$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa File: bdaab757-919c-3eca-9fcf-6149df229ffe.roa (raw, json) Hash identifier: rqH1r1LhQNaf+S78VItvyt2iM2WCWTdyJ6eHncMD+dA= Subject key identifier: 9A:DB:F2:17:0D:F4:20:EF:03:08:75:C8:34:60:58:38:80:23:03:FD Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584DA2801382F6AA4A89340553C0 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 40097 IP address blocks: 209.137.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:13:82:f6:aa:4a:89:34:05:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=ba00942d-81a7-446b-970b-966e93f42514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ff:57:c0:55:f5:e6:1d:bb:12:19:92:8a:dd: ba:1b:18:c8:e1:11:b8:66:bc:61:86:65:20:ef:3f: 5d:87:57:5c:7b:9c:db:75:c4:8f:a3:ae:f5:e4:ce: be:9d:93:42:37:5f:5a:b2:6a:f3:b2:3f:07:d5:94: 2a:0e:bb:2d:63:d4:32:c2:df:d7:33:31:6c:39:ae: 11:30:d4:fc:37:f8:34:4e:e7:02:43:c4:68:61:81: 5c:d0:53:b3:6c:59:38:8c:e6:a2:90:b7:2a:b9:07: 11:63:e5:8b:7e:0a:47:c9:f6:20:98:23:5e:6a:2f: a0:df:da:fd:19:af:29:5c:1f:e6:ae:2c:07:ae:7a: 74:67:0c:f8:5d:76:6f:a5:57:20:57:43:ec:b4:1d: b8:17:67:fa:88:a8:44:25:61:b4:81:33:d5:28:2c: d3:04:9b:1e:4d:be:3e:67:a8:17:19:ec:6f:9e:54: f0:17:6a:e2:25:cf:96:44:38:38:10:1d:8d:d4:0f: 04:9f:4c:90:af:91:5c:cd:83:7c:af:1e:fc:c6:08: 5d:76:7d:d0:c8:17:ce:fb:20:e4:67:a7:23:1a:c7: 68:fb:28:ae:96:3e:43:ab:da:2a:8e:e5:3d:4e:dd: 57:a8:93:fb:78:bc:a5:85:d3:19:2a:d0:ac:c0:cc: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:F2:17:0D:F4:20:EF:03:08:75:C8:34:60:58:38:80:23:03:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c7:b8:1a:39:59:37:96:02:af:0a:43:42:1d:e7:0f:fa:ba: 81:55:a6:4f:93:4a:58:28:e1:d7:59:04:1a:33:70:3a:53:d4: a0:6c:8f:6d:42:5e:56:05:ac:18:bd:0d:08:fa:64:1f:e9:18: f0:5a:09:b0:1d:2e:b4:e1:85:f1:2c:52:e4:8f:89:91:ad:3d: 01:14:20:51:e6:60:c2:a1:da:b3:c9:93:9e:51:e3:3e:0b:77: 9a:bf:a2:8c:d9:c3:de:7c:54:f8:3e:c7:dd:b1:da:12:bd:9e: c9:09:d3:63:c2:9d:24:a3:95:f9:ca:39:19:da:85:11:76:3f: ff:3f:dc:4d:0e:fc:4e:be:e1:ce:01:10:d4:ed:56:fc:07:c4: 8b:79:56:7e:c5:cf:1b:28:39:76:9e:60:4a:57:29:e7:c5:15: bd:ea:70:95:93:0f:27:ab:d5:9a:09:c4:02:f4:4b:f7:18:fe: 31:b9:28:52:e1:e9:e8:59:47:f7:44:6f:75:db:53:b2:88:a2: 5e:34:d9:87:a4:cb:27:aa:a6:c1:6a:ac:4c:01:64:a2:fc:d6: 6b:f9:67:bc:c9:e1:bf:b6:30:83:e1:91:b0:18:5a:81:63:11: cd:8f:38:7c:22:93:c0:13:33:cc:38:0e:44:4c:9f:10:37:b9: 2a:8a:64:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBOC9qpKiTQFU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk YmEwMDk0MmQtODFhNy00NDZiLTk3MGItOTY2ZTkzZjQyNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf9XwFX15h27EhmSit26GxjI4RG4ZrxhhmUg 7z9dh1dce5zbdcSPo6715M6+nZNCN19asmrzsj8H1ZQqDrstY9Qywt/XMzFsOa4R MNT8N/g0TucCQ8RoYYFc0FOzbFk4jOaikLcquQcRY+WLfgpHyfYgmCNeai+g39r9 Ga8pXB/mriwHrnp0Zwz4XXZvpVcgV0PstB24F2f6iKhEJWG0gTPVKCzTBJseTb4+ Z6gXGexvnlTwF2riJc+WRDg4EB2N1A8En0yQr5FczYN8rx78xghddn3QyBfO+yDk Z6cjGsdo+yiulj5Dq9oqjuU9Tt1XqJP7eLylhdMZKtCswMw/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrb8hcN9CDvAwh1yDRgWDiAIwP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmRhYWI3NTctOTE5Yy0z ZWNhLTlmY2YtNjE0OWRmMjI5ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnHuBo5WTeWAq8KQ0Id5w/6uoFVpk+TSlgo4ddZBBozcDpT1KBsj21C XlYFrBi9DQj6ZB/pGPBaCbAdLrThhfEsUuSPiZGtPQEUIFHmYMKh2rPJk55R4z4L d5q/oozZw958VPg+x92x2hK9nskJ02PCnSSjlfnKORnahRF2P/8/3E0O/E6+4c4B ENTtVvwHxIt5Vn7FzxsoOXaeYEpXKefFFb3qcJWTDyer1ZoJxAL0S/cY/jG5KFLh 6ehZR/dEb3XbU7KIol402YekyyeqpsFqrEwBZKL81mv5Z7zJ4b+2MIPhkbAYWoFj Ec2POHwik8ATM8w4DkRMnxA3uSqKZG4= -----END CERTIFICATE-----Generated at Wed May 13 03:44:28 2026 by rpki-client