$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa File: 10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json) Hash identifier: pFmPjpbOsDzhB9E7G1KDqDoIK2cYI4qX8p340RLWiSk= Subject key identifier: 38:DD:68:D2:C7:EC:00:C5:E3:B6:AC:F3:D2:72:10:8E:A6:94:3F:9E Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584D1B1A16BEBF0E208884AC2380 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 398465 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:16:be:bf:0e:20:88:84:ac:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=5fb07fc1-f816-457a-ae59-10abf39145f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:3f:5c:a5:80:56:33:61:e5:f3:e7:7b:c9: 11:78:d2:20:c7:05:79:98:e0:10:99:c4:b9:25:87: ee:b7:ec:d5:46:06:bd:66:d9:a3:39:cd:54:56:02: 58:cf:45:0d:97:45:ce:2d:56:11:51:a5:79:f2:31: 00:cf:4d:2f:0d:be:8c:3e:a7:33:a3:ab:59:c4:02: 3a:80:1e:52:a2:73:82:a3:66:02:8f:1a:81:14:8a: ac:58:05:81:ce:e4:cb:e1:7a:ca:86:a3:7e:99:b0: da:81:d2:95:4f:2f:a0:3e:00:e6:c8:85:96:4a:e3: 5c:4f:19:ff:61:a6:8e:dc:ba:f1:c9:30:24:ed:7f: e9:df:20:36:4c:75:10:ea:ae:f5:a0:1c:51:50:8d: 49:0e:d9:5e:a9:07:3f:06:4e:4d:d7:b6:7b:27:2f: b7:e7:cf:bb:a2:a4:9f:3f:bd:4a:c0:42:3c:63:dd: bc:19:21:38:3d:5a:31:cf:b3:78:cb:19:f4:f2:b8: f5:87:6d:e4:b0:99:92:87:95:2e:22:b1:26:4f:1a: 6e:67:70:e5:40:2e:9d:13:ca:7a:5c:91:21:16:0c: ed:5d:50:99:5c:54:7e:6a:1f:4e:01:cc:fa:99:32: 20:2b:5d:11:fe:64:51:85:23:ae:c6:ba:c9:6c:13: 03:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DD:68:D2:C7:EC:00:C5:E3:B6:AC:F3:D2:72:10:8E:A6:94:3F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f9:fa:18:8f:a9:e0:09:12:94:8e:3e:55:98:71:45:0d:2e: 0c:2e:42:85:2f:53:54:2a:72:d2:09:62:1a:85:df:99:74:de: a6:2e:41:da:9f:ab:7d:e1:17:d5:5a:e9:e1:ef:c6:0a:18:41: bf:58:14:a2:28:28:24:c1:f8:ff:fd:d3:3b:d2:a7:e0:ec:f2: 5a:2a:da:17:ef:94:ed:48:b4:e1:39:03:ed:f4:27:7c:d2:00: a5:3f:6e:c6:99:9e:cb:dd:b4:75:13:cb:4e:ac:2c:41:37:41: 93:0e:5a:bb:04:91:cc:87:0b:6c:5e:e1:50:17:4e:34:2e:5c: 6c:36:c2:e1:2e:4a:3f:7c:90:eb:ab:cc:db:9b:db:b0:6a:6a: aa:81:fc:6b:56:76:d1:8a:e7:15:cd:d3:ca:56:18:c5:9d:b0: af:e4:8a:99:99:3b:a6:1c:60:5a:27:ff:ed:80:0d:1a:d9:fd: de:0f:f0:47:96:a1:b3:d8:3a:7c:d5:32:42:c3:09:ea:01:0e: c9:79:3e:62:aa:d4:f5:2a:35:6f:c5:fa:35:ce:65:74:fd:46: 5c:a4:ae:29:4e:db:b0:7f:89:9d:e5:2e:16:03:e6:dc:67:b2: 74:ca:54:cb:7b:68:2a:13:e9:98:9e:73:0e:b7:99:08:f2:87: 36:15:7a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGha+vw4giISsI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NWZiMDdmYzEtZjgxNi00NTdhLWFlNTktMTBhYmYzOTE0NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWc/XKWAVjNh5fPne8kReNIgxwV5mOAQmcS5 JYfut+zVRga9ZtmjOc1UVgJYz0UNl0XOLVYRUaV58jEAz00vDb6MPqczo6tZxAI6 gB5SonOCo2YCjxqBFIqsWAWBzuTL4XrKhqN+mbDagdKVTy+gPgDmyIWWSuNcTxn/ YaaO3LrxyTAk7X/p3yA2THUQ6q71oBxRUI1JDtleqQc/Bk5N17Z7Jy+358+7oqSf P71KwEI8Y928GSE4PVoxz7N4yxn08rj1h23ksJmSh5UuIrEmTxpuZ3DlQC6dE8p6 XJEhFgztXVCZXFR+ah9OAcz6mTIgK10R/mRRhSOuxrrJbBMDwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjdaNLH7ADF47as89JyEI6mlD+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTAzNDdlNzEtN2ZlNi0z OTQ0LWFhZmEtZjUwMjliNWY4N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr5+hiPqeAJEpSOPlWYcUUNLgwuQoUvU1QqctIJYhqF35l03qYuQdqf q33hF9Va6eHvxgoYQb9YFKIoKCTB+P/90zvSp+Ds8loq2hfvlO1ItOE5A+30J3zS AKU/bsaZnsvdtHUTy06sLEE3QZMOWrsEkcyHC2xe4VAXTjQuXGw2wuEuSj98kOur zNub27BqaqqB/GtWdtGK5xXN08pWGMWdsK/kipmZO6YcYFon/+2ADRrZ/d4P8EeW obPYOnzVMkLDCeoBDsl5PmKq1PUqNW/F+jXOZXT9RlykrilO27B/iZ3lLhYD5txn snTKVMt7aCoT6Ziecw63mQjyhzYVevk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:59 2026 by rpki-client