$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa File: 888b4e53-c390-3724-b441-2f69dabf74f6.roa (raw, json) Hash identifier: aTfQCaATfy9c+41JtJW6QUYoKGI0DQ8teqTiW5KZHEI= Subject key identifier: C6:14:A3:61:B8:1D:06:0C:BA:9E:2A:6A:2E:9D:7C:56:0D:89:69:CA Certificate issuer: /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Certificate serial: 010D0C9F4328584DA6B01BD943BAB56820FDE228 Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 21859 IP address blocks: 209.97.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1b:d9:43:ba:b5:68:20:fd:e2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=2685ddb1-8021-4998-bb92-1e63fd8bd6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:80:b3:19:a2:bb:e8:63:dd:0b:33:3b:3f: f2:27:7a:62:bd:cc:ce:40:1f:4f:17:d9:50:91:d0: 60:55:87:aa:78:f4:42:c5:75:22:00:45:1e:38:29: 94:6d:27:22:87:21:38:67:0e:5f:c2:81:e4:cb:0f: b4:f1:2e:ed:10:60:e3:4a:c8:0b:d2:02:3f:eb:95: dc:df:7a:72:cc:40:9f:90:7b:5e:3d:24:5b:e1:b6: 29:5f:4f:f5:79:fe:54:f0:49:e7:ab:be:f8:31:e2: e4:93:ad:b8:92:f8:c5:02:78:df:f8:b6:0a:f7:90: 5e:c4:af:98:90:c9:26:7e:4d:68:2c:89:35:b9:e4: 54:fa:7a:8b:ad:4a:82:e0:9f:c7:d5:c4:f5:2a:2d: b8:f5:88:ae:a6:62:98:45:7f:47:c0:89:ca:91:46: b9:24:0c:2d:21:cd:94:0e:5c:e0:af:80:40:ae:c3: fd:23:70:a6:5a:46:57:1c:73:d1:c4:4e:fd:3a:43: 0b:de:dd:af:08:a5:88:35:81:b0:f4:e9:1c:c0:df: fc:66:74:ae:ec:25:14:ed:ae:8a:92:34:3e:44:36: 79:ca:8a:ef:3f:82:7b:18:5f:60:ad:ad:f4:d9:75: 7e:d2:ef:4f:42:40:6d:50:02:b9:78:83:00:8f:08: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:14:A3:61:B8:1D:06:0C:BA:9E:2A:6A:2E:9D:7C:56:0D:89:69:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl X509v3 Authority Key Identifier: keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer sbgp-ipAddrBlock: critical IPv4: 209.97.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:60:c7:04:cd:6f:62:a3:27:d8:e5:d8:65:33:b1:59:e9:d0: 94:ba:bd:39:d7:e5:94:8e:8f:ec:3a:80:fb:be:f6:d6:d9:16: 4f:be:f4:89:c7:de:70:45:32:1f:af:0c:18:93:97:c8:91:4a: 77:16:9c:6b:cd:1d:c8:af:6e:a5:34:32:a6:a6:ec:92:f6:d2: de:5f:9d:e8:e1:85:2e:cd:bb:56:62:a2:4f:a5:a0:46:79:40: a5:90:9e:ba:90:58:86:30:7a:46:b1:c8:8f:5f:e6:69:8a:22: 88:1f:5a:0c:e0:ad:26:a1:9d:44:66:1c:82:e3:3b:fa:db:ec: 1e:af:15:dc:f2:64:e6:24:d8:17:43:e5:fd:ab:39:57:59:8a: a1:ac:bb:b1:be:45:5d:a2:8b:28:5e:e8:a5:06:98:e4:7c:7a: 06:1d:91:74:3a:cc:67:28:37:84:8d:47:69:1f:f7:11:eb:8e: 7f:b7:70:bb:18:49:22:d6:d7:1f:19:c4:23:17:eb:12:c9:61: 8a:66:c1:6e:c8:3b:47:28:9e:87:82:f6:50:03:27:b0:5f:c5: b5:22:f8:56:4a:a0:f4:c2:1d:f2:30:8c:3e:7b:62:80:ee:44: 23:d9:b9:52:47:b3:64:a3:f0:23:25:a4:79:2d:78:5c:48:ce: 93:ea:03:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBvZQ7q1aCD94igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVlYzgzNTktNGVkZS00MDM2LTg3MDItMjNlNWRkMzdh OWJhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MjY4NWRkYjEtODAyMS00OTk4LWJiOTItMWU2M2ZkOGJkNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh86Asxmiu+hj3QszOz/yJ3pivczOQB9PF9lQ kdBgVYeqePRCxXUiAEUeOCmUbScihyE4Zw5fwoHkyw+08S7tEGDjSsgL0gI/65Xc 33pyzECfkHtePSRb4bYpX0/1ef5U8Ennq774MeLkk624kvjFAnjf+LYK95BexK+Y kMkmfk1oLIk1ueRU+nqLrUqC4J/H1cT1Ki249YiupmKYRX9HwInKkUa5JAwtIc2U Dlzgr4BArsP9I3CmWkZXHHPRxE79OkML3t2vCKWINYGw9OkcwN/8ZnSu7CUU7a6K kjQ+RDZ5yorvP4J7GF9gra302XV+0u9PQkBtUAK5eIMAjwjKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYUo2G4HQYMup4qai6dfFYNiWnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVj ODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQzN2E5YmEvODg4YjRlNTMtYzM5MC0z NzI0LWI0NDEtMmY2OWRhYmY3NGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDVlYzgzNTktNGVkZS00MDM2LTg3 MDItMjNlNWRkMzdhOWJhLzA1ZWM4MzU5LTRlZGUtNDAzNi04NzAyLTIzZTVkZDM3 YTliYS5jcmwwHwYDVR0jBBgwFoAUNgroAyQrusZ1eDIsFKW5XRFaAJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1 ZGQzN2E5YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBgxwTNb2KjJ9jl2GUzsVnp0JS6vTnX5ZSOj+w6gPu+9tbZFk++9InH 3nBFMh+vDBiTl8iRSncWnGvNHcivbqU0Mqam7JL20t5fnejhhS7Nu1Ziok+loEZ5 QKWQnrqQWIYwekaxyI9f5mmKIogfWgzgrSahnURmHILjO/rb7B6vFdzyZOYk2BdD 5f2rOVdZiqGsu7G+RV2iiyhe6KUGmOR8egYdkXQ6zGcoN4SNR2kf9xHrjn+3cLsY SSLW1x8ZxCMX6xLJYYpmwW7IO0conoeC9lADJ7BfxbUi+FZKoPTCHfIwjD57YoDu RCPZuVJHs2Sj8CMlpHkteFxIzpPqA/s= -----END CERTIFICATE-----Generated at Wed May 13 13:20:11 2026 by rpki-client