$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa File: d8d40582-bd1e-3c2e-9795-777694a9d1af.roa (raw, json) Hash identifier: GAtFTMVIdljGwihvdJ5tU6qUNhB8VvjVJQZS13M3IB0= Subject key identifier: 0D:61:CB:81:DD:A6:BF:65:58:F2:FF:7C:D4:BF:C5:FF:E6:DF:EE:0C Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DAC4572028171E6C56B5EF4C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13414 IP address blocks: 209.237.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:72:02:81:71:e6:c5:6b:5e:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=c3dd642b-fbf6-49cc-894d-493dddb35e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:81:08:80:7b:d3:4b:55:98:8b:65:3c:3c: e7:9a:04:9a:ff:48:1d:99:a6:3e:74:48:0d:d8:b9: 11:65:ef:2c:75:65:f0:80:9e:17:31:d3:72:ea:77: a9:78:58:9e:7c:e2:51:14:8c:88:f9:3d:ec:a9:06: 30:7b:14:1a:9d:b6:39:af:d9:8a:ad:9a:bc:db:32: 6e:46:6b:90:63:f8:46:a1:f3:c1:57:43:bb:f9:3c: 19:43:72:8e:d9:b7:3e:77:14:87:66:41:88:97:f6: 26:52:0a:34:17:ff:ba:f0:3f:18:77:5d:2c:d6:b3: b1:da:5c:c2:b4:a2:79:4e:32:6f:eb:cd:b0:78:80: e1:26:20:02:c6:5b:3d:e2:70:36:10:ce:74:b4:10: 4e:8e:f0:17:e1:f0:64:cd:3c:1c:68:a0:c8:da:5d: 05:cf:cd:25:24:d4:ed:50:b9:da:66:9b:fc:72:a3: 08:80:58:df:43:7c:a6:ae:45:b3:64:8c:27:37:ac: 45:f6:49:d8:fa:da:cb:aa:2e:e2:39:e7:6c:9b:89: 58:0f:84:a8:48:56:a3:af:f8:17:82:d1:d1:ee:dd: 26:19:4f:46:07:e2:ad:77:61:3a:af:93:37:fe:da: 30:6c:62:cd:88:2a:63:b6:c1:43:4b:fd:45:8a:28: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:61:CB:81:DD:A6:BF:65:58:F2:FF:7C:D4:BF:C5:FF:E6:DF:EE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:86:70:99:d6:a5:fe:82:7a:c5:67:6f:61:8f:28:57:de:66: b8:b3:e1:52:c3:49:49:87:d4:f8:26:11:f7:78:9f:c7:9a:aa: ff:ed:d7:27:53:08:32:61:52:06:2f:3a:35:19:e7:63:6f:47: b5:4e:f3:f7:13:8e:93:50:7c:39:05:5a:5e:36:40:08:e1:f9: 80:bf:e7:19:36:f7:f0:e4:29:7d:92:65:2e:db:d5:de:23:5f: 9e:a9:ca:62:2d:10:97:c0:3d:77:c6:c1:9c:3c:86:80:07:58: 8b:81:b0:8e:1c:8c:aa:ec:8d:8b:fd:90:47:bc:92:e6:41:ae: c2:89:de:22:8a:5e:18:a3:63:87:43:d2:3b:39:69:18:96:38: 3e:7e:12:e3:aa:f1:7f:af:d5:17:cc:d5:8f:ba:a3:7d:dc:08: 7a:b0:51:cd:84:7d:f4:5f:00:aa:c3:e4:c7:fb:4e:bc:61:3d: 68:a0:09:22:00:ab:c3:b4:ed:b4:f6:e9:c3:c6:04:8e:5c:bf: 53:42:97:6f:b0:0c:04:c7:49:a5:d1:8b:ce:d4:b6:3e:63:13: 0e:34:0f:aa:8d:a0:cf:f7:f1:93:7e:9d:3e:cd:6a:25:ca:ce: 80:90:77:e1:d3:04:2f:c1:cc:9d:a3:bd:92:00:59:aa:10:6e: ad:ae:fc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXICgXHmxWte9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YzNkZDY0MmItZmJmNi00OWNjLTg5NGQtNDkzZGRkYjM1ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+BCIB700tVmItlPDznmgSa/0gdmaY+dEgN 2LkRZe8sdWXwgJ4XMdNy6nepeFiefOJRFIyI+T3sqQYwexQanbY5r9mKrZq82zJu RmuQY/hGofPBV0O7+TwZQ3KO2bc+dxSHZkGIl/YmUgo0F/+68D8Yd10s1rOx2lzC tKJ5TjJv682weIDhJiACxls94nA2EM50tBBOjvAX4fBkzTwcaKDI2l0Fz80lJNTt ULnaZpv8cqMIgFjfQ3ymrkWzZIwnN6xF9knY+trLqi7iOedsm4lYD4SoSFajr/gX gtHR7t0mGU9GB+Ktd2E6r5M3/towbGLNiCpjtsFDS/1Fiiio8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1hy4Hdpr9lWPL/fNS/xf/m3+4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDhkNDA1ODItYmQxZS0z YzJlLTk3OTUtNzc3Njk0YTlkMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECGcJnWpf6CesVnb2GPKFfeZriz4VLDSUmH1PgmEfd4n8eaqv/t1ydT CDJhUgYvOjUZ52NvR7VO8/cTjpNQfDkFWl42QAjh+YC/5xk29/DkKX2SZS7b1d4j X56pymItEJfAPXfGwZw8hoAHWIuBsI4cjKrsjYv9kEe8kuZBrsKJ3iKKXhijY4dD 0js5aRiWOD5+EuOq8X+v1RfM1Y+6o33cCHqwUc2EffRfAKrD5Mf7TrxhPWigCSIA q8O07bT26cPGBI5cv1NCl2+wDATHSaXRi87Utj5jEw40D6qNoM/38ZN+nT7NaiXK zoCQd+HTBC/BzJ2jvZIAWaoQbq2u/KQ= -----END CERTIFICATE-----Generated at Wed May 13 09:28:19 2026 by rpki-client