$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/125d2c8d-6857-3981-a307-ba99a64046dc.roa File: 125d2c8d-6857-3981-a307-ba99a64046dc.roa (raw, json) Hash identifier: nwSinO1CmmCDhHfqh2wuJWIEUaB31StGeC93NwSf5Yc= Subject key identifier: DE:E6:2D:81:30:F5:FB:17:0C:0F:E2:42:75:96:E9:13:C9:7C:E7:1B Certificate issuer: /CN=8e34a71f-aa28-4e58-b789-2715811effcc Certificate serial: 010D0C9F4328584DCFEDD85E7DE8518EF7FD76A0 Authority key identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/125d2c8d-6857-3981-a307-ba99a64046dc.roa Signing time: Tue 12 May 2026 19:33:08 +0000 ROA not before: Tue 12 May 2026 19:33:08 +0000 ROA not after: Mon 10 Aug 2026 19:33:08 +0000 asID: 16509 IP address blocks: 209.99.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:ed:d8:5e:7d:e8:51:8e:f7:fd:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e34a71f-aa28-4e58-b789-2715811effcc Validity Not Before: May 12 19:33:08 2026 GMT Not After : Aug 10 19:33:08 2026 GMT Subject: CN=3028a6d9-d491-4a00-b6b1-a9d3a80c8e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:2a:3b:3f:b3:02:49:ac:e7:e4:ff:16:ef: 91:3d:58:98:4f:89:a7:b1:4e:b3:82:22:0e:7a:d2: 6b:64:0b:62:61:da:57:10:6c:3d:3f:82:60:58:ab: 15:10:1c:6f:2f:d2:64:e9:43:2b:40:6b:ad:63:36: 60:e2:17:e0:e2:7c:7a:47:52:c6:eb:d8:49:3a:fb: ef:71:2b:e0:da:cb:a5:52:39:86:21:6e:ad:43:1b: 60:10:60:f6:4d:bd:06:2f:e4:70:ce:c9:86:cd:e4: dd:2d:af:4a:b3:fd:42:45:8b:48:35:88:8c:4f:a1: 80:9f:c7:e8:c3:ca:f7:7b:40:d2:84:d8:6b:1b:dd: ea:e6:9a:b7:b7:35:39:f5:23:c8:85:eb:78:4b:02: 22:2a:7e:e6:60:a7:50:0a:bc:93:85:47:0a:fc:28: 78:9e:42:62:bf:83:d9:91:5f:34:35:77:85:51:60: d0:d8:2c:1f:76:f0:54:26:f8:37:d7:29:60:15:27: 60:10:e0:c6:83:85:63:ab:d2:75:24:4b:e6:fc:bc: a8:89:d0:0f:63:13:ac:5f:b2:d7:28:f3:73:7d:f8: 1d:4d:bc:a2:9a:32:7a:db:9d:7d:7e:f3:58:59:35: 7f:ef:21:7b:46:d6:ad:51:05:38:3e:f6:11:7e:2f: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E6:2D:81:30:F5:FB:17:0C:0F:E2:42:75:96:E9:13:C9:7C:E7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/125d2c8d-6857-3981-a307-ba99a64046dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl X509v3 Authority Key Identifier: keyid:81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer sbgp-ipAddrBlock: critical IPv4: 209.99.