$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa File: 0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa (raw, json) Hash identifier: +RXdPOOcHDccCTbaPVib/f8YS0D2tyTgSGQ7nSJDh1A= Subject key identifier: E0:5A:91:D0:8D:0F:CC:73:04:CA:A0:A1:55:3D:67:6E:D2:A0:C1:34 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584DC6CB0A2284B907B5C53C2DE0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 46450 IP address blocks: 173.205.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:0a:22:84:b9:07:b5:c5:3c:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=23798f09-0815-4d6c-ab0b-a0365fbc5c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:50:bf:08:46:45:eb:7d:2d:81:67:47:1d: aa:3d:2b:76:34:1c:92:c2:b4:f0:06:bc:68:9e:ca: 30:82:a4:4e:56:f6:ad:66:e8:83:c6:f0:73:10:69: ae:57:63:f9:3b:6e:72:a0:05:49:cb:e4:a6:e4:ce: f1:3f:62:86:1d:20:b0:75:10:72:61:7e:62:fa:11: 0b:e3:93:74:5c:10:bc:37:0d:19:94:15:d9:b9:3d: 07:e1:00:8d:be:f3:16:3b:a4:08:b2:86:d1:94:18: e7:f1:e6:ec:9b:19:52:f8:52:be:aa:45:b5:cb:23: e7:da:b6:09:4c:21:cf:97:ca:95:79:92:53:0d:50: f7:d3:ed:b8:f1:4a:6b:ac:c2:3b:78:a4:37:70:ca: b5:3c:f6:cd:2f:6d:b0:bc:79:a7:91:2c:c3:fa:4b: d5:8e:c7:ff:ad:e3:eb:63:23:52:bc:99:b7:31:51: 86:5c:e7:63:8e:6c:8a:78:4b:36:e2:08:ad:58:a6: c1:34:20:5b:4c:20:50:6f:8c:9b:d7:8f:b4:ed:19: b2:d0:49:a3:60:38:9b:7d:53:69:13:29:2a:c5:57: d8:54:64:a6:a4:af:64:a4:92:5d:c1:06:77:b4:b5: d3:e9:8b:3c:71:8d:53:4c:ab:a6:3d:eb:14:b8:ec: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5A:91:D0:8D:0F:CC:73:04:CA:A0:A1:55:3D:67:6E:D2:A0:C1:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 173.205.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0c:00:42:ce:3c:8d:f6:d7:55:de:a9:90:05:96:85:06:ae: 7c:92:7f:27:9d:2a:d5:9d:e9:87:24:f8:7d:4f:dc:4a:a6:67: 9b:ea:67:f0:53:b8:92:c6:99:be:1a:a1:c1:6c:85:9d:83:75: ac:52:6b:f5:f2:fa:6b:9b:18:17:8a:4c:11:81:d0:06:2e:ae: 8e:5b:3e:ea:ff:8b:10:ce:2f:5e:31:de:e6:cf:a2:43:b3:4c: d4:0a:dd:e5:47:20:6c:69:cf:2c:18:b6:4c:18:56:6f:cb:23: 83:23:ed:e4:f9:6a:b7:4e:50:57:d5:4c:40:8e:3b:f7:ab:fb: 9e:80:dd:d5:65:c5:3c:12:52:a6:07:92:3b:71:0f:92:d2:0b: fe:4b:5f:d5:c0:41:64:cf:79:97:64:e5:e9:66:0b:41:9e:81: a7:66:f1:0c:8e:65:2e:a2:9c:e9:68:44:f8:e5:33:9a:9b:2f: 7f:a4:9e:bc:24:aa:8b:dc:4c:9b:16:5e:9a:0d:c9:f1:d0:42: 67:04:d0:a9:d1:a9:6d:dc:be:07:e4:4e:08:75:52:05:c5:d6: 39:0d:e1:b5:0c:2c:b1:80:17:19:93:12:a3:f0:1f:ff:af:8a: 34:21:96:12:98:9c:2c:58:7f:ef:84:02:71:74:40:51:05:d4: f8:68:35:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywoihLkHtcU8LeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk MjM3OThmMDktMDgxNS00ZDZjLWFiMGItYTAzNjVmYmM1YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaVQvwhGRet9LYFnRx2qPSt2NBySwrTwBrxo nsowgqROVvatZuiDxvBzEGmuV2P5O25yoAVJy+Sm5M7xP2KGHSCwdRByYX5i+hEL 45N0XBC8Nw0ZlBXZuT0H4QCNvvMWO6QIsobRlBjn8ebsmxlS+FK+qkW1yyPn2rYJ TCHPl8qVeZJTDVD30+248UprrMI7eKQ3cMq1PPbNL22wvHmnkSzD+kvVjsf/rePr YyNSvJm3MVGGXOdjjmyKeEs24gitWKbBNCBbTCBQb4yb14+07Rmy0EmjYDibfVNp EykqxVfYVGSmpK9kpJJdwQZ3tLXT6Ys8cY1TTKumPesUuOxuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBakdCND8xzBMqgoVU9Z27SoME0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDIyNmVjZGYtNzRhYi0z ZDE3LTlhMzUtM2U4YmRkMzAxZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrc3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAMAELOPI3211XeqZAFloUGrnySfyedKtWd6Yck+H1P3EqmZ5vqZ/BT uJLGmb4aocFshZ2DdaxSa/Xy+mubGBeKTBGB0AYuro5bPur/ixDOL14x3ubPokOz TNQK3eVHIGxpzywYtkwYVm/LI4Mj7eT5ardOUFfVTECOO/er+56A3dVlxTwSUqYH kjtxD5LSC/5LX9XAQWTPeZdk5elmC0Gegadm8QyOZS6inOloRPjlM5qbL3+knrwk qovcTJsWXpoNyfHQQmcE0KnRqW3cvgfkTgh1UgXF1jkN4bUMLLGAFxmTEqPwH/+v ijQhlhKYnCxYf++EAnF0QFEF1PhoNT0= -----END CERTIFICATE-----Generated at Wed May 13 05:27:15 2026 by rpki-client