$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8cbb6b8a-3710-3152-a5c1-709dc32c6c8a.roa File: 8cbb6b8a-3710-3152-a5c1-709dc32c6c8a.roa (raw, json) Hash identifier: KWzv7mmU0pyQdS1/EQhk/vjFSqWUTPx2UNjvw+Bppeg= Subject key identifier: 42:F5:60:97:70:D5:73:E9:CA:65:9A:71:72:BD:A6:14:6F:CD:FB:31 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD437AB2EAE27950F9000 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8cbb6b8a-3710-3152-a5c1-709dc32c6c8a.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d4:37:ab:2e:ae:27:95:0f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=84a57253-8771-4400-b98f-d2df1abc998b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:0f:4d:ff:a0:24:37:5d:b7:a2:91:77:9c: 72:ba:14:0c:f4:1a:52:5a:d3:5d:32:0e:62:1c:fb: c9:e2:39:d1:8a:6f:47:5f:12:81:f7:0c:fe:7f:67: 4f:3d:40:2d:e8:2e:cc:42:91:0b:53:a4:0a:82:20: bb:31:0b:85:d1:e5:13:97:3a:ef:50:0b:30:8c:92: 93:24:f7:66:33:63:1e:2b:03:f1:4b:29:50:85:e9: 62:55:1e:3b:ee:8f:68:e7:02:6f:cd:a8:df:95:1a: bc:85:67:80:a6:a4:31:c4:e0:06:c7:bf:50:1a:32: d4:77:04:e3:d2:43:76:53:f3:6d:85:c9:20:8b:4c: bb:b7:3e:5f:29:30:0e:85:ce:74:39:97:02:8a:bf: db:04:0e:8f:3f:9f:c2:e8:3e:ca:36:d6:db:29:df: 10:12:9b:04:b0:7d:6c:27:34:60:08:6c:e7:89:90: 14:54:32:e7:82:46:d0:2d:e6:b1:f8:e8:54:02:41: af:fa:ad:de:49:b2:b7:b4:0e:50:ac:2a:af:ac:d8: 2a:36:9e:7b:1d:b3:05:cb:fd:c1:2b:53:9b:a5:dd: 97:c9:b6:59:84:f0:b0:8e:ca:f3:58:30:16:d0:51: c0:64:97:44:17:b0:d3:3a:b5:fe:92:da:6a:93:8c: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:60:97:70:D5:73:E9:CA:65:9A:71:72:BD:A6:14:6F:CD:FB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8cbb6b8a-3710-3152-a5c1-709dc32c6c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:00:2a:78:20:f3:ab:3c:72:41:fe:6e:58:06:82:d8:f5:ae: ca:88:ac:39:a9:8e:96:b3:8b:16:76:e1:69:fa:2f:1b:33:48: cb:e0:5d:90:2a:6a:98:a3:82:e2:55:22:fe:74:8e:49:7b:0b: 8f:3f:58:2c:95:e1:a5:5a:48:2f:88:64:ad:e3:3e:d1:58:42: 12:90:b6:ac:e7:d0:4b:e3:41:6d:c6:43:6f:0f:08:f0:56:71: 92:1f:06:44:9a:cb:dc:1f:b6:52:66:a2:54:34:91:4a:4f:9c: 3b:b2:c0:f2:88:04:06:25:e0:a7:75:9e:42:33:62:cd:ad:59: 3b:df:1b:66:b1:35:de:d8:63:bc:33:33:a0:02:35:6e:79:6c: 8e:3a:e5:11:8f:32:ab:10:79:85:c9:10:6a:80:9f:4b:19:33: 3c:ef:87:bd:26:7d:d4:dc:31:02:28:1a:a1:ee:a1:e5:c0:0f: 40:22:31:2b:d0:52:ce:ff:09:04:61:41:5c:c0:6f:78:d9:dc: a2:31:2c:5a:34:ea:bf:e4:39:b6:90:47:3d:73:9e:6a:c4:6d: a9:44:22:25:22:8a:55:d7:aa:1d:79:ef:7d:0f:8a:8d:91:23: 92:7b:be:bb:23:6c:1b:df:cf:2b:e0:ec:8d:86:a3:ce:67:b0: b7:bd:a8:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtQ3qy6uJ5UPkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ODRhNTcyNTMtODc3MS00NDAwLWI5OGYtZDJkZjFhYmM5OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOgPTf+gJDddt6KRd5xyuhQM9BpSWtNdMg5i HPvJ4jnRim9HXxKB9wz+f2dPPUAt6C7MQpELU6QKgiC7MQuF0eUTlzrvUAswjJKT JPdmM2MeKwPxSylQheliVR477o9o5wJvzajflRq8hWeApqQxxOAGx79QGjLUdwTj 0kN2U/Nthckgi0y7tz5fKTAOhc50OZcCir/bBA6PP5/C6D7KNtbbKd8QEpsEsH1s JzRgCGzniZAUVDLngkbQLeax+OhUAkGv+q3eSbK3tA5QrCqvrNgqNp57HbMFy/3B K1Obpd2XybZZhPCwjsrzWDAW0FHAZJdEF7DTOrX+ktpqk4znzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL1YJdw1XPpymWacXK9phRvzfsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOGNiYjZiOGEtMzcxMC0z MTUyLWE1YzEtNzA5ZGMzMmM2YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIAKngg86s8ckH+blgGgtj1rsqIrDmpjpazixZ24Wn6LxszSMvgXZAq apijguJVIv50jkl7C48/WCyV4aVaSC+IZK3jPtFYQhKQtqzn0EvjQW3GQ28PCPBW cZIfBkSay9wftlJmolQ0kUpPnDuywPKIBAYl4Kd1nkIzYs2tWTvfG2axNd7YY7wz M6ACNW55bI465RGPMqsQeYXJEGqAn0sZMzzvh70mfdTcMQIoGqHuoeXAD0AiMSvQ Us7/CQRhQVzAb3jZ3KIxLFo06r/kObaQRz1znmrEbalEIiUiilXXqh15730Pio2R I5J7vrsjbBvfzyvg7I2Go85nsLe9qFo= -----END CERTIFICATE-----Generated at Wed May 13 07:26:02 2026 by rpki-client