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:13:dd:26:b9:00:73:ed:c6:e1:44:c9:b3:97:8b:c2:19:ab: f5:8b:fa:64:38:9f:11:89:62:d5:13:73:b8:94:2a:4b:1b:5c: 7f:41:a5:f1:03:7f:b4:5b:47:c5:4d:85:82:a9:ba:f1:3a:c6: b0:d0:9f:d4:65:36:73:75:25:f6:d1:d3:f1:1d:4b:cc:3f:85: b2:06:fb:b6:b5:65:a3:7f:de:ea:dc:73:e6:49:b8:5a:09:a3: e8:1a:9a:8f:84:1e:fd:fa:52:bc:46:b1:f0:46:4f:26:88:3f: 9d:4d:f2:10:22:da:40:f0:35:f2:ec:48:6a:8a:6b:02:3a:a1: cd:52:c7:62:dc:0e:0f:36:44:cc:49:44:c1:47:ed:e0:c8:05: bc:2c:81:8a:a4:55:5f:e9:f1:19:a9:69:d0:2d:a3:62:ec:f9: bc:2f:28:e8:f5:c9:ad:c4:fe:fa:4b:86:73:d1:cd:97:8d:f2: 2f:27:99:d6:b7:d9:d4:8a:32:46:5b:8d:31:fd:00:39:b8:12: 73:c2:40:e6:fb:bd:59:12:32:7a:7f:7e:53:36:c8:9f:be:e6: ca:1a:18:46:3d:db:c8:dc:af:14:f0:e6:9d:8e:38:67:8f:e7: 9b:1a:0a:e1:b9:a1:c7:8d:4e:97:b1:29:44:a5:e8:8a:4a:8d: af:7f:6a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3P7dhefehRjvf9dqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUzNGE3MWYtYWEyOC00ZTU4LWI3ODktMjcxNTgxMWVm ZmNjMB4XDTI2MDUxMjE5MzMwOFoXDTI2MDgxMDE5MzMwOFowLzEtMCsGA1UEAxMk MzAyOGE2ZDktZDQ5MS00YTAwLWI2YjEtYTlkM2E4MGM4ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzYqOz+zAkms5+T/Fu+RPViYT4mnsU6zgiIO etJrZAtiYdpXEGw9P4JgWKsVEBxvL9Jk6UMrQGutYzZg4hfg4nx6R1LG69hJOvvv cSvg2sulUjmGIW6tQxtgEGD2Tb0GL+RwzsmGzeTdLa9Ks/1CRYtINYiMT6GAn8fo w8r3e0DShNhrG93q5pq3tzU59SPIhet4SwIiKn7mYKdQCryThUcK/Ch4nkJiv4PZ kV80NXeFUWDQ2CwfdvBUJvg31ylgFSdgEODGg4Vjq9J1JEvm/LyoidAPYxOsX7LX KPNzffgdTbyimjJ62519fvNYWTV/7yF7RtatUQU4PvYRfi+41wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7mLYEw9fsXDA/iQnWW6RPJfOcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0 YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1ODExZWZmY2MvMTI1ZDJjOGQtNjg1Ny0z OTgxLWEzMDctYmE5OWE2NDA0NmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGUzNGE3MWYtYWEyOC00ZTU4LWI3 ODktMjcxNTgxMWVmZmNjLzhlMzRhNzFmLWFhMjgtNGU1OC1iNzg5LTI3MTU4MTFl ZmZjYy5jcmwwHwYDVR0jBBgwFoAUgeLlRSsq4BaxR2NSR7A8DSF8MWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1 ODExZWZmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WOnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgT3Sa5AHPtxuFEybOXi8IZq/WL+mQ4nxGJYtUTc7iUKksbXH9BpfED f7RbR8VNhYKpuvE6xrDQn9RlNnN1JfbR0/EdS8w/hbIG+7a1ZaN/3urcc+ZJuFoJ o+gamo+EHv36UrxGsfBGTyaIP51N8hAi2kDwNfLsSGqKawI6oc1Sx2LcDg82RMxJ RMFH7eDIBbwsgYqkVV/p8RmpadAto2Ls+bwvKOj1ya3E/vpLhnPRzZeN8i8nmda3 2dSKMkZbjTH9ADm4EnPCQOb7vVkSMnp/flM2yJ++5soaGEY928jcrxTw5p2OOGeP 55saCuG5oceNTpexKUSl6IpKja9/atg= -----END CERTIFICATE-----Generated at Wed May 13 08:39:44 2026 by rpki-client