$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa File: a84baf16-04c5-3be6-b2ff-91936a207335.roa (raw, json) Hash identifier: +nTyZcIjk8+1D5qW8BvLOBL5pErsnNVscJVRYnYhih4= Subject key identifier: 9D:B5:26:33:EB:DC:82:37:28:A5:04:BE:64:A4:6A:33:1A:04:81:5E Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584D1B1A167DA855DF8FA21BA5E0 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 6079 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:16:7d:a8:55:df:8f:a2:1b:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=085a9e59-8979-420c-be13-aab054d1d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:61:eb:53:70:4b:b4:27:a7:f9:7e:42:12: 04:cd:b0:8d:e8:3b:38:cd:e7:33:f0:16:01:cd:6e: 74:c7:eb:1a:58:c1:f9:b3:b1:7f:48:e3:77:81:9f: 8f:5e:d5:01:51:53:36:c2:d7:a1:15:41:d9:17:c7: eb:65:8d:b9:e7:66:3f:d1:b6:24:43:7f:61:0e:31: 3b:dc:62:62:fc:18:a6:bf:ba:b9:a0:8f:d2:19:cb: 68:de:95:47:ac:88:2f:c6:62:24:46:7a:9e:16:20: f5:df:59:01:19:65:27:4b:46:d6:fd:f1:8c:f1:40: 4b:f3:0f:3a:a4:fb:64:da:0a:d6:33:fb:94:1c:90: 1a:92:35:48:9d:63:8d:4f:89:06:92:51:6a:ec:96: 6f:fc:82:05:21:a6:e1:88:ff:e5:62:8e:d5:39:64: e3:3a:47:db:47:b7:bb:bc:81:54:b0:ef:80:38:ff: 9d:41:f1:20:74:9f:05:d5:8e:08:30:59:18:6a:4a: 3c:c7:96:32:32:6d:c2:2c:c2:81:d5:18:55:d6:f1: 32:61:51:00:d1:1e:a6:37:bc:0e:09:15:1d:1e:32: 45:2a:f8:d8:66:29:a4:eb:7d:3f:29:de:7f:41:12: d4:44:e0:f2:e9:f8:fe:d4:76:11:8d:e4:bd:a4:9b: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:26:33:EB:DC:82:37:28:A5:04:BE:64:A4:6A:33:1A:04:81:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1a:c8:e9:65:7f:1c:97:62:1b:dd:de:d2:d9:41:b6:c2:d4: a9:52:bf:be:06:78:8b:05:32:a8:71:cf:6a:30:d2:33:52:ad: cd:75:55:63:2a:d8:71:d3:d3:6f:87:41:d5:e2:52:8b:62:fb: 45:81:57:18:a1:85:05:bb:dd:cf:35:20:9b:de:2b:a4:bd:1b: 1a:e7:ef:e8:53:4d:a6:02:4d:d7:fe:4e:17:a0:cd:e9:38:fb: 13:fa:6a:d2:fb:6c:6d:5e:a1:f0:a2:81:db:a7:4a:fa:6c:20: 56:49:66:36:8a:48:f2:3e:12:5e:48:df:a1:2c:dd:ef:a0:bd: 9e:29:5e:73:4e:c3:23:7a:e9:c8:bf:e4:f9:6c:36:bc:1b:64: d0:c9:da:04:fc:d5:62:63:90:ea:ab:64:60:97:0f:d8:0a:2a: a2:1b:4b:4a:bf:61:fd:00:66:34:cc:dd:a2:29:3a:ca:ca:7e: 62:a4:96:81:90:34:93:83:67:f3:31:6f:df:20:7e:2c:85:25: 7a:c2:69:21:0a:7c:4a:d1:79:b4:b9:1c:0d:87:2e:72:96:8b: 66:31:72:5e:79:88:c2:44:e3:48:72:e1:22:3f:97:e0:3d:99: dd:aa:d3:48:a0:ea:21:30:21:b0:3e:79:37:63:ad:0f:dc:21: 28:b0:d4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhZ9qFXfj6IbpeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MDg1YTllNTktODk3OS00MjBjLWJlMTMtYWFiMDU0ZDFkOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3hh61NwS7Qnp/l+QhIEzbCN6Ds4zecz8BYB zW50x+saWMH5s7F/SON3gZ+PXtUBUVM2wtehFUHZF8frZY2552Y/0bYkQ39hDjE7 3GJi/Bimv7q5oI/SGcto3pVHrIgvxmIkRnqeFiD131kBGWUnS0bW/fGM8UBL8w86 pPtk2grWM/uUHJAakjVInWONT4kGklFq7JZv/IIFIabhiP/lYo7VOWTjOkfbR7e7 vIFUsO+AOP+dQfEgdJ8F1Y4IMFkYako8x5YyMm3CLMKB1RhV1vEyYVEA0R6mN7wO CRUdHjJFKvjYZimk630/Kd5/QRLURODy6fj+1HYRjeS9pJsFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ21JjPr3II3KKUEvmSkajMaBIFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvYTg0YmFmMTYtMDRjNS0z YmU2LWIyZmYtOTE5MzZhMjA3MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcayOllfxyXYhvd3tLZQbbC1KlSv74GeIsFMqhxz2ow0jNSrc11VWMq 2HHT02+HQdXiUoti+0WBVxihhQW73c81IJveK6S9Gxrn7+hTTaYCTdf+Thegzek4 +xP6atL7bG1eofCigdunSvpsIFZJZjaKSPI+El5I36Es3e+gvZ4pXnNOwyN66ci/ 5PlsNrwbZNDJ2gT81WJjkOqrZGCXD9gKKqIbS0q/Yf0AZjTM3aIpOsrKfmKkloGQ NJODZ/Mxb98gfiyFJXrCaSEKfErRebS5HA2HLnKWi2Yxcl55iMJE40hy4SI/l+A9 md2q00ig6iEwIbA+eTdjrQ/cISiw1MA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:51 2026 by rpki-client