$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa File: 24cd566e-cce5-31a0-9029-1e2d74307ceb.roa (raw, json) Hash identifier: UYnksrZjawQ2Qwgg42YC59VIuCfVUAzzr4v/XMVwg3c= Subject key identifier: A7:F0:FA:B9:61:42:0A:D7:50:AF:8E:11:0C:23:EF:58:4D:1C:F8:29 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD4064D754F7C6D3FB450 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d4:06:4d:75:4f:7c:6d:3f:b4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=40c169da-0a27-4d3c-b0e6-0631c01b857f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:0d:9f:66:fc:0e:63:95:e4:e0:30:a0:fc: 80:5a:fa:18:ee:05:4a:ce:ff:26:30:a2:ed:23:cc: 71:d3:cf:80:3a:98:9b:88:dc:ca:49:77:6b:ca:16: 3b:50:b0:4b:8c:71:11:4a:01:ee:80:ab:6e:78:68: 90:67:87:b5:5e:a8:36:9c:31:fe:7e:79:98:66:85: 19:6f:b4:ca:34:8f:83:b8:50:01:e6:32:50:de:07: 38:71:35:34:99:91:f8:41:6d:e8:49:3f:6a:2c:1c: 86:37:f1:56:04:c1:d8:9f:e9:0b:b4:3c:be:ca:46: e1:9d:cd:80:02:8a:84:4d:70:0f:99:22:b9:53:9b: 61:55:cd:5a:3c:29:39:f2:41:2a:d9:e6:ec:5d:3d: e7:86:a5:b8:7e:70:18:1e:3b:be:32:61:cc:90:ab: 71:34:03:de:23:3b:2c:26:fe:fa:bf:b4:bc:64:ea: 3e:db:64:f3:46:43:97:71:82:89:ba:10:a7:c8:5e: 40:e4:06:6e:5a:98:6f:02:98:e7:9d:6b:88:27:23: 00:ad:12:38:af:32:70:1e:de:e0:9b:19:98:94:52: 5b:9f:40:c4:73:28:de:86:85:68:7c:8a:b1:b1:6d: b8:35:ce:79:41:17:a9:07:19:1c:3b:99:3f:ae:22: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F0:FA:B9:61:42:0A:D7:50:AF:8E:11:0C:23:EF:58:4D:1C:F8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c8:60:ec:a8:ba:9b:02:03:41:81:f0:14:8c:53:34:ae:7e: 8e:1c:ab:66:da:17:01:f6:10:af:72:55:72:f0:5c:a6:b5:e0: ca:b3:0e:0a:c3:92:69:b4:69:0a:aa:97:1e:ed:6d:dd:3f:3c: 97:de:d8:72:12:72:0f:d2:9e:1c:25:f0:a2:18:d4:2c:26:de: e8:4b:10:e4:6e:30:22:dc:a4:c6:b7:fa:04:50:67:ed:23:78: 8a:8c:9b:55:20:4e:9f:0a:7b:5d:45:5f:e5:4a:8c:8d:35:35: 2a:87:dc:82:c7:30:bf:84:3d:8d:14:94:60:80:0e:5e:66:9f: 10:96:52:d3:10:8f:26:a6:f6:1a:f9:f2:4b:94:43:76:69:93: 95:32:1c:b9:f2:70:6b:09:d1:ed:48:33:13:4a:54:5d:84:53: 38:5d:4c:f2:33:87:91:30:8f:05:e3:0a:a0:3c:dc:73:15:c1: ac:71:f8:e8:18:5e:cd:af:11:e3:2d:d1:aa:1c:7b:a7:be:f9: 5c:e5:f3:f7:4a:4b:e8:16:7f:4a:ca:cc:f0:60:9e:60:43:ca: eb:45:1c:20:82:7c:41:e1:7d:a5:4b:4f:b6:6f:8b:09:ad:b8: 4f:fa:1e:c3:37:76:f3:d2:49:04:c2:7a:c5:da:df:e0:ca:3a: 6f:fc:20:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtQGTXVPfG0/tFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NDBjMTY5ZGEtMGEyNy00ZDNjLWIwZTYtMDYzMWMwMWI4NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAMNn2b8DmOV5OAwoPyAWvoY7gVKzv8mMKLt I8xx08+AOpibiNzKSXdryhY7ULBLjHERSgHugKtueGiQZ4e1Xqg2nDH+fnmYZoUZ b7TKNI+DuFAB5jJQ3gc4cTU0mZH4QW3oST9qLByGN/FWBMHYn+kLtDy+ykbhnc2A AoqETXAPmSK5U5thVc1aPCk58kEq2ebsXT3nhqW4fnAYHju+MmHMkKtxNAPeIzss Jv76v7S8ZOo+22TzRkOXcYKJuhCnyF5A5AZuWphvApjnnWuIJyMArRI4rzJwHt7g mxmYlFJbn0DEcyjehoVofIqxsW24Nc55QRepBxkcO5k/riLbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfw+rlhQgrXUK+OEQwj71hNHPgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMjRjZDU2NmUtY2NlNS0z MWEwLTkwMjktMWUyZDc0MzA3Y2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPIYOyoupsCA0GB8BSMUzSufo4cq2baFwH2EK9yVXLwXKa14MqzDgrD kmm0aQqqlx7tbd0/PJfe2HIScg/Snhwl8KIY1Cwm3uhLEORuMCLcpMa3+gRQZ+0j eIqMm1UgTp8Ke11FX+VKjI01NSqH3ILHML+EPY0UlGCADl5mnxCWUtMQjyam9hr5 8kuUQ3Zpk5UyHLnycGsJ0e1IMxNKVF2EUzhdTPIzh5EwjwXjCqA83HMVwaxx+OgY Xs2vEeMt0aoce6e++Vzl8/dKS+gWf0rKzPBgnmBDyutFHCCCfEHhfaVLT7Zviwmt uE/6HsM3dvPSSQTCesXa3+DKOm/8IBo= -----END CERTIFICATE-----Generated at Wed May 13 08:21:32 2026 by rpki-client