$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa File: a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa (raw, json) Hash identifier: 542l/GLeC7Qc+J2+VIiNalZ4ZKj7uo5hMSWhevQW8WA= Subject key identifier: 38:67:81:5D:D1:C3:B1:50:AE:2F:9E:C9:A6:ED:5C:F5:33:8C:DB:2C Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DAC456EB2A659EC4C46A11E80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13414 IP address blocks: 209.237.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6e:b2:a6:59:ec:4c:46:a1:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=5b76a588-7e77-4fd1-842b-860309a865eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:5c:d9:bd:c3:a0:5f:db:0b:11:45:bb:61: b0:7e:b6:3e:c5:55:64:6d:ac:4c:38:0a:5f:4c:5b: 8e:e4:87:8e:8d:f1:3d:14:7e:d1:a9:be:2f:f7:45: ac:c7:39:a8:17:c4:26:c4:ea:e3:46:8b:3d:a7:03: 83:38:05:b2:2b:4c:a2:83:ec:60:8c:24:b9:93:15: 73:da:ce:6b:00:7f:c2:ae:97:33:af:d6:9c:48:86: 92:19:71:c3:95:ae:a0:de:1f:95:83:df:bc:73:eb: ec:00:10:0e:b0:94:0d:3c:a6:19:df:96:58:d9:86: 58:e3:f4:a4:e2:a4:9f:a3:11:6b:fb:a3:7d:5e:6e: 65:e4:e7:59:b2:46:08:f4:d7:35:7f:17:2b:3e:56: 4a:68:32:59:d2:0f:15:82:a1:33:fd:f3:ad:a1:94: 16:2c:4b:13:85:de:d8:91:49:7e:d4:6c:f0:2d:6e: f2:6b:43:9e:5c:9e:8d:e7:43:a1:a8:37:8e:24:5e: f9:52:33:df:44:b0:5f:37:f5:69:0c:53:8d:84:93: 74:fd:95:e0:ae:90:cd:fe:64:62:ed:1a:42:06:6f: 80:52:07:3b:dd:84:75:7d:75:c7:99:aa:8c:f0:f5: c3:ce:52:40:ee:f7:e0:34:12:3a:7f:04:96:83:6c: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:81:5D:D1:C3:B1:50:AE:2F:9E:C9:A6:ED:5C:F5:33:8C:DB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ab:28:2c:4d:1a:3e:b5:dc:68:29:1f:99:16:25:40:0d:da: 2b:e6:2b:30:ac:ae:19:10:31:e4:fc:41:3b:a5:bb:46:62:10: c7:05:ca:d9:db:43:a5:4b:7d:be:02:94:a4:8e:30:e3:89:ab: 00:87:c5:29:ce:33:3f:d5:22:fb:0c:06:84:f4:92:09:8f:90: 4a:7b:10:d3:03:44:2b:36:1f:58:1c:98:39:d1:07:b7:38:bf: 17:55:dd:86:62:c3:fc:7f:54:cb:b1:e7:b0:e5:5a:e5:bc:4b: 0b:d0:dc:39:27:67:c6:85:89:5a:22:66:15:d8:b4:ea:d3:d2: ec:f6:9d:86:bf:f8:2e:66:21:3d:21:a0:c7:0e:ec:75:74:f7: ba:02:32:85:e4:f9:b5:f4:c3:a3:54:1f:a7:11:06:4f:b6:bd: 9a:09:1f:89:e3:29:bd:9f:9f:8e:31:97:1c:51:09:41:b9:6d: 75:33:a9:c6:cf:64:94:ea:12:74:83:89:4b:18:b6:da:5b:6a: d5:8b:bd:96:b3:ee:86:e1:27:85:7e:a0:57:57:ed:3d:11:2e: ae:70:a0:97:e2:23:29:c9:ff:a1:e5:dd:ac:3e:b4:99:b6:c7: 24:58:f1:ba:48:ef:e6:da:43:d5:58:60:84:21:9d:5a:f5:78: 81:81:a0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRW6yplnsTEahHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NWI3NmE1ODgtN2U3Ny00ZmQxLTg0MmItODYwMzA5YTg2NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwhc2b3DoF/bCxFFu2GwfrY+xVVkbaxMOApf TFuO5IeOjfE9FH7Rqb4v90WsxzmoF8QmxOrjRos9pwODOAWyK0yig+xgjCS5kxVz 2s5rAH/Crpczr9acSIaSGXHDla6g3h+Vg9+8c+vsABAOsJQNPKYZ35ZY2YZY4/Sk 4qSfoxFr+6N9Xm5l5OdZskYI9Nc1fxcrPlZKaDJZ0g8VgqEz/fOtoZQWLEsThd7Y kUl+1GzwLW7ya0OeXJ6N50OhqDeOJF75UjPfRLBfN/VpDFONhJN0/ZXgrpDN/mRi 7RpCBm+AUgc73YR1fXXHmaqM8PXDzlJA7vfgNBI6fwSWg2wgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhngV3Rw7FQri+eyabtXPUzjNssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYThjNDcwZGQtNDBhMi0z ZmFhLTg3ZDgtYTk1MWZhZjNkOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADarKCxNGj613GgpH5kWJUAN2ivmKzCsrhkQMeT8QTulu0ZiEMcFytnb Q6VLfb4ClKSOMOOJqwCHxSnOMz/VIvsMBoT0kgmPkEp7ENMDRCs2H1gcmDnRB7c4 vxdV3YZiw/x/VMux57DlWuW8SwvQ3DknZ8aFiVoiZhXYtOrT0uz2nYa/+C5mIT0h oMcO7HV097oCMoXk+bX0w6NUH6cRBk+2vZoJH4njKb2fn44xlxxRCUG5bXUzqcbP ZJTqEnSDiUsYttpbatWLvZaz7obhJ4V+oFdX7T0RLq5woJfiIynJ/6Hl3aw+tJm2 xyRY8bpI7+baQ9VYYIQhnVr1eIGBoGo= -----END CERTIFICATE-----Generated at Wed May 13 07:04:45 2026 by rpki-client