$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa File: b200cd9b-0122-35f6-8a2f-e37f12807899.roa (raw, json) Hash identifier: kVsNvKQ78j1mvK8n2ncMHjKcMsm4V5ms8T67NX9vqLc= Subject key identifier: 16:B5:98:0A:5C:D3:3C:75:FA:E6:D6:53:94:35:49:8A:12:8E:BA:3F Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584DC6CAFBE79B9E16A4936F9800 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54098 IP address blocks: 209.222.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fb:e7:9b:9e:16:a4:93:6f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=93aec01b-3518-4dc1-b32c-8c4368450f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:ee:8e:73:4b:6c:bf:76:72:8c:66:04:aa: ee:cf:fb:1d:eb:a5:9b:3c:e3:7f:b2:f3:cb:91:20: 52:4a:57:84:4d:48:2a:8b:79:4e:e0:5e:2e:fa:1a: c8:4e:34:c3:98:8a:45:cf:dc:29:fc:11:aa:6f:5a: e3:64:41:0e:87:f0:ec:ef:a0:b3:c2:02:9d:09:cd: 96:c0:28:cb:58:40:9f:34:2c:09:13:d1:13:d7:dd: 85:a6:8f:a2:ed:93:01:1a:6a:1f:d7:ac:e8:fa:8d: fb:9a:15:0c:d4:11:a3:77:7c:1c:08:55:28:69:56: ae:a1:46:4d:e4:fe:3f:de:3f:54:60:b7:f1:59:fc: 01:51:24:bb:9a:ef:34:5d:5d:33:80:2b:7d:92:6b: 02:fe:f3:be:a4:01:14:93:44:0e:be:34:ba:13:e9: 01:29:71:22:9d:0d:76:60:66:30:82:74:c4:c6:7d: ba:8c:da:fb:b7:08:60:e1:4d:b1:df:91:06:87:c5: a2:e7:a8:73:ee:35:c4:4b:b9:33:d2:04:73:c7:c4: 82:3e:da:e1:d3:5a:3c:a4:8e:56:d2:8e:d2:07:b0: 72:e7:22:82:8a:fa:ea:61:c2:f6:95:74:dd:c4:b5: a1:28:a0:14:e6:7e:bf:74:f6:1a:31:0e:86:cd:ae: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:98:0A:5C:D3:3C:75:FA:E6:D6:53:94:35:49:8A:12:8E:BA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:1f:ba:53:3a:e6:0c:a1:ba:89:6b:b7:f5:ab:79:81:1e:6c: 62:07:34:10:b4:b0:18:09:30:f8:4a:c1:27:b1:67:8b:35:88: 6f:94:dc:dc:40:f0:d8:64:de:92:47:f3:bc:ed:c8:fe:25:a8: 45:e7:6c:ec:02:8c:84:a1:db:98:99:fa:07:bc:cf:0d:cb:07: eb:09:67:a0:32:9f:eb:5a:34:63:11:0e:34:5d:53:6b:eb:e5: dd:45:d3:57:de:3f:d7:2b:4b:98:71:ce:ba:e8:1a:a6:1d:4b: 0f:76:c7:3a:2e:e2:84:23:a0:0d:5a:5c:ed:0f:3a:3b:40:16: 77:28:73:34:cc:81:a4:ed:0c:9a:0c:02:6c:be:33:fe:d8:db: 01:8a:13:5a:5e:e1:fe:d9:83:bd:ae:0f:0a:e4:d3:d8:0f:7a: 34:ef:15:77:41:96:f6:ca:87:59:9d:16:d4:a7:91:24:06:c7: 1c:33:78:92:6c:66:2a:75:71:40:bb:88:67:4b:68:a8:ec:3b: 4d:34:a8:36:71:65:d6:2d:df:ae:4e:47:48:d9:48:f8:e7:f0: 2f:c6:34:e5:bc:9f:b0:ab:ec:74:13:7b:71:e9:f5:02:ef:b1: ad:41:c5:a4:c3:b7:64:50:ff:db:08:76:bc:fb:80:be:6e:ff: 8f:d8:e4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Gyvvnm54WpJNvmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk OTNhZWMwMWItMzUxOC00ZGMxLWIzMmMtOGM0MzY4NDUwZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMvujnNLbL92coxmBKruz/sd66WbPON/svPL kSBSSleETUgqi3lO4F4u+hrITjTDmIpFz9wp/BGqb1rjZEEOh/Ds76CzwgKdCc2W wCjLWECfNCwJE9ET192Fpo+i7ZMBGmof16zo+o37mhUM1BGjd3wcCFUoaVauoUZN 5P4/3j9UYLfxWfwBUSS7mu80XV0zgCt9kmsC/vO+pAEUk0QOvjS6E+kBKXEinQ12 YGYwgnTExn26jNr7twhg4U2x35EGh8Wi56hz7jXES7kz0gRzx8SCPtrh01o8pI5W 0o7SB7By5yKCivrqYcL2lXTdxLWhKKAU5n6/dPYaMQ6Gza67WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa1mApc0zx1+ubWU5Q1SYoSjro/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvYjIwMGNkOWItMDEyMi0z NWY2LThhMmYtZTM3ZjEyODA3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8fulM65gyhuolrt/WreYEebGIHNBC0sBgJMPhKwSexZ4s1iG+U3NxA 8Nhk3pJH87ztyP4lqEXnbOwCjISh25iZ+ge8zw3LB+sJZ6Ayn+taNGMRDjRdU2vr 5d1F01feP9crS5hxzrroGqYdSw92xzou4oQjoA1aXO0POjtAFncoczTMgaTtDJoM Amy+M/7Y2wGKE1pe4f7Zg72uDwrk09gPejTvFXdBlvbKh1mdFtSnkSQGxxwzeJJs Zip1cUC7iGdLaKjsO000qDZxZdYt365OR0jZSPjn8C/GNOW8n7Cr7HQTe3Hp9QLv sa1BxaTDt2RQ/9sIdrz7gL5u/4/Y5Eg= -----END CERTIFICATE-----Generated at Wed May 13 09:09:44 2026 by rpki-client