$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa File: 8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa (raw, json) Hash identifier: eIPq7CVHav2khw/Xee8RWsl2bbfP8J7Zk2FExba1hSE= Subject key identifier: D0:6F:1B:CE:4C:88:37:56:BD:5F:21:EE:C3:56:AD:07:5D:F1:1D:27 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D386A482F263ACDDDCA669100 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397422 IP address blocks: 209.237.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:48:2f:26:3a:cd:dd:ca:66:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=34411af4-5d84-424f-80e6-c6eee6662199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:5b:ed:b7:74:52:02:c5:bf:21:4b:9c:d3: 33:66:b3:76:d9:dc:58:05:1a:38:e1:81:11:86:cd: ee:15:e5:b0:d9:5b:cb:85:f9:97:c1:4b:18:ed:56: 49:7f:5c:81:03:5c:31:d0:c4:f2:ac:9e:af:35:3e: 45:e1:1d:b3:00:b5:a9:af:ab:ad:6e:6f:31:0b:77: aa:ef:85:c9:a6:b3:41:c5:44:1a:9d:ae:14:48:8b: a2:79:48:27:32:42:57:4e:fc:a8:bd:b7:d5:a4:3d: a1:a2:7e:f8:d4:bc:be:03:05:7f:03:27:6b:94:40: 6d:5b:2e:64:6f:80:54:07:55:06:69:be:80:31:18: b4:ea:a7:1a:38:f1:e1:01:76:39:e2:e6:96:e5:2a: 71:b2:d9:5a:d6:d7:c7:97:3e:a1:e5:b7:06:84:e4: f3:10:cc:f0:da:a3:9c:73:db:19:4e:4b:1b:bb:c6: f4:0a:73:8a:9c:26:bf:a7:8b:6a:18:22:d3:11:c5: 4d:38:6f:f1:be:8d:f7:8b:da:ea:65:0c:71:fd:a1: 6e:50:20:8b:8f:f9:79:cf:f8:15:f8:bb:9f:02:f3: 99:65:fd:4e:19:0e:f3:74:98:71:c1:50:c4:16:ff: 7b:50:97:32:b9:8d:44:4e:ff:56:06:ea:51:7f:03: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6F:1B:CE:4C:88:37:56:BD:5F:21:EE:C3:56:AD:07:5D:F1:1D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:09:c7:5b:09:14:19:6b:61:59:5f:02:a0:4a:9b:fa:12:80: e1:c7:ef:76:4e:9c:d7:ee:95:17:3e:92:61:ad:1a:14:00:65: 56:82:99:6f:6c:18:28:32:f5:75:50:71:25:eb:fc:a4:d8:db: 99:ec:bb:1c:ef:f3:db:54:42:e3:d7:b0:90:7e:e7:47:28:39: b6:0b:69:26:7c:f3:33:bd:89:f3:e0:bb:51:df:a4:85:b6:1d: 85:d3:56:02:f5:b1:cf:8d:24:53:a3:b6:5e:aa:ce:1a:da:a6: a9:a8:08:8a:a7:db:60:30:1a:b6:9b:9d:d6:d5:15:fb:a1:34: 5c:c9:4f:3b:c3:9b:92:d8:55:f7:b0:a4:9d:1c:38:b3:39:f8: 79:5c:ef:be:71:3f:03:e0:27:4e:e2:56:b7:1e:95:7f:85:ea: c1:dc:05:af:1e:ed:fe:15:d5:a4:d7:4c:c7:cf:d5:54:a1:ad: 7d:99:0f:f7:6e:1d:bb:cd:d5:9f:28:1f:d4:ce:85:59:e8:9d: 7c:9b:56:4b:9e:e3:2b:d9:b7:4e:67:6b:36:78:95:6b:87:17: 31:c1:b1:97:58:41:5d:50:17:33:9e:4b:01:dd:ed:ad:25:25: 5b:70:bc:11:2a:f6:01:70:23:ae:1c:ba:45:84:b6:d6:10:8f: 55:b7:d0:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akgvJjrN3cpmkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MzQ0MTFhZjQtNWQ4NC00MjRmLTgwZTYtYzZlZWU2NjYyMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJhb7bd0UgLFvyFLnNMzZrN22dxYBRo44YER hs3uFeWw2VvLhfmXwUsY7VZJf1yBA1wx0MTyrJ6vNT5F4R2zALWpr6utbm8xC3eq 74XJprNBxUQana4USIuieUgnMkJXTvyovbfVpD2hon741Ly+AwV/AydrlEBtWy5k b4BUB1UGab6AMRi06qcaOPHhAXY54uaW5Spxstla1tfHlz6h5bcGhOTzEMzw2qOc c9sZTksbu8b0CnOKnCa/p4tqGCLTEcVNOG/xvo33i9rqZQxx/aFuUCCLj/l5z/gV +LufAvOZZf1OGQ7zdJhxwVDEFv97UJcyuY1ETv9WBupRfwNvFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBvG85MiDdWvV8h7sNWrQdd8R0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOGMzMzk1YzItOWE1Zi0z Zjg4LWEyZmItMzcwMmM4Zjc1YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIJx1sJFBlrYVlfAqBKm/oSgOHH73ZOnNfulRc+kmGtGhQAZVaCmW9s GCgy9XVQcSXr/KTY25nsuxzv89tUQuPXsJB+50coObYLaSZ88zO9ifPgu1HfpIW2 HYXTVgL1sc+NJFOjtl6qzhrapqmoCIqn22AwGrabndbVFfuhNFzJTzvDm5LYVfew pJ0cOLM5+Hlc775xPwPgJ07iVrcelX+F6sHcBa8e7f4V1aTXTMfP1VShrX2ZD/du HbvN1Z8oH9TOhVnonXybVkue4yvZt05nazZ4lWuHFzHBsZdYQV1QFzOeSwHd7a0l JVtwvBEq9gFwI64cukWEttYQj1W30O0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:32 2026 by rpki-client