$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/e209f09c-e8e1-33b5-a54b-e827603c3f64.roa File: e209f09c-e8e1-33b5-a54b-e827603c3f64.roa (raw, json) Hash identifier: HKEwh2WQkBL235+9ykW9cb3Mf0qs0/UABNGRGtS70To= Subject key identifier: DE:0F:AD:57:0F:67:B7:4E:89:84:26:9C:37:7C:2D:96:FA:3E:71:BB Certificate issuer: /CN=8e34a71f-aa28-4e58-b789-2715811effcc Certificate serial: 010D0C9F4328584DCFEFD5E6550A199B9B035C00 Authority key identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/e209f09c-e8e1-33b5-a54b-e827603c3f64.roa Signing time: Tue 12 May 2026 19:37:09 +0000 ROA not before: Tue 12 May 2026 19:37:09 +0000 ROA not after: Mon 10 Aug 2026 19:37:09 +0000 asID: 397696 IP address blocks: 209.99.160.0/24 maxlen: 24 209.99.161.0/24 maxlen: 24 209.99.162.0/24 maxlen: 24 209.99.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:ef:d5:e6:55:0a:19:9b:9b:03:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e34a71f-aa28-4e58-b789-2715811effcc Validity Not Before: May 12 19:37:09 2026 GMT Not After : Aug 10 19:37:09 2026 GMT Subject: CN=ed4c13f0-0cc5-458f-b219-1116ba04990e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c3:70:f5:a7:0a:0d:8b:57:29:aa:3b:1c:cf: 6c:9d:85:82:3a:90:ea:ea:15:b7:ce:a8:c2:00:2d: 18:21:80:4b:78:60:0d:ef:93:58:72:1e:2c:59:18: d7:b6:08:5e:cb:7e:c5:45:a1:4e:56:69:7f:56:4a: 4f:1e:45:4b:03:d9:5a:df:45:4e:32:9b:dc:9e:cb: f1:6e:99:e3:cf:a2:0a:bb:1e:ee:c9:0d:3a:e6:ab: ab:12:76:53:7f:ea:23:f9:d9:8a:c5:d9:02:62:30: a1:6e:a4:ea:7d:9b:71:ca:b3:13:1b:18:67:da:eb: 3b:07:e6:6f:fa:e7:5a:ff:b8:5f:e2:02:9a:b9:bb: 83:38:d3:70:0c:de:14:97:0c:05:70:3d:cf:91:35: 3f:7e:1a:42:51:03:fa:47:21:cc:4c:03:c4:36:07: 5b:bf:ff:3c:64:9e:ff:b3:dc:3a:bc:02:37:86:77: 98:93:1d:34:b4:98:df:d7:a7:7a:e8:c5:2e:1b:87: d5:bf:b8:85:3d:1d:df:f3:f1:8b:fd:61:33:80:48: 9d:ba:80:1b:46:3c:06:99:4c:a6:ae:57:cf:47:50: 90:b4:71:9b:e5:29:22:fe:9c:af:13:16:3c:47:30: 78:0d:f0:db:80:5e:ee:1a:3f:cd:9f:7c:c1:c3:ba: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0F:AD:57:0F:67:B7:4E:89:84:26:9C:37:7C:2D:96:FA:3E:71:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/e209f09c-e8e1-33b5-a54b-e827603c3f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl X509v3 Authority Key Identifier: keyid:81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer sbgp-ipAddrBlock: critical IPv4: 209.99.