$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json) Hash identifier: 1lB0uRNulhPZb6J2XFyRSj9klr5Q2x2a0dW4NhS3xmU= Subject key identifier: C9:15:BC:47:95:D0:D1:FC:AD:2E:77:41:9F:1E:AA:90:C7:30:1E:00 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584DAC45809768F797D476847D00 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 23470 IP address blocks: 209.222.100.0/24 maxlen: 24 209.222.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:80:97:68:f7:97:d4:76:84:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=d3d48c06-6452-4d9d-906f-0d49535eaea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:a3:91:20:ba:44:65:13:42:58:a4:7a:69: 06:57:3e:21:40:ea:05:5f:5b:f7:2c:54:7c:74:8a: 71:b6:5e:ec:ec:c5:fd:d7:f8:7d:c7:dc:58:b5:40: ad:57:d9:7f:63:c5:66:4b:18:e5:72:12:38:ba:f9: 47:14:f4:13:b9:2e:56:ae:32:c8:3f:ad:13:a0:87: 35:be:07:50:be:33:54:99:32:db:33:b1:70:90:fe: f8:c8:92:fe:6e:e3:2e:56:d3:d1:04:72:f8:25:b6: 47:01:1d:99:87:9f:46:d5:99:22:af:2d:ab:f2:6e: 17:9a:bc:8f:ec:50:07:0d:9b:9f:c1:62:fe:0d:88: 8b:f9:f0:05:8e:4c:cb:58:b7:40:65:e4:19:10:c4: 18:f0:41:e8:ae:7c:ba:27:6a:b0:7d:96:7d:e5:6c: 77:63:eb:6a:ae:3f:62:5d:7c:89:7f:f2:25:e4:2c: 9a:c6:36:1a:2b:e0:bb:28:a4:13:d2:f4:c3:bf:26: e1:1c:26:b7:57:7f:69:91:ea:e2:47:ea:9d:2b:b4: 1f:bf:f9:eb:7f:f7:19:17:16:6c:2e:96:ae:03:71: 19:36:99:a0:1d:a0:43:c3:39:6c:28:8c:7e:8e:5e: 41:1a:01:70:84:db:18:0f:08:8c:97:01:1b:b8:9c: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:BC:47:95:D0:D1:FC:AD:2E:77:41:9F:1E:AA:90:C7:30:1E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.100.0/24 209.222.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a8:13:2e:cf:15:8d:73:33:c6:4e:29:bb:cb:33:0b:f7:8a: 8f:8b:b5:b0:43:08:30:d3:45:32:55:71:ff:bc:53:8e:8e:9a: 2a:66:2c:98:f5:52:0a:fc:7b:dc:3c:c9:5f:e9:4d:c3:c6:0b: 40:b7:ca:c3:29:b5:6f:92:19:5f:08:3d:9b:83:12:1b:93:d8: d2:de:4b:28:a1:39:5a:e2:ec:86:4a:b6:cf:f7:38:13:ae:23: 10:c0:8a:09:e7:f4:46:d4:f1:6e:75:17:f0:dc:4a:d9:02:31: 6a:ad:62:e3:c8:09:2c:28:9c:29:37:b8:9d:a5:eb:7b:e2:8a: 8a:67:8f:0d:2e:05:e1:c3:09:b4:7b:5e:08:54:fb:b7:1f:43: 27:fe:21:cb:e5:c5:c0:49:92:51:90:89:46:d0:39:ef:c3:1c: 9c:73:f1:de:12:db:25:fe:5f:6c:54:9d:7d:ad:61:ec:cf:f9: 37:8a:90:c2:82:f7:6c:24:81:e4:6d:82:1b:77:aa:fc:b7:eb: 34:22:76:f4:05:58:d4:f1:2b:94:ca:0a:0a:8a:9a:e1:c2:b8: 14:72:1b:92:c8:3b:03:98:5a:3f:61:f0:9e:cc:70:ef:fe:91: 7d:f2:22:0e:3d:3f:d8:ee:ea:f2:8b:04:1f:61:1f:51:27:3c: 73:8f:7f:7d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2sRYCXaPeX1HaEfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDNkNDhjMDYtNjQ1Mi00ZDlkLTkwNmYtMGQ0OTUzNWVhZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/6jkSC6RGUTQlikemkGVz4hQOoFX1v3LFR8 dIpxtl7s7MX91/h9x9xYtUCtV9l/Y8VmSxjlchI4uvlHFPQTuS5WrjLIP60ToIc1 vgdQvjNUmTLbM7FwkP74yJL+buMuVtPRBHL4JbZHAR2Zh59G1Zkiry2r8m4XmryP 7FAHDZufwWL+DYiL+fAFjkzLWLdAZeQZEMQY8EHorny6J2qwfZZ95Wx3Y+tqrj9i XXyJf/Il5CyaxjYaK+C7KKQT0vTDvybhHCa3V39pkeriR+qdK7Qfv/nrf/cZFxZs LpauA3EZNpmgHaBDwzlsKIx+jl5BGgFwhNsYDwiMlwEbuJw9MQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMkVvEeV0NH8rS53QZ8eqpDHMB4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDFmMTZmMjEtMjEyMy0z NWUwLTllODctOTkxNGYwYjRkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0d5kAwQA 0d5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGWoEy7PFY1zM8ZOKbvLMwv3io+LtbBDCDDTRTJVcf+8U46O mipmLJj1Ugr8e9w8yV/pTcPGC0C3ysMptW+SGV8IPZuDEhuT2NLeSyihOVri7IZK ts/3OBOuIxDAignn9EbU8W51F/DcStkCMWqtYuPICSwonCk3uJ2l63viiopnjw0u BeHDCbR7XghU+7cfQyf+IcvlxcBJklGQiUbQOe/DHJxz8d4S2yX+X2xUnX2tYezP +TeKkMKC92wkgeRtght3qvy36zQidvQFWNTxK5TKCgqKmuHCuBRyG5LIOwOYWj9h 8J7McO/+kX3yIg49P9ju6vKLBB9hH1EnPHOPf30= -----END CERTIFICATE-----Generated at Wed May 13 16:45:12 2026 by rpki-client