$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json) Hash identifier: dkKcaSvheLAWsCpUIrktXMiaRSWBNp+FyK/nRCp3Ryg= Subject key identifier: CD:86:3E:5A:94:14:C8:82:11:86:CF:86:FD:67:E4:9E:03:23:AB:D1 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584DADAAD30194131A4C2D151B80 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 21803 IP address blocks: 209.140.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d3:01:94:13:1a:4c:2d:15:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=68d1ed4b-ee77-41f7-bb40-7cf92aa344dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:a4:70:c0:fb:3d:59:0a:69:8d:31:e7:e9: bf:8a:f1:01:0c:c9:3e:c0:4e:ab:38:a9:5a:4b:0e: 0d:3e:63:1c:10:fc:5a:c7:3d:5e:39:25:72:49:1d: eb:ed:c8:01:a7:89:df:c3:9a:73:b6:2b:ab:d6:88: 55:d6:c2:9f:a1:12:fc:fa:c1:f1:c7:f5:49:37:d0: fd:26:a9:df:99:41:e4:80:6d:d7:b9:93:f2:56:5a: 38:28:d2:48:16:b0:ce:98:18:fd:af:7c:39:47:2c: 82:76:84:97:e0:99:0c:43:c3:ef:a3:cf:31:46:74: 26:96:fc:f6:fe:fc:94:04:8e:12:0c:ec:77:b6:58: 14:14:8a:8f:ba:59:de:86:e8:c4:42:f2:e3:d5:3f: 4b:14:e4:b8:82:2f:87:0e:0d:78:16:8b:ae:dd:ae: bf:24:a3:e9:7b:67:6f:91:4d:e1:5e:9d:c0:e1:af: 4f:e2:ce:11:3b:e7:3a:56:56:c6:42:38:3d:c7:56: 3f:47:ff:6a:74:6d:a2:eb:f8:43:e7:aa:72:03:b4: 79:50:78:40:94:57:7f:52:63:79:ff:4f:b8:a0:2d: 8b:49:bf:9d:6b:53:07:f5:54:b1:a0:28:3e:0c:d8: a4:d9:97:ee:cd:92:e0:70:f6:28:b5:ae:58:66:4d: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:3E:5A:94:14:C8:82:11:86:CF:86:FD:67:E4:9E:03:23:AB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:11:c8:28:c7:71:ae:60:c9:81:be:da:40:18:76:a3:d3:23: 0c:6d:88:e4:26:bc:b7:0a:f4:4a:8f:1c:99:ba:29:26:05:ed: f7:ab:10:60:a1:44:05:42:ca:cb:f1:26:3c:6a:7d:a4:17:60: 30:52:1b:21:fe:28:55:b6:36:71:60:bf:fe:00:49:12:9a:01: 7d:bf:a2:bc:57:cf:54:fe:f3:c6:c0:64:cb:49:f5:b8:cd:7c: 71:5d:2c:4d:1b:ad:9a:aa:09:52:d1:0e:e0:f0:aa:ce:ab:49: fb:b5:21:b0:7d:ca:5f:48:20:74:83:c5:c7:2b:a9:fa:a4:fd: 89:b1:0f:a4:db:2e:cc:f9:7e:7d:9d:fc:2c:e5:5b:11:96:ee: 67:7e:d9:9e:93:fa:5a:3f:fd:56:7a:63:b1:e8:e0:d9:2d:9c: 1a:44:bd:86:99:ed:26:90:8f:22:db:5c:09:4d:98:aa:dd:1c: f4:55:46:83:ee:cb:e3:50:5a:42:3f:4b:6e:41:0e:71:58:b7: f0:66:dd:c8:8f:77:2b:2f:d1:8a:b4:cd:53:aa:05:db:f6:aa: b6:b4:26:d2:ba:fe:fa:09:55:3b:ab:39:a9:98:f2:99:62:4c: 08:15:99:ab:53:5d:7f:20:d9:3d:ea:b9:eb:0e:c1:76:15:6e: bf:e5:e5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtMBlBMaTC0VG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NjhkMWVkNGItZWU3Ny00MWY3LWJiNDAtN2NmOTJhYTM0NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5WkcMD7PVkKaY0x5+m/ivEBDMk+wE6rOKla Sw4NPmMcEPxaxz1eOSVySR3r7cgBp4nfw5pztiur1ohV1sKfoRL8+sHxx/VJN9D9 JqnfmUHkgG3XuZPyVlo4KNJIFrDOmBj9r3w5RyyCdoSX4JkMQ8Pvo88xRnQmlvz2 /vyUBI4SDOx3tlgUFIqPulnehujEQvLj1T9LFOS4gi+HDg14Fouu3a6/JKPpe2dv kU3hXp3A4a9P4s4RO+c6VlbGQjg9x1Y/R/9qdG2i6/hD56pyA7R5UHhAlFd/UmN5 /0+4oC2LSb+da1MH9VSxoCg+DNik2ZfuzZLgcPYota5YZk2yKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2GPlqUFMiCEYbPhv1n5J4DI6vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZGI1NzMzZGUtZDllZS0z MTVhLWI0ZWUtNDliYjQ3M2VlMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0YwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsRyCjHca5gyYG+2kAYdqPTIwxtiOQmvLcK9EqPHJm6KSYF7ferEGCh RAVCysvxJjxqfaQXYDBSGyH+KFW2NnFgv/4ASRKaAX2/orxXz1T+88bAZMtJ9bjN fHFdLE0brZqqCVLRDuDwqs6rSfu1IbB9yl9IIHSDxccrqfqk/YmxD6TbLsz5fn2d /CzlWxGW7md+2Z6T+lo//VZ6Y7Ho4NktnBpEvYaZ7SaQjyLbXAlNmKrdHPRVRoPu y+NQWkI/S25BDnFYt/Bm3ciPdysv0Yq0zVOqBdv2qra0JtK6/voJVTurOamY8pli TAgVmatTXX8g2T3quesOwXYVbr/l5VA= -----END CERTIFICATE-----Generated at Wed May 13 04:45:56 2026 by rpki-client