$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa File: f7690f1e-c39d-30e1-9d78-56741c6780a0.roa (raw, json) Hash identifier: YHSHdmUKamLE70/01dS8yvup+5cJ7Ep3B0sS4EEkTzg= Subject key identifier: 5D:60:E8:3A:B1:D6:83:46:72:10:7F:A9:E1:2B:57:95:A1:D1:0E:D2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584DBA3B04B8AF02E64509692120 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 11232 IP address blocks: 209.169.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:04:b8:af:02:e6:45:09:69:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=dd1019b8-333a-4503-8613-720dbc24c18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:f5:b9:a4:6a:1d:c3:c6:bc:c2:57:0f:86: d7:ab:15:83:32:d1:6f:25:61:e2:57:61:75:a9:83: 09:6a:55:62:f6:65:10:92:37:ff:e8:7a:28:4d:8e: c9:2e:46:49:13:02:43:0e:f9:ec:35:ca:6f:ce:47: 77:b6:e3:cf:36:f0:90:eb:65:f8:1f:3e:89:1b:6f: 7e:9a:16:7b:a2:65:0a:68:92:fa:fe:4b:ea:75:a5: aa:46:0d:fb:cf:36:67:d1:ef:f2:ae:48:ae:50:74: e3:0b:8c:9e:44:96:8f:cb:19:5e:06:d9:21:97:7f: 65:f8:da:e4:93:c7:e0:d8:fb:a4:b2:87:01:f5:7c: c2:9c:09:f7:55:60:51:33:e4:bf:21:46:23:83:4c: 2a:32:1a:c6:10:d8:60:ec:52:af:6c:bb:ea:af:52: b4:71:60:d6:99:2e:aa:46:e8:59:34:da:52:a5:92: 28:c3:0d:68:7c:52:70:84:64:4f:d1:7a:b8:4c:d9: 6c:f2:4b:19:3e:df:ef:1f:1a:01:99:1a:ae:af:ff: 05:c7:7f:83:7b:04:87:3b:9c:0a:9f:6c:19:f8:09: a6:51:73:3b:0f:dd:73:50:74:da:ae:30:be:08:d0: 27:c4:0f:d4:8d:3b:25:ef:71:eb:bd:73:0d:2b:69: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:60:E8:3A:B1:D6:83:46:72:10:7F:A9:E1:2B:57:95:A1:D1:0E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a5:cc:b1:fd:45:8a:15:75:2b:d1:93:e2:19:3b:d0:97:83: 4a:28:7b:da:21:28:e2:b2:d2:31:31:01:eb:87:6e:7f:45:1e: d8:2c:df:c2:42:1d:13:61:4d:be:c0:d0:98:8c:4d:c2:77:de: 88:c1:30:2e:e9:67:97:5a:65:ea:42:d2:86:97:12:25:2a:79: 18:ed:a8:1b:7e:f4:07:8b:23:74:14:44:4d:c4:fe:05:55:3a: 05:a1:22:97:ac:e2:b9:ae:46:d3:59:82:dd:45:c9:f6:39:ad: 22:a1:ca:20:1a:da:b4:0c:66:eb:61:3b:d9:23:c3:c6:f9:3c: 1d:aa:dc:e6:75:19:17:c5:6c:4e:39:e9:61:df:54:41:e0:0d: 5d:1d:9e:26:81:b9:3b:d8:e1:4d:0e:8f:e1:f4:e6:6a:3c:2c: 5c:a0:9c:f3:3d:df:63:9e:b7:ac:f7:3b:72:40:8c:10:c7:0d: 4e:49:fd:85:94:66:33:e6:dd:bf:70:61:0f:c1:e1:ae:74:f4: 3c:48:c6:82:ef:45:e0:e6:ac:9d:2b:3b:5f:e9:a0:ca:be:86: 56:42:74:97:b1:4e:4b:ed:79:12:37:09:69:b9:02:97:4f:b0: 0c:40:84:34:ec:fc:82:5f:6e:2e:91:57:54:ed:fe:b7:9b:3a: 6a:ef:86:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwS4rwLmRQlpISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk ZGQxMDE5YjgtMzMzYS00NTAzLTg2MTMtNzIwZGJjMjRjMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEX1uaRqHcPGvMJXD4bXqxWDMtFvJWHiV2F1 qYMJalVi9mUQkjf/6HooTY7JLkZJEwJDDvnsNcpvzkd3tuPPNvCQ62X4Hz6JG29+ mhZ7omUKaJL6/kvqdaWqRg37zzZn0e/yrkiuUHTjC4yeRJaPyxleBtkhl39l+Nrk k8fg2PuksocB9XzCnAn3VWBRM+S/IUYjg0wqMhrGENhg7FKvbLvqr1K0cWDWmS6q RuhZNNpSpZIoww1ofFJwhGRP0Xq4TNls8ksZPt/vHxoBmRqur/8Fx3+DewSHO5wK n2wZ+AmmUXM7D91zUHTarjC+CNAnxA/UjTsl73HrvXMNK2nPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1g6Dqx1oNGchB/qeErV5Wh0Q7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjc2OTBmMWUtYzM5ZC0z MGUxLTlkNzgtNTY3NDFjNjc4MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0anQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWlzLH9RYoVdSvRk+IZO9CXg0ooe9ohKOKy0jExAeuHbn9FHtgs38JC HRNhTb7A0JiMTcJ33ojBMC7pZ5daZepC0oaXEiUqeRjtqBt+9AeLI3QURE3E/gVV OgWhIpes4rmuRtNZgt1FyfY5rSKhyiAa2rQMZuthO9kjw8b5PB2q3OZ1GRfFbE45 6WHfVEHgDV0dniaBuTvY4U0Oj+H05mo8LFygnPM932Oet6z3O3JAjBDHDU5J/YWU ZjPm3b9wYQ/B4a509DxIxoLvReDmrJ0rO1/poMq+hlZCdJexTkvteRI3CWm5ApdP sAxAhDTs/IJfbi6RV1Tt/rebOmrvhhU= -----END CERTIFICATE-----Generated at Wed May 13 08:11:49 2026 by rpki-client