$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa File: aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa (raw, json) Hash identifier: foCS/xjvkiEal1MX+ajXvJcbKSI0tY89xAY9fF5V6xQ= Subject key identifier: F0:53:7C:D3:70:12:EE:60:6D:E0:7E:91:84:2A:FC:9B:E2:42:77:21 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD44986FC2F0762EDA960 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d4:49:86:fc:2f:07:62:ed:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=2e12ee2f-0ee1-4d18-bd79-4d538382f4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:95:63:a7:ad:74:2c:5c:db:e7:80:26:bb: c7:cb:dc:de:9a:1c:9d:3c:1a:6b:9f:d2:42:e6:80: 50:ff:1a:13:cb:79:7b:f8:20:cb:4c:85:0c:ac:19: 02:ef:27:c2:93:0a:ce:66:ea:97:d7:e4:ca:52:d2: 4c:30:38:30:12:4b:56:4c:14:72:82:9d:5e:97:f9: 19:8f:52:6f:5b:97:c9:c4:5f:37:ec:b2:83:2a:5c: fb:d9:40:20:57:a0:08:59:8f:07:6b:a2:46:0c:73: ef:10:43:67:7e:8c:59:1c:55:e7:cb:ca:ff:e8:f8: 7c:8b:99:eb:a3:b4:42:5d:fd:bf:38:48:3b:ae:13: 5c:59:af:f1:11:e4:53:4a:9f:9f:44:a2:1b:b8:ac: 2b:b0:e2:1e:66:10:13:43:ff:01:88:24:8f:ab:72: 1e:67:b6:0a:e1:7d:90:36:d5:04:48:cc:49:68:14: 2d:f7:2d:a1:0a:7e:ae:d2:3b:4a:d9:8d:36:fd:f7: d9:26:a8:73:73:2a:ef:a0:80:16:2a:75:cd:ac:95: d2:b9:8a:31:38:64:d4:dd:66:80:16:d8:e8:49:89: 1b:e9:49:0e:92:15:e1:b6:a3:f2:91:00:82:85:30: 80:78:85:bb:6e:42:f9:34:28:ff:b4:15:17:b7:3e: 0e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:53:7C:D3:70:12:EE:60:6D:E0:7E:91:84:2A:FC:9B:E2:42:77:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:32:26:a2:14:92:57:c7:64:31:53:4e:6f:32:0e:c5:84:60: c6:80:b0:49:d8:09:41:cf:9d:07:bc:e3:b3:32:a7:4e:16:21: 86:99:18:47:5a:62:2e:b1:44:7c:93:f9:b6:a7:09:82:83:81: 26:16:b3:42:54:fe:bd:23:21:6a:1c:6f:c3:ab:19:e6:04:3c: 14:8e:91:3a:9a:c1:5d:b7:ba:15:1b:de:0f:04:0f:31:44:65: a9:a6:a6:27:b0:f6:b8:00:d5:65:47:bb:bd:31:e9:7f:fe:6e: ad:fa:b7:22:a1:99:cb:56:78:d8:d8:f7:de:29:90:8d:f8:b6: 9d:ad:21:c2:21:70:ff:38:54:60:1c:bc:f0:dc:6d:35:ae:38: 6a:d3:0d:70:38:06:e9:fe:e3:d4:24:c5:34:08:ff:0d:62:1a: 03:22:c1:53:ec:e7:92:f5:4e:56:f8:0c:7f:c6:41:6b:80:26: 14:00:1d:6c:85:5a:07:5e:a5:bb:74:c7:4e:77:c0:b5:b2:67: 83:9e:d5:a0:3b:48:7b:3b:92:f5:ad:9f:2b:b6:4f:ab:d6:28: 25:ea:8a:35:39:31:e9:b5:f7:da:00:d2:3c:6f:8b:a1:47:f5: cf:58:dd:27:32:7f:42:7e:db:f4:ca:c8:9e:ef:5f:89:1b:28: a4:a5:43:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtRJhvwvB2LtqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MmUxMmVlMmYtMGVlMS00ZDE4LWJkNzktNGQ1MzgzODJmNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMSVY6etdCxc2+eAJrvHy9zemhydPBprn9JC 5oBQ/xoTy3l7+CDLTIUMrBkC7yfCkwrOZuqX1+TKUtJMMDgwEktWTBRygp1el/kZ j1JvW5fJxF837LKDKlz72UAgV6AIWY8Ha6JGDHPvEENnfoxZHFXny8r/6Ph8i5nr o7RCXf2/OEg7rhNcWa/xEeRTSp+fRKIbuKwrsOIeZhATQ/8BiCSPq3IeZ7YK4X2Q NtUESMxJaBQt9y2hCn6u0jtK2Y02/ffZJqhzcyrvoIAWKnXNrJXSuYoxOGTU3WaA FtjoSYkb6UkOkhXhtqPykQCChTCAeIW7bkL5NCj/tBUXtz4OPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBTfNNwEu5gbeB+kYQq/JviQnchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYWEwZjdjNGItOWVhMy0z YmFjLTg1MzQtNmFkZTU2MTg2NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsyJqIUklfHZDFTTm8yDsWEYMaAsEnYCUHPnQe847Myp04WIYaZGEda Yi6xRHyT+banCYKDgSYWs0JU/r0jIWocb8OrGeYEPBSOkTqawV23uhUb3g8EDzFE Zammpiew9rgA1WVHu70x6X/+bq36tyKhmctWeNjY994pkI34tp2tIcIhcP84VGAc vPDcbTWuOGrTDXA4Bun+49QkxTQI/w1iGgMiwVPs55L1Tlb4DH/GQWuAJhQAHWyF Wgdepbt0x053wLWyZ4Oe1aA7SHs7kvWtnyu2T6vWKCXqijU5Mem199oA0jxvi6FH 9c9Y3Scyf0J+2/TKyJ7vX4kbKKSlQ8c= -----END CERTIFICATE-----Generated at Wed May 13 11:09:20 2026 by rpki-client