$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/440e2246-fba8-3a68-8e61-601b8dc5d5d6.roa File: 440e2246-fba8-3a68-8e61-601b8dc5d5d6.roa (raw, json) Hash identifier: Av+7+OCPd/xMbQcQW4x0PsLFWcMDITanY5JhJAYKHrE= Subject key identifier: C9:1F:73:9E:AB:06:A0:95:91:E1:ED:6D:BD:61:7B:95:F7:0F:A6:AF Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DB8E0AB2E27670F740EADB6C0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/440e2246-fba8-3a68-8e61-601b8dc5d5d6.roa Signing time: Mon 04 May 2026 13:22:59 +0000 ROA not before: Mon 04 May 2026 13:22:59 +0000 ROA not after: Sun 02 Aug 2026 13:22:59 +0000 asID: 25645 IP address blocks: 209.42.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:e0:ab:2e:27:67:0f:74:0e:ad:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 4 13:22:59 2026 GMT Not After : Aug 2 13:22:59 2026 GMT Subject: CN=eea1fce9-92da-4c89-a1d4-4c8d7a3ca9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:e5:94:c8:22:2e:5f:6f:79:bc:84:cb:2d: 73:5d:c9:d3:5b:62:38:62:67:38:e3:4d:22:2a:3c: fb:bf:a7:1e:35:3e:70:43:29:11:37:50:ca:1e:8b: 75:d8:8a:ff:c8:3d:90:b4:13:ba:a7:01:3a:f2:8c: 76:4e:d0:f3:9a:e7:20:dd:21:fa:04:b8:c5:bb:f7: fd:8b:6a:19:5f:a4:c4:fd:f6:1a:90:67:1c:25:87: 9e:cb:79:8a:ed:8a:50:e8:80:05:76:61:0b:14:9d: de:90:f6:47:fe:95:b4:e7:02:ee:dc:83:78:7b:a4: 3e:28:c6:d0:e1:8f:35:06:38:13:72:9e:b2:d5:a3: 07:98:ea:1b:ef:0b:e5:85:7e:c7:a3:2f:8e:54:3f: 74:55:29:b7:34:81:67:a4:29:36:f6:51:49:b9:48: a1:93:95:c2:09:04:06:89:8e:a0:df:8f:5a:d6:d9: 17:7f:ed:dd:6f:ce:1f:cf:8b:8a:df:c2:54:6a:29: 24:43:68:6c:56:9c:97:ae:9b:da:cc:31:4d:3d:05: 6b:c4:da:51:0b:27:c2:05:93:76:a4:00:fb:89:f3: 93:e2:0c:c5:c0:86:29:ce:19:34:cd:38:ea:df:36: 84:04:f9:49:3c:a2:65:ad:1d:a6:20:17:93:bc:50: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1F:73:9E:AB:06:A0:95:91:E1:ED:6D:BD:61:7B:95:F7:0F:A6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/440e2246-fba8-3a68-8e61-601b8dc5d5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a9:48:4f:6b:ec:a8:39:d1:3b:75:52:b1:5e:3d:f2:84:94: 4c:21:2d:d9:74:c0:c8:cc:b8:d0:0b:0c:46:44:a2:33:00:9d: b4:b5:09:be:b5:4d:26:10:17:6c:fc:09:4e:53:75:25:cd:9f: 05:07:56:9c:07:0a:0d:b0:bf:e8:00:dc:58:bb:c5:5c:8b:ad: 5b:6c:97:84:78:38:43:ba:ee:1a:76:3c:66:e6:d7:2f:07:7b: 72:2b:ce:c2:a0:1d:fd:96:a7:92:c7:9c:ba:6c:ad:af:4d:f0: c9:dd:81:ab:00:00:7d:c2:53:c1:97:7e:29:36:da:6f:e8:c3: b9:0a:fb:ef:22:98:ce:cf:ad:c9:87:9a:2a:b3:6b:c1:f4:16: 5c:a7:7a:d3:4f:25:2e:22:d8:33:b1:da:2d:3f:c8:8e:47:60: 8f:94:88:a6:d1:07:05:f6:04:22:85:0e:87:45:62:5a:ca:ad: bf:fd:24:00:0d:f7:94:5e:53:08:f9:76:15:5d:94:22:c9:ad: b2:e6:16:cb:cc:ea:5d:c8:dc:8e:51:98:99:21:13:64:29:5c: 0a:7a:f6:ef:79:c2:d8:29:40:46:e4:f5:a3:16:a7:21:d8:a5: cc:47:2e:64:5e:dd:e0:09:7a:7b:c3:97:c1:04:3a:ff:1a:2e: 04:7c:23:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE244KsuJ2cPdA6ttsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUwNDEzMjI1OVoXDTI2MDgwMjEzMjI1OVowLzEtMCsGA1UEAxMk ZWVhMWZjZTktOTJkYS00Yzg5LWExZDQtNGM4ZDdhM2NhOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKzllMgiLl9vebyEyy1zXcnTW2I4Ymc4400i Kjz7v6ceNT5wQykRN1DKHot12Ir/yD2QtBO6pwE68ox2TtDzmucg3SH6BLjFu/f9 i2oZX6TE/fYakGccJYeey3mK7YpQ6IAFdmELFJ3ekPZH/pW05wLu3IN4e6Q+KMbQ 4Y81BjgTcp6y1aMHmOob7wvlhX7Hoy+OVD90VSm3NIFnpCk29lFJuUihk5XCCQQG iY6g349a1tkXf+3db84fz4uK38JUaikkQ2hsVpyXrpvazDFNPQVrxNpRCyfCBZN2 pAD7ifOT4gzFwIYpzhk0zTjq3zaEBPlJPKJlrR2mIBeTvFAPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkfc56rBqCVkeHtbb1he5X3D6avMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNDQwZTIyNDYtZmJhOC0z YTY4LThlNjEtNjAxYjhkYzVkNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmpSE9r7Kg50Tt1UrFePfKElEwhLdl0wMjMuNALDEZEojMAnbS1Cb61 TSYQF2z8CU5TdSXNnwUHVpwHCg2wv+gA3Fi7xVyLrVtsl4R4OEO67hp2PGbm1y8H e3IrzsKgHf2Wp5LHnLpsra9N8MndgasAAH3CU8GXfik22m/ow7kK++8imM7PrcmH miqza8H0FlynetNPJS4i2DOx2i0/yI5HYI+UiKbRBwX2BCKFDodFYlrKrb/9JAAN 95ReUwj5dhVdlCLJrbLmFsvM6l3I3I5RmJkhE2QpXAp69u95wtgpQEbk9aMWpyHY pcxHLmRe3eAJenvDl8EEOv8aLgR8I6o= -----END CERTIFICATE-----Generated at Wed May 13 12:36:16 2026 by rpki-client