$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: +8NWdXZAheYDiknyAZp8y47wrjdIjvo3PasnFs0U9K0= Subject key identifier: 42:14:5A:0D:C1:89:61:11:9F:33:89:CA:F1:26:96:16:2C:61:9B:5F Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D19B4A8663BA2B3F7EFA75000 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a8:66:3b:a2:b3:f7:ef:a7:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=66ea4eae-df13-4fa0-94b5-10d273d33ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:7e:1b:a2:14:19:04:88:1c:e6:5f:91:5b: 77:ed:6e:11:5f:e1:2a:a6:66:53:4a:7c:11:5f:c5: 20:e9:c3:c3:bc:34:9c:37:7a:2e:8f:c3:41:7f:b8: ac:59:9b:ec:9b:9f:8b:ae:dc:3f:9e:37:e3:1c:bd: aa:19:2d:32:fb:52:f9:20:9c:d3:4a:80:8a:0f:97: 13:2b:c0:70:8a:81:85:e9:68:08:84:02:82:c9:80: e8:9a:7d:ee:27:a1:b2:cd:d9:81:d0:97:96:bb:14: e5:c4:09:72:06:58:fb:fe:69:c7:c9:b8:47:1b:ac: de:57:2e:44:cb:7f:d5:05:00:be:1b:63:89:55:db: f8:02:1b:00:c6:67:b3:28:25:e6:db:fc:fb:b7:b0: 0d:ca:0e:c1:bf:f3:30:d3:d4:88:7c:58:0e:1d:53: 9a:0f:5c:b1:fe:ba:bd:af:91:51:64:68:4c:d5:df: dc:7c:05:62:d8:0f:18:f4:26:8f:0c:4b:44:22:e2: 8d:35:b0:ea:d9:40:08:2b:19:47:69:0a:ae:a3:af: e0:57:3c:ad:85:0a:02:9e:38:7b:c3:78:58:1f:d3: 21:c9:31:2a:92:6d:99:8d:ec:ad:8f:1b:74:66:d4: 00:a2:52:8e:76:0d:0b:30:35:16:6a:11:3f:40:30: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:14:5A:0D:C1:89:61:11:9F:33:89:CA:F1:26:96:16:2C:61:9B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:70:d3:ab:a4:1d:e3:33:ec:42:e9:b2:08:2c:14:d9:88:68: 1f:38:35:a5:2c:4b:4b:e8:75:20:7f:ee:5a:c1:42:99:70:ef: b4:96:f5:aa:85:59:83:11:63:b7:0b:d8:35:1b:22:d3:4f:6f: 7a:d9:62:f2:08:60:1e:c7:58:2b:bb:a1:44:28:c7:80:fd:d4: 25:bd:43:62:69:16:4d:e5:ee:ff:95:76:31:4b:40:cb:81:8b: 1a:97:cf:93:5c:e5:bd:ac:54:cc:f3:5c:0d:a0:b0:48:21:1f: f8:04:56:e1:a8:fc:bd:f4:12:4a:92:8c:44:2b:40:11:dc:a9: 32:7b:6b:8d:79:99:48:44:97:d8:11:d7:22:1f:af:79:2b:02: c0:63:94:9c:b4:3c:84:ca:64:53:cf:b1:31:c4:47:e8:cd:4f: 4f:3a:62:a0:5f:0c:87:80:4b:10:ed:90:f0:4d:69:c3:a5:8c: 0e:b8:8d:3a:7c:3b:ad:82:20:20:80:d2:36:67:e9:5e:f6:a1: fa:79:ec:52:f3:fc:b6:44:71:7d:90:c6:31:f7:85:15:4e:e0: 50:b9:c9:74:fd:e6:45:a5:43:12:c5:ec:b0:ce:19:e7:87:a8: f8:da:29:16:f9:02:75:b0:b5:9b:f6:f4:c7:bb:cd:94:3b:a0: 07:5a:c5:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKhmO6Kz9++nUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjZlYTRlYWUtZGYxMy00ZmEwLTk0YjUtMTBkMjczZDMzY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMp+G6IUGQSIHOZfkVt37W4RX+EqpmZTSnwR X8Ug6cPDvDScN3ouj8NBf7isWZvsm5+Lrtw/njfjHL2qGS0y+1L5IJzTSoCKD5cT K8BwioGF6WgIhAKCyYDomn3uJ6GyzdmB0JeWuxTlxAlyBlj7/mnHybhHG6zeVy5E y3/VBQC+G2OJVdv4AhsAxmezKCXm2/z7t7ANyg7Bv/Mw09SIfFgOHVOaD1yx/rq9 r5FRZGhM1d/cfAVi2A8Y9CaPDEtEIuKNNbDq2UAIKxlHaQquo6/gVzythQoCnjh7 w3hYH9MhyTEqkm2Zjeytjxt0ZtQAolKOdg0LMDUWahE/QDBtkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIUWg3BiWERnzOJyvEmlhYsYZtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1w06ukHeMz7ELpsggsFNmIaB84NaUsS0vodSB/7lrBQplw77SW9aqF WYMRY7cL2DUbItNPb3rZYvIIYB7HWCu7oUQox4D91CW9Q2JpFk3l7v+VdjFLQMuB ixqXz5Nc5b2sVMzzXA2gsEghH/gEVuGo/L30EkqSjEQrQBHcqTJ7a415mUhEl9gR 1yIfr3krAsBjlJy0PITKZFPPsTHER+jNT086YqBfDIeASxDtkPBNacOljA64jTp8 O62CICCA0jZn6V72ofp57FLz/LZEcX2QxjH3hRVO4FC5yXT95kWlQxLF7LDOGeeH qPjaKRb5AnWwtZv29Me7zZQ7oAdaxZo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:46 2026 by rpki-client