$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa File: f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa (raw, json) Hash identifier: 3C0NfgCdz0/gF2fAHxfzolaWsKL3lF1KonYvkYVBT2Y= Subject key identifier: F3:F2:A8:3C:04:1D:5F:D1:1C:FC:04:96:C4:D5:84:17:46:32:5E:00 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DADAAD0B56929F0A4A5506C80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 209.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d0:b5:69:29:f0:a4:a5:50:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=c1e0f1e8-7d1a-42ee-81ad-a442a9815782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1b:ee:5b:6e:ea:3c:d6:6e:06:19:bd:c3:23: 64:f7:49:76:21:0c:e5:5d:ce:af:93:68:2b:32:05: c4:06:7a:3b:ea:70:91:d5:c2:58:d4:9e:5f:00:8a: cd:0e:98:7d:b5:25:29:23:43:3d:da:dc:03:4d:b9: 23:05:73:63:d6:2e:2d:d9:c8:7e:11:8a:d6:c6:f4: ae:8d:4e:2b:59:8d:09:ea:61:c5:b1:54:91:8b:b0: 09:af:a3:8d:b8:ad:77:d5:6f:bd:65:b9:de:4c:f6: ad:6e:91:bf:f9:4a:09:b7:17:1d:1d:49:2c:b0:5c: 5d:29:03:aa:63:1f:3c:a8:cf:4d:70:45:bf:39:70: 32:95:b9:ba:5b:b4:fa:93:56:cd:65:dc:23:97:7b: 6e:c0:6a:f9:b6:7c:7e:c8:ed:63:6a:f6:90:55:bf: 70:b5:35:7a:b0:d4:94:68:30:41:03:52:5c:da:16: b4:4e:ba:32:de:8c:56:12:3c:80:74:de:9a:8b:98: 7f:be:d2:8a:60:36:92:e1:a7:3d:9c:c3:60:5f:1b: e3:d7:ec:4b:ae:fd:41:91:f2:77:d3:16:8d:ba:d4: 6c:5d:58:cf:92:a3:27:47:ef:95:83:cf:e3:0a:e2: e2:4d:ef:c2:5c:af:f2:be:d2:a2:ad:49:ac:ff:c6: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:A8:3C:04:1D:5F:D1:1C:FC:04:96:C4:D5:84:17:46:32:5E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a2:3b:7c:91:ec:a4:ea:fc:bd:07:95:e3:5e:c0:0d:6c:68: 8a:82:1f:19:ac:07:a9:db:be:5f:11:e0:8e:f4:f4:0d:30:8d: 77:43:5e:b8:c3:d0:8a:74:38:e0:5f:2e:97:5d:74:04:ef:e9: a5:41:b6:8e:24:d1:ed:2d:14:53:07:00:a8:c0:ad:15:8e:c8: 1f:b2:4f:f7:20:58:99:fe:34:80:fc:70:00:14:2d:a1:86:8f: 9d:a3:0c:5b:f8:6a:df:a1:01:00:63:20:5e:d6:1f:31:7f:9b: 05:15:9e:b5:ff:5d:f0:81:f1:3a:d2:a0:7b:0b:c5:8a:78:4e: 19:59:a4:9f:79:a9:28:fa:28:8c:37:e0:f4:d2:5c:26:2a:15: 74:ca:0a:62:8a:41:58:a3:59:f8:db:1a:e1:9e:a9:45:fc:e9: 97:1a:8e:c7:81:b8:76:a7:f7:66:c4:fb:66:ac:73:f1:be:08: da:b1:a2:e3:bf:d6:ed:9e:4b:a6:ce:5d:40:af:39:c6:0e:92: 11:7b:26:18:14:cd:9b:e6:33:7a:9f:50:cb:95:82:37:2e:b9: 88:4a:87:39:a2:30:ae:f3:16:b1:76:1b:7d:8a:79:0e:73:12: 3c:d8:16:9e:63:ca:8e:ec:6b:90:2b:8e:00:c0:ec:79:e2:f9: 39:07:0c:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtC1aSnwpKVQbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YzFlMGYxZTgtN2QxYS00MmVlLTgxYWQtYTQ0MmE5ODE1NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BvuW27qPNZuBhm9wyNk90l2IQzlXc6vk2gr MgXEBno76nCR1cJY1J5fAIrNDph9tSUpI0M92twDTbkjBXNj1i4t2ch+EYrWxvSu jU4rWY0J6mHFsVSRi7AJr6ONuK131W+9ZbneTPatbpG/+UoJtxcdHUkssFxdKQOq Yx88qM9NcEW/OXAylbm6W7T6k1bNZdwjl3tuwGr5tnx+yO1javaQVb9wtTV6sNSU aDBBA1Jc2ha0Troy3oxWEjyAdN6ai5h/vtKKYDaS4ac9nMNgXxvj1+xLrv1BkfJ3 0xaNutRsXVjPkqMnR++Vg8/jCuLiTe/CXK/yvtKirUms/8ZXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPyqDwEHV/RHPwElsTVhBdGMl4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjFiZDFjMTgtNTMzZC0z YzNmLWI3YTgtZGIyZWYxZWYxZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqiO3yR7KTq/L0HleNewA1saIqCHxmsB6nbvl8R4I709A0wjXdDXrjD 0Ip0OOBfLpdddATv6aVBto4k0e0tFFMHAKjArRWOyB+yT/cgWJn+NID8cAAULaGG j52jDFv4at+hAQBjIF7WHzF/mwUVnrX/XfCB8TrSoHsLxYp4ThlZpJ95qSj6KIw3 4PTSXCYqFXTKCmKKQVijWfjbGuGeqUX86ZcajseBuHan92bE+2asc/G+CNqxouO/ 1u2eS6bOXUCvOcYOkhF7JhgUzZvmM3qfUMuVgjcuuYhKhzmiMK7zFrF2G32KeQ5z EjzYFp5jyo7sa5ArjgDA7Hni+TkHDJA= -----END CERTIFICATE-----Generated at Wed May 13 07:25:55 2026 by rpki-client