$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa File: 90ba26e3-afe9-3987-893f-1683477506b7.roa (raw, json) Hash identifier: jWxmrqEwFFiHmfNCwHOo38QtZT6MKqTQj+BVa5I7tvc= Subject key identifier: 5B:6B:A8:59:DB:4A:9E:75:70:67:6F:40:21:FC:97:B7:D8:4B:33:EF Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD3AABA84C49D108E9E00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d3:aa:ba:84:c4:9d:10:8e:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=971c105e-549d-4bae-9c13-d1b9e1bf092e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:78:80:0c:40:20:d4:6d:22:68:6c:b7:4d: 96:5d:d7:de:58:10:0b:a5:83:6b:99:01:6d:1a:23: 55:31:9e:2d:67:57:f5:0c:2f:76:32:1c:43:49:f3: 3c:a4:b4:7f:04:17:4e:a1:f9:6f:86:61:b6:3f:6e: af:a1:59:a0:1c:7c:47:5f:bc:b3:7e:bb:c7:0e:f0: e6:ab:66:76:84:2d:81:76:9c:f8:f0:00:62:fe:bd: 4f:db:6e:8f:c4:12:4c:d4:be:bc:14:83:eb:87:db: 5d:76:9b:3c:8f:4c:d9:d7:4d:22:35:71:e3:b9:1e: c0:26:01:50:44:8d:54:ba:54:4f:fd:9e:d9:8d:b8: e5:80:19:91:f0:56:50:77:c0:74:47:a4:8e:14:50: 82:32:ab:ff:3f:4b:23:40:a8:df:2e:cc:1a:bb:85: 77:50:54:ae:b8:04:bb:6e:37:88:50:9f:bb:e5:0c: 03:c9:ae:a9:13:fa:8c:8b:2a:56:d4:05:9c:e4:e0: 20:b9:a5:d8:16:f9:b5:eb:bc:ea:c5:fc:22:c0:1c: 13:ff:d5:22:70:13:5a:38:1c:5e:1e:83:0a:2d:17: 50:eb:76:0d:10:91:f1:84:27:00:ed:43:20:4b:f0: d1:f5:60:d7:7f:1f:b5:43:29:88:62:53:08:7c:7d: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6B:A8:59:DB:4A:9E:75:70:67:6F:40:21:FC:97:B7:D8:4B:33:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:41:42:14:bb:f0:ae:49:ff:ca:46:07:52:41:be:b3:bd:ee: ca:61:1a:23:3a:6f:0c:6a:0b:38:e5:b1:8a:01:d7:c2:f5:3d: e7:83:37:b7:65:07:85:73:e8:54:4d:c7:5f:d6:49:b1:1a:a0: 65:0e:ea:55:6e:07:69:98:2a:7f:ae:5a:f2:0a:d7:cd:4d:2f: 62:de:7a:c4:8b:8d:91:bd:03:a1:c2:d5:28:21:b4:8c:95:7a: 61:4e:d4:75:2f:dd:7e:8c:5b:63:d5:f2:ff:f4:f3:dc:a5:05: dd:11:31:11:7c:9d:79:0f:8e:4f:7e:59:53:fc:a7:28:3d:b3: 13:b7:fa:62:8b:52:04:8d:57:88:40:b1:a8:be:52:0c:49:f9: aa:75:fa:ed:a8:05:8d:78:b3:20:0b:25:2a:28:44:7c:37:ab: 03:17:f0:6b:2f:f6:ce:b7:79:a6:ba:c4:74:16:06:2f:4e:9c: 72:e7:a6:2d:41:64:32:22:62:50:46:99:8a:05:fe:5c:91:5b: d4:77:5c:6c:e1:87:6a:2c:c3:05:39:fa:2c:40:ea:f2:a6:f3: 90:c4:b2:4b:12:d0:2b:32:fd:99:54:ee:9b:ed:ff:2f:c1:24: 18:91:20:b4:0d:cd:d1:f5:09:06:99:12:83:9b:b9:02:67:86: ed:70:3c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtOquoTEnRCOngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk OTcxYzEwNWUtNTQ5ZC00YmFlLTljMTMtZDFiOWUxYmYwOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ54gAxAINRtImhst02WXdfeWBALpYNrmQFt GiNVMZ4tZ1f1DC92MhxDSfM8pLR/BBdOoflvhmG2P26voVmgHHxHX7yzfrvHDvDm q2Z2hC2Bdpz48ABi/r1P226PxBJM1L68FIPrh9tddps8j0zZ100iNXHjuR7AJgFQ RI1UulRP/Z7ZjbjlgBmR8FZQd8B0R6SOFFCCMqv/P0sjQKjfLswau4V3UFSuuAS7 bjeIUJ+75QwDya6pE/qMiypW1AWc5OAguaXYFvm167zqxfwiwBwT/9UicBNaOBxe HoMKLRdQ63YNEJHxhCcA7UMgS/DR9WDXfx+1QymIYlMIfH0eywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtrqFnbSp51cGdvQCH8l7fYSzPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTBiYTI2ZTMtYWZlOS0z OTg3LTg5M2YtMTY4MzQ3NzUwNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJBQhS78K5J/8pGB1JBvrO97sphGiM6bwxqCzjlsYoB18L1PeeDN7dl B4Vz6FRNx1/WSbEaoGUO6lVuB2mYKn+uWvIK181NL2LeesSLjZG9A6HC1SghtIyV emFO1HUv3X6MW2PV8v/089ylBd0RMRF8nXkPjk9+WVP8pyg9sxO3+mKLUgSNV4hA sai+UgxJ+ap1+u2oBY14syALJSooRHw3qwMX8Gsv9s63eaa6xHQWBi9OnHLnpi1B ZDIiYlBGmYoF/lyRW9R3XGzhh2oswwU5+ixA6vKm85DEsksS0Csy/ZlU7pvt/y/B JBiRILQNzdH1CQaZEoObuQJnhu1wPLE= -----END CERTIFICATE-----Generated at Wed May 13 13:49:19 2026 by rpki-client