$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa File: 541632ed-4124-362f-8edd-c6a63bea2883.roa (raw, json) Hash identifier: gKtiLbr/Shncvk0L+O78jur41Luk5hpmoLZM1Pp101o= Subject key identifier: 48:1E:E5:30:95:0D:27:BD:B7:86:19:BD:86:4E:18:D5:E6:59:D1:42 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584DC6CAFE1570A8AB1F9A72F300 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 46841 IP address blocks: 209.222.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fe:15:70:a8:ab:1f:9a:72:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=108ef7b2-4a37-4ad1-9ab1-9518a6041df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:d0:90:77:8e:2b:e2:c2:43:51:d6:8b:89: b8:da:6f:dc:e8:12:1a:fd:0c:48:da:c3:3c:73:30: ae:d2:f9:fd:31:3e:65:79:4b:af:aa:41:07:e3:8a: bf:b8:56:45:a7:61:20:99:c9:c4:55:40:69:c8:72: bc:fc:bb:b1:31:95:34:a3:6f:24:71:81:d0:d4:5f: 6b:f6:b1:26:13:33:98:f3:64:07:e1:6f:12:8d:e8: b9:4b:e8:d6:fe:83:e1:40:59:b3:36:56:16:a5:3a: 1f:a0:e9:06:14:59:e3:03:de:a1:82:64:b7:46:d4: b9:80:05:66:6c:ec:54:de:34:38:3d:ec:88:da:57: 95:fc:a0:43:ec:f3:3d:f3:e0:79:41:60:bc:8a:40: 86:fd:c6:14:e5:fa:69:1c:5a:0b:16:7c:f7:92:d0: 58:f7:43:fe:4d:93:a2:c0:43:75:f9:fa:37:bc:05: db:31:cc:1d:bc:75:c1:38:64:cd:bf:d7:17:b0:f7: 2e:2b:b4:2f:3b:34:51:9f:ca:da:d1:f1:78:05:e6: fe:3b:36:29:de:ba:92:87:43:93:49:0b:87:cb:61: 44:a9:13:34:52:c0:f2:d9:68:3e:c8:61:a3:b8:33: b9:61:85:43:e7:f9:5c:56:9f:94:a2:7f:0f:05:24: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:E5:30:95:0D:27:BD:B7:86:19:BD:86:4E:18:D5:E6:59:D1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:21:ca:ca:00:b9:69:33:f6:04:80:2d:d2:f9:cd:da:5b:87: 09:0e:fa:1a:08:95:b5:87:bc:a0:95:4f:5d:0d:34:15:1b:18: 23:91:c8:06:bc:c0:00:bd:76:7f:aa:90:92:74:87:4c:4d:ba: 6f:04:b0:77:38:67:85:db:f3:c0:7f:c3:50:a3:db:73:1f:e9: c4:da:ce:24:bc:83:86:b3:f3:01:90:1e:d7:c5:e3:65:4c:0b: 03:ec:f0:53:f0:89:94:3b:a4:9b:b8:62:90:05:98:e2:a5:57: e6:a1:f2:86:1a:e4:24:da:0b:90:93:9a:58:13:f8:5b:dc:6d: c2:6c:4c:8f:0e:37:e8:fe:fb:5a:69:38:3c:08:9c:90:54:d7: e5:47:6c:f9:a4:34:b0:ed:82:2d:6d:5a:a2:8f:f6:6f:c6:2c: a8:b8:a9:11:0f:03:f2:a7:cb:c4:32:eb:a9:ec:74:2a:7b:53: ff:b9:3e:df:a5:73:6d:29:01:4b:29:fe:a3:8f:1a:7a:d1:a7: 80:59:a7:b3:0a:1c:a4:0b:e4:25:33:2e:44:a4:c9:c8:e5:ae: 82:a3:b4:b8:cb:bc:09:75:4a:5e:c6:ed:8b:58:8b:44:8c:5d: d9:34:5c:11:2e:ba:89:b2:fb:a7:cd:71:a3:12:f4:73:7d:4a: c8:9b:35:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyv4VcKirH5py8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk MTA4ZWY3YjItNGEzNy00YWQxLTlhYjEtOTUxOGE2MDQxZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOnQkHeOK+LCQ1HWi4m42m/c6BIa/QxI2sM8 czCu0vn9MT5leUuvqkEH44q/uFZFp2EgmcnEVUBpyHK8/LuxMZU0o28kcYHQ1F9r 9rEmEzOY82QH4W8Sjei5S+jW/oPhQFmzNlYWpTofoOkGFFnjA96hgmS3RtS5gAVm bOxU3jQ4PeyI2leV/KBD7PM98+B5QWC8ikCG/cYU5fppHFoLFnz3ktBY90P+TZOi wEN1+fo3vAXbMcwdvHXBOGTNv9cXsPcuK7QvOzRRn8ra0fF4Beb+OzYp3rqSh0OT SQuHy2FEqRM0UsDy2Wg+yGGjuDO5YYVD5/lcVp+Uon8PBSSKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEge5TCVDSe9t4YZvYZOGNXmWdFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNTQxNjMyZWQtNDEyNC0z NjJmLThlZGQtYzZhNjNiZWEyODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkhysoAuWkz9gSALdL5zdpbhwkO+hoIlbWHvKCVT10NNBUbGCORyAa8 wAC9dn+qkJJ0h0xNum8EsHc4Z4Xb88B/w1Cj23Mf6cTaziS8g4az8wGQHtfF42VM CwPs8FPwiZQ7pJu4YpAFmOKlV+ah8oYa5CTaC5CTmlgT+FvcbcJsTI8ON+j++1pp ODwInJBU1+VHbPmkNLDtgi1tWqKP9m/GLKi4qREPA/Kny8Qy66nsdCp7U/+5Pt+l c20pAUsp/qOPGnrRp4BZp7MKHKQL5CUzLkSkycjlroKjtLjLvAl1Sl7G7YtYi0SM Xdk0XBEuuomy+6fNcaMS9HN9SsibNaw= -----END CERTIFICATE-----Generated at Wed May 13 14:28:14 2026 by rpki-client