$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa File: 3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa (raw, json) Hash identifier: +mZAme2pKOafBof8vPeDCbPOozlcqKRP9sqANFUu17c= Subject key identifier: 22:F4:6A:A5:A3:00:7F:5A:28:90:4A:66:CD:A4:5B:58:06:AC:18:BB Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD384C0D3670C3AC43600 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d3:84:c0:d3:67:0c:3a:c4:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=5ed11772-aa0b-4769-89cc-20974a50d7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:68:8c:a7:9d:0a:da:e1:6e:61:54:dd:e0: f3:8b:26:dd:18:dd:25:b2:95:a1:74:c8:74:99:b6: 0d:5f:a7:38:7d:71:4b:00:f8:9c:6d:da:5f:e7:47: 51:e4:4d:15:ec:23:1a:c5:d5:ba:66:1f:8b:ac:98: 55:17:2d:66:33:2c:99:7f:71:de:c0:c1:ab:7a:51: cc:4e:e8:0c:a5:da:e4:d5:a1:bc:3d:91:e8:7d:80: c1:a8:31:bf:07:aa:37:01:15:94:ec:dc:9c:c3:53: 84:c3:cb:68:66:3c:ef:7c:47:2a:c3:db:fe:70:a1: 18:1b:47:65:71:80:58:2f:4d:45:9a:45:9f:a2:6e: 53:d7:10:58:9a:0c:da:d6:09:0c:4b:47:37:76:27: 72:cf:a1:b8:e2:17:bf:fb:1b:c3:d6:b7:c8:23:65: 5d:3a:92:e9:01:bc:31:79:c6:5a:fa:01:1b:91:ea: f9:19:64:57:54:a6:0d:9f:00:80:56:90:4e:c2:bc: 3d:54:23:48:fc:9a:a9:8e:43:bf:11:1e:84:a5:4d: fe:6f:7c:4f:68:bb:a5:c2:62:ed:a0:41:05:a8:0e: c2:0a:fa:f1:46:a9:7a:75:6a:c8:c1:ae:14:fc:1f: f1:87:e3:24:dd:7e:11:9d:28:69:c7:be:35:f7:43: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F4:6A:A5:A3:00:7F:5A:28:90:4A:66:CD:A4:5B:58:06:AC:18:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:29:03:fd:9d:d2:2c:54:ca:ce:07:1a:db:ad:5d:88:d2:d3: 87:3e:57:c2:e5:8e:cb:5c:b5:52:02:49:2f:95:77:f0:99:d8: 39:b7:7e:26:cd:9a:6b:18:89:b5:8a:f7:a0:30:75:c4:1d:07: 12:c6:41:5a:ac:79:ed:21:27:31:7e:a8:32:6b:82:e1:de:36: 3b:52:de:48:a7:f1:12:7e:5b:e2:cd:44:c3:62:5b:67:0d:c6: 15:4a:33:ec:56:66:56:84:7c:53:ed:d1:e5:4b:18:ed:ac:f3: 89:9b:c4:7e:ad:db:9d:cc:05:5a:ef:3b:94:fe:0c:74:17:ec: 42:45:3c:93:f4:47:cd:60:ed:a8:ac:04:bc:d0:8f:61:be:0f: 30:6a:47:e9:a4:26:be:44:78:1c:f4:b7:71:14:6d:93:26:6a: f4:28:aa:40:44:d2:56:52:e0:da:27:52:d8:e4:f7:32:95:e8: 0d:18:97:55:a5:29:5f:a8:8b:86:72:76:9d:d5:bf:18:3e:f4: b9:73:23:9e:1d:ef:33:46:ad:16:5a:08:f3:93:9d:4b:68:91: 99:50:b6:1f:3b:e7:43:5e:cf:70:ac:a0:b8:29:ed:50:a0:78: 0e:c3:60:98:b9:94:46:10:9b:96:8b:8f:fa:91:37:8f:5e:29: 3b:51:f9:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtOEwNNnDDrENgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NWVkMTE3NzItYWEwYi00NzY5LTg5Y2MtMjA5NzRhNTBkN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4JojKedCtrhbmFU3eDziybdGN0lspWhdMh0 mbYNX6c4fXFLAPicbdpf50dR5E0V7CMaxdW6Zh+LrJhVFy1mMyyZf3HewMGrelHM TugMpdrk1aG8PZHofYDBqDG/B6o3ARWU7Nycw1OEw8toZjzvfEcqw9v+cKEYG0dl cYBYL01FmkWfom5T1xBYmgza1gkMS0c3didyz6G44he/+xvD1rfII2VdOpLpAbwx ecZa+gEbker5GWRXVKYNnwCAVpBOwrw9VCNI/JqpjkO/ER6EpU3+b3xPaLulwmLt oEEFqA7CCvrxRql6dWrIwa4U/B/xh+Mk3X4RnShpx74190M4FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL0aqWjAH9aKJBKZs2kW1gGrBi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzcyN2JiMDEtZTJiZi0z OWQzLWI4YTAtYjBlMjU3MmE5NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8pA/2d0ixUys4HGtutXYjS04c+V8LljstctVICSS+Vd/CZ2Dm3fibN mmsYibWK96AwdcQdBxLGQVqsee0hJzF+qDJrguHeNjtS3kin8RJ+W+LNRMNiW2cN xhVKM+xWZlaEfFPt0eVLGO2s84mbxH6t253MBVrvO5T+DHQX7EJFPJP0R81g7ais BLzQj2G+DzBqR+mkJr5EeBz0t3EUbZMmavQoqkBE0lZS4NonUtjk9zKV6A0Yl1Wl KV+oi4Zydp3Vvxg+9LlzI54d7zNGrRZaCPOTnUtokZlQth8750Nez3CsoLgp7VCg eA7DYJi5lEYQm5aLj/qRN49eKTtR+Qo= -----END CERTIFICATE-----Generated at Wed May 13 07:22:45 2026 by rpki-client