$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json) Hash identifier: x7JvefQwupJ1dmohFnuVfuchFVOhhrMSM0eJQQZZwxo= Subject key identifier: F1:35:6D:B1:0A:0A:80:E6:2E:51:0C:39:0E:FB:AF:C1:BD:A0:0A:C7 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584DB0758DC9518FB1E0F1301480 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 21947 IP address blocks: 204.11.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:8d:c9:51:8f:b1:e0:f1:30:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=60cad16d-4c99-4dce-8ac8-54982f3d9315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:d9:da:81:1f:16:63:1a:1d:25:76:4d:c5: e8:29:38:56:a0:05:c6:09:53:57:64:7e:5a:21:4a: a7:6e:85:02:dd:e1:0a:9b:6d:8e:82:c1:b3:cd:62: d9:b5:aa:38:11:e5:c2:7e:f7:dd:63:e8:45:a6:dd: 1c:82:82:0a:c3:d9:58:00:98:83:9e:a4:bf:7f:5c: 29:83:7f:da:d2:c4:7b:28:32:a9:dd:2b:a1:1f:4b: d7:29:f3:6d:14:56:09:d5:e1:ab:f1:42:2a:2f:e2: 65:67:d5:0d:03:fb:cf:32:65:6e:2f:2c:5c:63:f3: aa:6b:fb:b6:6e:00:d1:90:26:44:5d:fe:fe:56:64: 6d:e0:4f:55:a0:90:1e:dc:47:d1:6e:27:cd:35:bf: 3f:83:ce:e7:73:68:60:a3:1a:36:fc:45:c9:24:eb: 32:1f:ee:2d:48:2c:03:47:ef:56:26:eb:e4:a2:23: 80:45:d3:5e:4c:e1:86:ad:06:c8:15:4f:da:f7:b8: 98:09:52:fd:35:44:ff:b4:23:41:5f:25:a9:4b:57: 8c:ad:8d:fd:2e:da:1e:b3:19:c9:5c:9e:e1:0a:6c: b3:bf:56:19:30:ba:11:25:20:df:cd:03:c1:54:54: 6d:47:67:a2:fe:b1:e5:5b:74:19:ea:e7:71:61:28: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:35:6D:B1:0A:0A:80:E6:2E:51:0C:39:0E:FB:AF:C1:BD:A0:0A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b5:9e:e2:3f:a5:82:ba:56:cd:55:39:43:56:e8:5e:0c:05: 04:53:f9:9f:00:de:22:30:93:72:50:7f:f1:f5:2f:14:63:b3: 50:f1:a2:38:bf:f0:13:31:1b:d2:4d:39:0a:89:45:ed:53:b8: 6d:70:3d:eb:1b:d5:08:05:10:6a:91:2c:d4:d6:46:7f:5c:cf: c4:0c:09:87:10:80:d3:b0:96:a3:f7:a9:5d:d7:77:39:b5:7f: aa:ce:7e:66:d4:7e:e9:fa:ba:5c:0c:56:15:32:6b:b4:5a:e4: be:f6:2e:f7:89:08:b4:a5:1b:09:e5:71:d3:5a:5b:6a:ca:0e: 1e:39:48:3c:72:42:ec:d6:12:df:f2:76:c7:2d:e4:e4:bc:97: 32:72:46:da:d6:ce:57:87:65:46:6f:a5:20:c6:d7:27:b6:6c: 5e:d4:57:8c:19:4f:73:75:86:46:25:a1:5b:3c:ca:ba:09:0f: ba:1d:6c:47:6a:5b:20:2c:76:d5:6c:9f:ba:d8:be:56:4a:23: c1:fb:55:b0:f6:8d:e8:49:ae:49:45:30:4c:51:18:ad:27:a2: 28:19:01:b3:53:46:f4:08:12:f7:21:a0:54:cd:c9:c8:82:29: 16:b0:a0:c5:df:49:bc:c5:d4:a6:d8:e8:c5:b7:e7:74:da:87: a1:5b:24:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdY3JUY+x4PEwFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk NjBjYWQxNmQtNGM5OS00ZGNlLThhYzgtNTQ5ODJmM2Q5MzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpnZ2oEfFmMaHSV2TcXoKThWoAXGCVNXZH5a IUqnboUC3eEKm22OgsGzzWLZtao4EeXCfvfdY+hFpt0cgoIKw9lYAJiDnqS/f1wp g3/a0sR7KDKp3SuhH0vXKfNtFFYJ1eGr8UIqL+JlZ9UNA/vPMmVuLyxcY/Oqa/u2 bgDRkCZEXf7+VmRt4E9VoJAe3EfRbifNNb8/g87nc2hgoxo2/EXJJOsyH+4tSCwD R+9WJuvkoiOARdNeTOGGrQbIFU/a97iYCVL9NUT/tCNBXyWpS1eMrY39LtoesxnJ XJ7hCmyzv1YZMLoRJSDfzQPBVFRtR2ei/rHlW3QZ6udxYShcHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE1bbEKCoDmLlEMOQ77r8G9oArHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYWFmMWM0NDMtZmU4ZS0z OTdhLTlhYmItOTc0ODZjNjg1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK1nuI/pYK6Vs1VOUNW6F4MBQRT+Z8A3iIwk3JQf/H1LxRjs1Dxoji/ 8BMxG9JNOQqJRe1TuG1wPesb1QgFEGqRLNTWRn9cz8QMCYcQgNOwlqP3qV3Xdzm1 f6rOfmbUfun6ulwMVhUya7Ra5L72LveJCLSlGwnlcdNaW2rKDh45SDxyQuzWEt/y dsct5OS8lzJyRtrWzleHZUZvpSDG1ye2bF7UV4wZT3N1hkYloVs8yroJD7odbEdq WyAsdtVsn7rYvlZKI8H7VbD2jehJrklFMExRGK0noigZAbNTRvQIEvchoFTNyciC KRawoMXfSbzF1KbY6MW353Tah6FbJEg= -----END CERTIFICATE-----Generated at Wed May 13 04:06:49 2026 by rpki-client