$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa File: 89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa (raw, json) Hash identifier: tkByP1VbKYVCr+WLvdv8BukIJFiuJCHOCrwAJNAcpsA= Subject key identifier: D7:B4:13:15:1A:5A:9C:03:73:9D:34:4D:7D:DB:80:3E:4E:8B:0E:6A Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD41697C315BF82438F00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d4:16:97:c3:15:bf:82:43:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=e5859336-f9a0-4962-a5e7-16bc7a2a4c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:ff:a3:75:e1:f9:58:77:28:ff:64:d0:ba: b9:34:55:21:e7:80:b3:c9:3b:21:d3:b5:e8:02:a1: 98:6a:73:17:6b:e6:dd:05:cd:94:ba:b8:06:52:4b: b9:d6:39:fb:53:ae:e9:a2:8d:6b:1f:0f:7c:ce:b2: 52:80:79:a9:8b:7a:3d:5f:bd:6f:da:c0:3b:ee:c4: fb:10:22:5d:c5:60:45:37:a6:96:51:73:c5:4b:66: 13:bb:7c:a3:7c:00:db:b3:31:f6:79:38:43:21:17: ef:5b:5b:c8:e1:be:19:39:7a:c6:0a:7b:c4:22:4e: 8e:c1:21:4b:a7:30:6b:4a:49:e8:6b:82:d6:13:c6: c0:a3:de:e4:94:85:a0:fb:6d:37:34:3d:9d:da:19: 58:7c:c2:81:b5:ef:d7:e6:47:bb:36:14:ef:c6:bd: e5:fd:b6:4b:fa:16:c4:68:d0:c1:73:eb:99:67:23: af:f7:cd:14:e7:d0:68:f4:8c:f7:2f:29:fd:08:df: c1:23:0a:60:23:33:1c:95:05:dd:f2:87:dd:60:6e: 62:9b:5a:ea:6f:c4:86:21:8b:3c:d5:45:b8:45:42: 9a:6d:cc:af:72:f5:28:f2:d2:cd:25:72:7d:31:bf: 6c:cc:6d:38:ab:63:ea:61:d8:67:87:66:02:e5:60: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:13:15:1A:5A:9C:03:73:9D:34:4D:7D:DB:80:3E:4E:8B:0E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f8:7c:5a:75:71:06:52:9e:2e:88:90:37:a9:0c:7b:a2:b6: d3:db:39:65:ad:73:1d:59:82:f0:19:86:06:7a:8c:76:0d:9a: f5:44:39:66:e6:fc:27:aa:f5:40:19:12:28:83:b3:ba:cc:e3: 18:05:58:a9:30:0d:7c:14:da:b4:fe:f4:36:5f:d6:6d:fd:cf: 1a:ac:6c:14:59:9a:94:aa:f9:b2:3d:f5:f8:d4:51:fb:5d:33: b4:a5:fa:77:b2:b3:97:b3:6e:60:0f:0f:43:11:50:87:e8:54: b8:14:37:55:f6:72:50:4b:79:6a:ba:d4:15:39:3e:24:a5:9e: 6f:be:1f:83:48:17:81:cc:cc:a6:f0:27:7f:c2:c7:9c:29:66: 8e:8b:c3:8e:14:7b:24:aa:f7:b1:b8:5c:0f:d4:05:d3:69:16: 34:67:2a:69:de:5f:5e:e9:aa:42:1b:fb:63:74:51:74:8e:f7: b6:ce:cf:62:23:77:fc:f0:97:8c:0b:8c:2f:37:aa:04:2b:63: 1a:3c:18:80:9b:b8:ae:fa:ae:1b:5e:c1:fc:83:8f:9d:e6:e8: a2:8d:bf:9d:25:e8:6c:42:21:99:f2:34:00:7d:c2:96:ab:ea: 9b:c6:04:28:a9:da:2a:4e:73:d7:1b:4f:56:65:54:b3:26:f4: d1:79:96:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtQWl8MVv4JDjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZTU4NTkzMzYtZjlhMC00OTYyLWE1ZTctMTZiYzdhMmE0YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3df/o3Xh+Vh3KP9k0Lq5NFUh54CzyTsh07Xo AqGYanMXa+bdBc2UurgGUku51jn7U67poo1rHw98zrJSgHmpi3o9X71v2sA77sT7 ECJdxWBFN6aWUXPFS2YTu3yjfADbszH2eThDIRfvW1vI4b4ZOXrGCnvEIk6OwSFL pzBrSknoa4LWE8bAo97klIWg+203ND2d2hlYfMKBte/X5ke7NhTvxr3l/bZL+hbE aNDBc+uZZyOv980U59Bo9Iz3Lyn9CN/BIwpgIzMclQXd8ofdYG5im1rqb8SGIYs8 1UW4RUKabcyvcvUo8tLNJXJ9Mb9szG04q2PqYdhnh2YC5WBlBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNe0ExUaWpwDc500TX3bgD5Oiw5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvODliMzBkZDItMzIzZC0z YWFiLWE4ZDktYzAxYjg4N2ZiZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf4fFp1cQZSni6IkDepDHuittPbOWWtcx1ZgvAZhgZ6jHYNmvVEOWbm /Ceq9UAZEiiDs7rM4xgFWKkwDXwU2rT+9DZf1m39zxqsbBRZmpSq+bI99fjUUftd M7Sl+neys5ezbmAPD0MRUIfoVLgUN1X2clBLeWq61BU5PiSlnm++H4NIF4HMzKbw J3/Cx5wpZo6Lw44UeySq97G4XA/UBdNpFjRnKmneX17pqkIb+2N0UXSO97bOz2Ij d/zwl4wLjC83qgQrYxo8GICbuK76rhtewfyDj53m6KKNv50l6GxCIZnyNAB9wpar 6pvGBCip2ipOc9cbT1ZlVLMm9NF5loY= -----END CERTIFICATE-----Generated at Wed May 13 07:28:03 2026 by rpki-client