$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa File: 5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa (raw, json) Hash identifier: IFWsJURrCM05dpjd/gp7HZREI4gr8tk1UnGJeNIGM1w= Subject key identifier: 8A:5A:58:F8:F8:88:DA:C0:B5:46:85:F7:9D:97:37:0D:83:D8:99:FA Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584D1B1A16972CE9F64ED8A00D00 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:16:97:2c:e9:f6:4e:d8:a0:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4c69feb9-1a2c-436c-b22c-9034612cab3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:44:f6:41:68:5f:d6:e1:b0:b3:bc:fa:bf: a6:c2:3d:8b:78:b0:85:ae:77:51:a1:f1:e3:69:a0: c0:a4:8a:5e:87:84:cc:07:97:3b:81:71:35:93:ed: 1f:c5:5b:8a:2b:43:aa:7e:fc:14:11:94:c8:cf:f1: 4a:0c:8c:68:e9:a3:be:c7:f3:6f:1f:91:6b:17:ab: cf:f2:e6:ac:83:cc:99:94:df:54:6f:be:79:58:e3: 60:87:ae:73:e0:a8:18:54:46:cb:13:0c:30:e9:db: b0:af:0d:82:9d:80:4e:ba:25:3d:48:87:39:6e:39: 9c:43:65:38:9a:49:c6:a2:17:53:24:e3:fe:d9:36: 75:e2:73:1d:3f:b2:73:c9:fb:83:1d:cc:a1:e9:8f: 3f:9c:7c:4b:8f:b0:ca:7e:0c:c4:f3:11:9c:e7:eb: 51:78:67:52:d9:39:a1:2f:db:92:ac:60:dd:73:0c: 76:ec:d1:a4:45:66:00:ac:32:89:b5:d7:7b:04:b3: 15:dc:23:1c:46:75:3e:43:f9:46:17:7f:8a:de:5e: 2e:f1:34:b4:d8:70:68:5f:44:25:6b:0e:f4:23:17: fd:c4:60:c4:2c:11:1b:d7:10:54:9b:8f:a5:94:db: 7c:43:f8:c4:a4:15:76:49:ce:45:5f:e1:77:41:84: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:58:F8:F8:88:DA:C0:B5:46:85:F7:9D:97:37:0D:83:D8:99:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e4:cd:d8:1a:a8:ea:fa:05:ff:68:83:63:1e:3f:1d:eb:03: c1:8b:79:0c:78:f6:6c:7c:45:03:78:3f:8f:17:28:b8:89:c5: 5c:5f:d6:ec:35:25:3d:c5:1a:37:10:3e:4f:af:df:fa:d3:8b: 04:6b:67:70:05:ba:13:2e:e1:c1:d9:f1:7a:16:8a:f8:4d:2c: 03:67:47:9f:c4:e3:d3:18:24:4c:b3:ef:d0:f4:29:a0:8e:7b: 0a:72:53:33:3e:be:16:46:f3:3b:d8:e3:23:4f:3c:53:4e:ef: 8e:95:3d:2c:db:54:27:73:e7:20:63:80:9a:a3:e6:f4:c5:e0: 1c:44:f4:46:bf:82:73:ad:2f:05:15:7f:02:3e:9f:3a:3b:57: 17:fe:3c:6b:34:d0:bb:f6:1e:d0:9b:8e:39:8b:b2:73:1c:fa: 45:b5:66:bb:9a:f0:fe:84:ec:7a:a9:1d:62:03:97:67:e8:43: e6:f7:2d:e1:31:e5:e5:7d:2c:a1:d4:48:5d:a3:39:37:94:e6: 1e:df:ed:a2:85:d9:d9:0e:86:f5:a8:1b:8f:da:c5:f9:0a:d3: 7d:39:0a:a8:f4:e3:e8:23:a1:97:2b:8e:e6:85:55:4f:01:8d: 74:1c:17:1c:a2:e0:10:9c:ab:1a:5c:0f:5b:3a:93:2e:db:9e: 49:4f:91:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhaXLOn2TtigDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGM2OWZlYjktMWEyYy00MzZjLWIyMmMtOTAzNDYxMmNhYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmJE9kFoX9bhsLO8+r+mwj2LeLCFrndRofHj aaDApIpeh4TMB5c7gXE1k+0fxVuKK0OqfvwUEZTIz/FKDIxo6aO+x/NvH5FrF6vP 8uasg8yZlN9Ub755WONgh65z4KgYVEbLEwww6duwrw2CnYBOuiU9SIc5bjmcQ2U4 mknGohdTJOP+2TZ14nMdP7JzyfuDHcyh6Y8/nHxLj7DKfgzE8xGc5+tReGdS2Tmh L9uSrGDdcwx27NGkRWYArDKJtdd7BLMV3CMcRnU+Q/lGF3+K3l4u8TS02HBoX0Ql aw70Ixf9xGDELBEb1xBUm4+llNt8Q/jEpBV2Sc5FX+F3QYQ1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpaWPj4iNrAtUaF952XNw2D2Jn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvNTgwM2EyYzQtN2M1NS0z NWY5LTlhMTMtMGU1OGE1MWJhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjkzdgaqOr6Bf9og2MePx3rA8GLeQx49mx8RQN4P48XKLiJxVxf1uw1 JT3FGjcQPk+v3/rTiwRrZ3AFuhMu4cHZ8XoWivhNLANnR5/E49MYJEyz79D0KaCO ewpyUzM+vhZG8zvY4yNPPFNO746VPSzbVCdz5yBjgJqj5vTF4BxE9Ea/gnOtLwUV fwI+nzo7Vxf+PGs00Lv2HtCbjjmLsnMc+kW1Zrua8P6E7HqpHWIDl2foQ+b3LeEx 5eV9LKHUSF2jOTeU5h7f7aKF2dkOhvWoG4/axfkK0305Cqj04+gjoZcrjuaFVU8B jXQcFxyi4BCcqxpcD1s6ky7bnklPkeI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:04 2026 by rpki-client