$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/9f2a19a6-cca4-3107-b341-3910714d79f0.roa File: 9f2a19a6-cca4-3107-b341-3910714d79f0.roa (raw, json) Hash identifier: RyzJIyR9pNhioUCYzvMWTkZDZkT/Q3IhLqH2YUfJRJg= Subject key identifier: D3:94:59:CE:86:D4:E7:0D:40:CF:18:41:88:D3:13:93:CA:A6:94:58 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584D492A817512CF9280C3450288 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/9f2a19a6-cca4-3107-b341-3910714d79f0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 209.250.8.0/23 maxlen: 23 209.250.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:81:75:12:cf:92:80:c3:45:02:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=e962d28e-ac68-4e7d-8436-f5ac80d3ea43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:ef:13:e3:d2:e9:d2:ed:b0:7e:ed:89:06: 9e:c7:f0:21:7e:4c:cb:82:23:ea:33:0b:bd:0c:8c: 1b:e3:e1:f9:4f:47:48:66:2b:c5:09:cd:f4:d1:af: 7a:76:0e:cd:5c:ea:11:ba:e4:e9:5f:93:9b:0a:02: 91:44:b6:b3:37:a0:cf:2e:59:46:8e:7a:04:e3:f1: 64:58:e4:ab:b7:72:9b:27:a8:48:f0:a2:ad:7f:ec: 5e:4a:0e:71:6c:75:70:31:5c:2b:c0:b1:36:5b:2e: 59:c9:49:57:a1:d4:d2:7c:79:cb:1c:5a:78:5c:92: 85:fd:50:27:44:ea:04:5b:55:38:41:4e:fe:f7:54: 0f:95:8b:b4:60:91:bc:c4:59:88:17:21:6d:cc:d2: 5c:dc:b8:80:91:51:ef:32:3a:ae:80:b6:13:28:b8: 8b:0b:d3:fd:76:fa:0a:25:7c:07:7c:bb:ca:a0:cb: e2:c7:f6:31:52:16:f1:3e:10:c9:5f:41:16:f9:54: 95:c1:8a:c6:be:5a:a3:21:e9:89:2f:6f:d3:29:9d: d8:68:85:2b:e3:76:c7:3b:d2:88:31:36:f2:48:50: 0e:47:4f:dd:11:65:27:0a:3e:20:51:3f:34:55:f5: d4:d4:03:7d:dd:19:69:fc:81:a6:4a:93:97:44:67: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:94:59:CE:86:D4:E7:0D:40:CF:18:41:88:D3:13:93:CA:A6:94:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/9f2a19a6-cca4-3107-b341-3910714d79f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.8.0/23 209.250.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:23:3d:7a:aa:aa:a7:67:0a:0f:e3:c0:50:33:8a:36:2f:8d: af:71:d7:73:81:99:8c:0f:6d:91:09:71:83:44:d5:80:14:5b: 9d:0f:2c:5b:10:8f:89:2e:75:26:a2:93:c9:35:08:ef:69:32: ec:02:69:7e:e3:74:cc:35:bd:b5:6f:58:be:db:fb:ba:ef:ea: e6:57:74:ff:3d:75:53:e9:ab:9a:7c:73:67:04:a4:07:d2:ef: 1a:45:99:fb:58:1f:3f:86:ef:29:ef:53:97:6c:73:12:29:47: 67:19:49:95:76:f6:60:b4:ba:b5:2d:a9:74:de:8f:4a:3c:96: a2:5a:3c:bf:df:4b:c5:a4:cf:d3:c5:91:4d:3e:1e:fc:55:3c: 0f:c0:8a:50:c6:e1:ad:92:cd:9b:85:8e:75:19:64:93:a3:fb: 8e:6b:74:24:7f:44:57:d3:60:7c:90:a7:fd:5f:73:5a:0a:c6: 78:38:6d:02:d3:c0:b5:88:42:8c:fd:dd:ea:23:b1:15:c0:24: 7c:11:4f:b9:88:e8:87:b4:ff:15:e4:84:94:6c:df:e2:66:d8: 3a:8b:ad:26:29:01:72:21:7b:bd:83:b2:48:a1:5a:48:1b:9d: cb:23:d3:ce:aa:0d:c3:0d:bc:41:17:6a:c7:b0:97:61:2d:ca: 7b:27:29:d0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1JKoF1Es+SgMNFAogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZTk2MmQyOGUtYWM2OC00ZTdkLTg0MzYtZjVhYzgwZDNlYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhTvE+PS6dLtsH7tiQaex/AhfkzLgiPqMwu9 DIwb4+H5T0dIZivFCc300a96dg7NXOoRuuTpX5ObCgKRRLazN6DPLllGjnoE4/Fk WOSrt3KbJ6hI8KKtf+xeSg5xbHVwMVwrwLE2Wy5ZyUlXodTSfHnLHFp4XJKF/VAn ROoEW1U4QU7+91QPlYu0YJG8xFmIFyFtzNJc3LiAkVHvMjqugLYTKLiLC9P9dvoK JXwHfLvKoMvix/YxUhbxPhDJX0EW+VSVwYrGvlqjIemJL2/TKZ3YaIUr43bHO9KI MTbySFAOR0/dEWUnCj4gUT80VfXU1AN93Rlp/IGmSpOXRGce3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNOUWc6G1OcNQM8YQYjTE5PKppRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvOWYyYTE5YTYtY2NhNC0z MTA3LWIzNDEtMzkxMDcxNGQ3OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB 0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA8jPXqqqqdnCg/jwFAzijYvja9x13OBmYwPbZEJcYNE1YAU W50PLFsQj4kudSaik8k1CO9pMuwCaX7jdMw1vbVvWL7b+7rv6uZXdP89dVPpq5p8 c2cEpAfS7xpFmftYHz+G7ynvU5dscxIpR2cZSZV29mC0urUtqXTej0o8lqJaPL/f S8Wkz9PFkU0+HvxVPA/AilDG4a2SzZuFjnUZZJOj+45rdCR/RFfTYHyQp/1fc1oK xng4bQLTwLWIQoz93eojsRXAJHwRT7mI6Ie0/xXkhJRs3+Jm2DqLrSYpAXIhe72D skihWkgbncsj086qDcMNvEEXasewl2EtynsnKdA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:13 2026 by rpki-client