$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa File: 4277c72e-b98e-3190-9bb7-21098d80e07c.roa (raw, json) Hash identifier: tX8JPObQhRTnR3OJNZFVWHw7KKKtvyl1ShuGqNCWT7Y= Subject key identifier: 18:88:0D:85:AA:34:50:E3:CF:8B:88:BC:39:B1:08:8A:03:DC:3F:AB Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DBFD0A6FF302B85703C3FB440 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 25645 IP address blocks: 209.42.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:a6:ff:30:2b:85:70:3c:3f:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=dc523984-4fd8-4ff7-ae34-de23fa88d5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8e:59:7e:52:49:56:d0:30:de:06:71:a8:de: 1a:04:8e:bd:6d:dc:9a:1c:de:12:7d:c1:d3:c4:b2: 09:b7:ed:d3:ec:c8:af:f4:a8:6d:7a:a0:21:0d:e2: da:c0:d5:dd:32:28:ac:84:30:a1:e5:57:b3:de:9d: 78:82:0c:07:a2:69:f7:ab:e4:92:60:e4:82:45:3b: 6b:bb:36:95:38:1a:31:bc:d6:51:50:74:97:06:bd: 3f:e2:c1:06:6c:14:6c:22:4b:2b:76:85:9d:e7:c7: 74:fc:27:79:7a:c6:25:b4:bf:33:2e:5c:b5:8d:6c: 6f:40:c1:32:f1:09:b9:e1:88:c9:07:1e:44:29:a0: 82:43:9b:aa:25:d4:68:60:d3:d6:06:19:72:12:91: 62:14:19:03:15:09:00:03:7b:f6:f0:07:1e:74:33: 9a:ca:b9:10:b4:3d:0c:48:c0:6e:fe:b4:25:d5:f6: 5a:fc:f2:96:42:3b:ea:9f:a9:95:b3:91:bd:f5:0b: 0c:96:95:ea:b7:5a:39:b9:25:5a:34:85:64:fc:bd: 29:e9:a5:27:26:55:e0:74:73:98:dc:89:dd:db:69: a4:35:fa:b5:ad:be:41:cb:95:3e:23:1d:a1:0c:ee: 0d:28:9d:38:98:9f:33:aa:1d:92:2e:b0:cc:11:cb: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:88:0D:85:AA:34:50:E3:CF:8B:88:BC:39:B1:08:8A:03:DC:3F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a8:b5:74:9b:a3:4f:72:55:68:12:7d:96:6e:8b:d0:29:d6: 53:a8:9f:23:a0:9f:2e:ca:8a:eb:38:51:da:ab:30:ff:43:07: ee:83:98:0b:00:25:fd:67:c9:e2:f4:72:c7:13:58:98:23:07: 5f:4e:b9:3b:4b:49:b7:20:cd:8e:62:55:59:86:25:04:e9:e4: bf:dc:55:a2:28:51:a6:67:d6:d7:b1:6f:17:23:40:f2:7d:d2: 8c:17:29:c3:a2:00:bc:8b:be:74:0b:3a:94:bd:2a:01:e5:76: 2c:e2:90:2a:2d:e0:49:d3:18:5b:1b:32:94:43:45:7a:29:0b: bd:b3:ec:45:19:16:e6:94:ff:67:8f:1f:38:f5:f2:ee:08:25: 32:fc:ec:ce:1b:1e:77:69:60:f1:83:3d:72:26:d9:14:03:b0: e0:e4:16:b4:19:43:00:4a:e9:dd:55:e5:26:b3:22:50:2f:21: 4d:f9:69:34:98:cc:cd:8e:4b:a9:4a:be:0a:b8:d8:a0:e0:e9: 37:90:05:4c:1f:16:19:6c:ed:d3:76:18:37:19:44:ea:a1:7c: 1a:9f:f9:55:8e:0c:8d:e2:43:49:ca:8d:c5:99:fb:db:18:27: f0:ef:09:23:2b:af:cc:b5:b4:8f:1e:43:75:f6:85:10:1c:6b: ac:bc:d3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Kb/MCuFcDw/tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZGM1MjM5ODQtNGZkOC00ZmY3LWFlMzQtZGUyM2ZhODhkNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI5ZflJJVtAw3gZxqN4aBI69bdyaHN4SfcHT xLIJt+3T7Miv9KhteqAhDeLawNXdMiishDCh5Vez3p14ggwHomn3q+SSYOSCRTtr uzaVOBoxvNZRUHSXBr0/4sEGbBRsIksrdoWd58d0/Cd5esYltL8zLly1jWxvQMEy 8Qm54YjJBx5EKaCCQ5uqJdRoYNPWBhlyEpFiFBkDFQkAA3v28AcedDOayrkQtD0M SMBu/rQl1fZa/PKWQjvqn6mVs5G99QsMlpXqt1o5uSVaNIVk/L0p6aUnJlXgdHOY 3Ind22mkNfq1rb5By5U+Ix2hDO4NKJ04mJ8zqh2SLrDMEcsjcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiIDYWqNFDjz4uIvDmxCIoD3D+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNDI3N2M3MmUtYjk4ZS0z MTkwLTliYjctMjEwOThkODBlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOotXSbo09yVWgSfZZui9Ap1lOonyOgny7Kius4UdqrMP9DB+6DmAsA Jf1nyeL0cscTWJgjB19OuTtLSbcgzY5iVVmGJQTp5L/cVaIoUaZn1texbxcjQPJ9 0owXKcOiALyLvnQLOpS9KgHldizikCot4EnTGFsbMpRDRXopC72z7EUZFuaU/2eP Hzj18u4IJTL87M4bHndpYPGDPXIm2RQDsODkFrQZQwBK6d1V5SazIlAvIU35aTSY zM2OS6lKvgq42KDg6TeQBUwfFhls7dN2GDcZROqhfBqf+VWODI3iQ0nKjcWZ+9sY J/DvCSMrr8y1tI8eQ3X2hRAca6y80+w= -----END CERTIFICATE-----Generated at Wed May 13 09:58:58 2026 by rpki-client