:70:69:EF:41:70:55:76:70:D8:E9:53:AD:A8:55:DF:34:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f6:87:f0:11:45:c2:e4:21:47:a0:81:14:cb:8e:9c:89:b3: 32:eb:0d:1c:74:28:dd:08:3f:25:ad:91:72:71:58:4c:64:98: 09:e9:cc:52:51:e8:9c:34:38:43:10:2d:63:d2:f0:31:83:30: 5a:1a:c5:b8:c5:3f:72:f8:79:da:2d:c5:75:41:25:55:2d:36: ac:21:3b:0d:32:59:a0:25:0a:e3:5e:81:37:a4:93:93:4e:86: ce:7e:0c:0c:a6:f1:b2:11:3e:98:ff:d4:b3:f7:14:0b:37:b6: 75:a6:4d:10:85:b4:df:7a:bb:d2:1c:4f:39:db:1f:b9:d8:f2: 13:85:5c:29:d0:9b:77:76:69:9d:be:1c:4b:32:5a:b6:f7:77: 53:ea:62:7a:2a:16:9b:90:c8:f2:c1:7a:23:1b:e0:5a:8d:77: ec:62:7f:bd:da:93:99:0e:40:fb:c5:51:0f:93:c5:a0:fd:6b: f5:64:fa:4a:c5:8a:6c:27:41:23:0d:e7:b3:58:ab:58:7c:53: 2c:82:88:f7:b5:ad:30:1e:2c:69:a9:65:1f:cd:03:50:20:d5: e5:58:fd:38:e8:8f:00:18:8c:9e:29:59:e2:50:a1:b0:24:d0: 4b:39:0d:37:70:15:07:4c:e4:21:db:53:17:d6:a3:4d:2c:97: 33:77:10:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurYJxlbcgBvPrFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MmVkMTVkYzgtMTIzNC00NTY2LWE1YmEtMTRlYTJmMzQ0ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7c1wP17LMvm8ak4x6mtAQkBTxDvqYSeKVPb 8xRxiB65ahJrhGSjh16FuiXH7SH6iKA4ll6U+T+B8g11EAORzXcIC4jWl7NUf+cK pKfRXHKKFr3dtwIu56yYR3TttZCIGQrVRssbbSVuwUpSYflpdbzUjCYOhbkvCU50 TMMDrq0uyoQBXUIs8norJWUOHsGVbjDmooXPk2z0oqtYQ1JXxJyUxZtiJLF+06Om XMj3hnIayXSpvFwjojSyVdKoCj2MtBUd1CGgBhM6JmqRQyPhYGqwKnWteGOlU3GG n38qq/WVE2DIcQnremc2hnZ9y9s/jjUQFoAIg7vKmSMwoU4l7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOoqHBp70FwVXZw2OlTrahV3zSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvZGQ1M2I5ZjgtNjliNy0z NGY4LWI4NmUtYWY2NjBhNTMwZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf2h/ARRcLkIUeggRTLjpyJszLrDRx0KN0IPyWtkXJxWExkmAnpzFJR 6Jw0OEMQLWPS8DGDMFoaxbjFP3L4edotxXVBJVUtNqwhOw0yWaAlCuNegTekk5NO hs5+DAym8bIRPpj/1LP3FAs3tnWmTRCFtN96u9IcTznbH7nY8hOFXCnQm3d2aZ2+ HEsyWrb3d1PqYnoqFpuQyPLBeiMb4FqNd+xif73ak5kOQPvFUQ+TxaD9a/Vk+krF imwnQSMN57NYq1h8UyyCiPe1rTAeLGmpZR/NA1Ag1eVY/TjojwAYjJ4pWeJQobAk 0Es5DTdwFQdM5CHbUxfWo00slzN3EEk= -----END CERTIFICATE-----Generated at Tue May 12 21:37:08 2026 by rpki-client