$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: j/Apx4plhFRXTOQ2v2kfDiSwwzg+hSnp8oMwbvDV39g= Subject key identifier: 49:B5:82:C2:AD:5C:B9:95:42:D2:47:6F:A7:58:EF:DF:10:67:BA:DD Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D343A1D526455D34E3BCC9B00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1d:52:64:55:d3:4e:3b:cc:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=1add1559-63d2-433b-a9ba-e23afd0961b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:25:ce:9d:d1:00:41:2b:98:c8:7d:57:08: 16:01:1f:3c:3b:44:fc:67:d2:89:4e:b5:7b:30:be: c0:24:11:b5:5e:fb:77:da:1c:b3:a5:da:7a:14:73: 58:c9:af:d4:12:2e:6f:67:4a:13:d6:29:81:5a:1d: 4a:2f:b2:4c:ed:ff:e5:c2:e4:e8:4e:f8:10:54:6b: 9c:d1:82:7e:f1:b8:a0:99:ae:c2:9d:13:c4:ca:18: bb:01:5c:2b:3f:f2:ca:a9:46:be:c0:3c:7f:56:5d: 3f:7e:5f:ab:68:47:5d:0a:c6:3b:fd:fe:39:bb:0b: a0:ac:4e:6f:16:10:89:98:cb:fe:18:19:7e:3f:16: 8a:6a:dc:22:fe:0c:d9:6d:a9:ab:7c:5e:b9:54:a1: 53:b3:31:2e:8b:59:06:f9:40:27:c8:03:fc:c0:fa: 88:85:ad:22:c8:88:29:de:0f:de:97:a9:70:4b:7b: d5:5e:68:94:50:4a:3f:ac:c5:98:34:c5:63:7b:91: 25:fd:74:db:04:d9:24:d6:28:f7:cf:e9:6a:7c:a5: a6:85:41:d0:9d:4a:64:56:ea:dc:93:3c:92:87:e2: 73:73:a4:20:24:a0:f1:78:ad:83:02:91:f5:c8:3f: 19:ca:1b:fd:f6:b5:9d:d8:58:34:f8:d5:ac:2c:b2: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:82:C2:AD:5C:B9:95:42:D2:47:6F:A7:58:EF:DF:10:67:BA:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fe:75:e0:f9:15:32:7e:c5:a5:4d:65:44:1a:38:78:16:0d: f2:d1:08:5f:d5:a4:55:0a:a1:3a:3c:60:46:4c:bb:69:41:6f: 9e:63:bd:ad:29:75:e8:43:15:f4:0a:86:22:e9:59:ae:55:79: 38:63:3a:59:2c:68:c2:2e:e2:c4:57:06:9e:44:80:42:f7:0c: 0d:7f:90:28:9c:a9:64:7b:85:3e:7b:63:a6:ed:92:85:c6:aa: 6a:f6:25:a1:10:ab:bb:c0:d5:48:71:fc:07:f3:3a:e6:aa:3f: ae:72:8b:50:22:9d:40:66:34:61:76:f6:86:81:6d:a2:af:dd: bb:7f:cf:50:3c:88:19:b3:ca:12:b3:9e:6a:d7:08:42:e5:01: f3:f6:1f:bf:06:1b:fa:89:8e:34:e1:22:d6:18:e3:ae:b2:c1: 04:3d:ff:66:63:57:10:73:1f:be:be:4f:bb:e1:7d:0b:0d:b0: 79:47:8f:f8:a0:6f:cf:21:af:37:29:b0:a6:d4:01:3e:d0:75: dd:b1:61:fe:3f:d3:51:47:93:32:3d:f5:a8:9f:5b:30:a9:db: 44:52:aa:07:1e:bf:ad:6c:71:95:50:96:11:5e:d2:9b:58:fb: 41:9e:3a:1b:d0:7a:2f:18:ce:5f:51:6a:e2:c3:a3:e9:2b:63: 2f:28:ab:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oh1SZFXTTjvMmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MWFkZDE1NTktNjNkMi00MzNiLWE5YmEtZTIzYWZkMDk2MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j0lzp3RAEErmMh9VwgWAR88O0T8Z9KJTrV7 ML7AJBG1Xvt32hyzpdp6FHNYya/UEi5vZ0oT1imBWh1KL7JM7f/lwuToTvgQVGuc 0YJ+8bigma7CnRPEyhi7AVwrP/LKqUa+wDx/Vl0/fl+raEddCsY7/f45uwugrE5v FhCJmMv+GBl+PxaKatwi/gzZbamrfF65VKFTszEui1kG+UAnyAP8wPqIha0iyIgp 3g/el6lwS3vVXmiUUEo/rMWYNMVje5El/XTbBNkk1ij3z+lqfKWmhUHQnUpkVurc kzySh+Jzc6QgJKDxeK2DApH1yD8Zyhv99rWd2Fg0+NWsLLLYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm1gsKtXLmVQtJHb6dY798QZ7rdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv+deD5FTJ+xaVNZUQaOHgWDfLRCF/VpFUKoTo8YEZMu2lBb55jva0p dehDFfQKhiLpWa5VeThjOlksaMIu4sRXBp5EgEL3DA1/kCicqWR7hT57Y6btkoXG qmr2JaEQq7vA1Uhx/AfzOuaqP65yi1AinUBmNGF29oaBbaKv3bt/z1A8iBmzyhKz nmrXCELlAfP2H78GG/qJjjThItYY466ywQQ9/2ZjVxBzH76+T7vhfQsNsHlHj/ig b88hrzcpsKbUAT7Qdd2xYf4/01FHkzI99aifWzCp20RSqgcev61scZVQlhFe0ptY +0GeOhvQei8Yzl9RauLDo+krYy8oq8I= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:23 2026 by rpki-client