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a6:74:1d:09:24:02:0c:c7:67:a8:a6:71:9c:79:53:ab:5c: c6:23:5d:5c:76:68:33:30:16:9b:9d:f6:41:aa:e8:6d:15:be: d2:ff:b6:13:e1:4f:14:27:9a:3a:58:ab:b2:1a:bc:88:e9:eb: 2a:b7:0f:e0:4a:b2:d0:af:d6:7b:f0:b2:16:bf:13:66:ea:45: 85:e0:c6:45:4f:3f:a2:56:37:cb:c2:79:70:59:45:bc:29:7b: 4c:b3:46:30:04:17:66:c1:ea:95:1f:4c:fb:4b:19:ef:7f:32: b3:0f:3d:f9:31:96:f5:5b:da:1d:f7:b5:05:61:2a:02:2d:46: c7:9d:03:fa:7f:79:cf:ea:9b:14:a1:b5:5d:3a:2f:4d:54:b5: e0:4e:56:55:ad:17:a7:55:9e:5e:da:dc:7b:77:91:fd:9d:47: a8:52:6d:66:d9:b5:0f:40:ec:f5:f3:d0:ce:6d:69:0a:cd:98: 7f:63:21:bd:c8:94:fc:17:5e:af:1d:cb:e1:41:a6:bc:01:5f: 75:92:93:ac:1b:5a:15:71:33:9c:af:4d:35:f5:99:bf:37:9e: 44:3c:57:fb:32:da:7e:80:a6:c2:3b:40:bc:4f:1d:07:48:3d: 30:7f:34:13:7b:b6:4d:ab:50:3a:e6:d4:4e:f0:fa:1b:91:f1: 8f:ee:16:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3P79XmVQoZm5sDXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUzNGE3MWYtYWEyOC00ZTU4LWI3ODktMjcxNTgxMWVm ZmNjMB4XDTI2MDUxMjE5MzcwOVoXDTI2MDgxMDE5MzcwOVowLzEtMCsGA1UEAxMk ZWQ0YzEzZjAtMGNjNS00NThmLWIyMTktMTExNmJhMDQ5OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcNw9acKDYtXKao7HM9snYWCOpDq6hW3zqjC AC0YIYBLeGAN75NYch4sWRjXtghey37FRaFOVml/VkpPHkVLA9la30VOMpvcnsvx bpnjz6IKux7uyQ065qurEnZTf+oj+dmKxdkCYjChbqTqfZtxyrMTGxhn2us7B+Zv +uda/7hf4gKaubuDONNwDN4UlwwFcD3PkTU/fhpCUQP6RyHMTAPENgdbv/88ZJ7/ s9w6vAI3hneYkx00tJjf16d66MUuG4fVv7iFPR3f8/GL/WEzgEiduoAbRjwGmUym rlfPR1CQtHGb5Ski/pyvExY8RzB4DfDbgF7uGj/Nn3zBw7oubwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4PrVcPZ7dOiYQmnDd8LZb6PnG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0 YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1ODExZWZmY2MvZTIwOWYwOWMtZThlMS0z M2I1LWE1NGItZTgyNzYwM2MzZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGUzNGE3MWYtYWEyOC00ZTU4LWI3 ODktMjcxNTgxMWVmZmNjLzhlMzRhNzFmLWFhMjgtNGU1OC1iNzg5LTI3MTU4MTFl ZmZjYy5jcmwwHwYDVR0jBBgwFoAUgeLlRSsq4BaxR2NSR7A8DSF8MWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1 ODExZWZmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCmdB0JJAIMx2eopnGceVOrXMYjXVx2aDMwFpud9kGq6G0VvtL/thPh TxQnmjpYq7IavIjp6yq3D+BKstCv1nvwsha/E2bqRYXgxkVPP6JWN8vCeXBZRbwp e0yzRjAEF2bB6pUfTPtLGe9/MrMPPfkxlvVb2h33tQVhKgItRsedA/p/ec/qmxSh tV06L01UteBOVlWtF6dVnl7a3Ht3kf2dR6hSbWbZtQ9A7PXz0M5taQrNmH9jIb3I lPwXXq8dy+FBprwBX3WSk6wbWhVxM5yvTTX1mb83nkQ8V/sy2n6ApsI7QLxPHQdI PTB/NBN7tk2rUDrm1E7w+huR8Y/uFm8= -----END CERTIFICATE-----Generated at Wed May 13 05:26:05 2026 by rpki-client