$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa File: f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa (raw, json) Hash identifier: xvQfXk9MY6My7o3jYwjHB0CeRM+dAoK6qVFVPO19AZ8= Subject key identifier: B4:48:BA:FC:3B:9C:A8:FC:09:FF:7E:19:65:7C:93:C6:65:D6:BD:F0 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CA662F3B69034B26594E80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 10796 IP address blocks: 24.209.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:66:2f:3b:69:03:4b:26:59:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=28c2697b-01e8-4869-9adb-1068d8bc9e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a4:5e:01:08:fd:e4:57:65:bd:0b:ce:05:32: 85:4d:d6:57:51:3a:c6:f8:7f:b6:ab:f0:21:cd:a1: 70:16:04:5b:75:0e:c0:7b:a6:94:ce:81:b3:0a:cb: 6c:4f:f8:be:57:e8:78:4f:da:cf:74:5b:5a:e3:24: 4e:83:48:69:4f:32:99:4e:29:28:12:e5:31:4f:18: d4:22:48:fa:00:8a:af:38:c2:66:b2:61:6d:50:fd: 07:ff:74:cf:b5:a7:62:2c:13:51:23:d1:e1:b2:37: 06:44:88:83:67:e8:c2:72:21:62:f9:81:3a:5e:b1: f8:bc:0a:80:96:d8:26:dd:88:c6:1d:dd:19:4a:a8: 10:95:6f:c0:b6:ac:2d:4a:d0:96:eb:9b:fa:c0:13: d3:48:63:c5:09:c9:6c:99:92:90:c0:fe:a0:42:41: 36:78:bd:7d:64:f3:b5:9c:5c:c7:64:ba:6b:ff:8b: f0:59:ab:67:9a:7d:f4:6c:91:09:7b:59:c0:18:b7: 32:ea:c3:13:a7:6b:41:f3:82:c3:b1:b7:59:41:aa: c5:04:31:9e:85:9f:11:42:cf:11:01:3b:b8:f5:9e: 16:49:a2:64:85:30:32:91:bc:93:a7:87:d7:9c:d5: 2d:fb:91:15:61:c8:da:c7:0c:4a:30:ff:ac:ee:52: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:BA:FC:3B:9C:A8:FC:09:FF:7E:19:65:7C:93:C6:65:D6:BD:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.209.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9c:be:0b:80:93:2d:33:24:8f:85:20:6e:eb:2d:8b:6e:b7: 18:ba:f7:a7:3d:3f:4e:f0:51:39:43:e6:07:f5:38:e9:c2:93: 0e:9f:ad:62:d4:10:07:ca:a6:b9:75:5c:4f:37:aa:cb:45:1a: 49:4f:4a:e0:32:a2:08:06:48:23:9d:be:1b:ae:44:49:d5:5c: d9:69:b8:5b:be:c0:d1:f8:40:d3:2d:4d:e1:99:47:1c:df:50: 6a:e8:63:9a:94:8f:f8:1f:21:85:fa:b2:96:00:ec:29:d3:e1: ab:7e:6d:46:63:d8:6a:9b:c0:99:ea:c8:d5:89:cc:24:03:a7: 63:f2:80:f4:e7:92:55:d4:7e:65:35:5b:62:11:11:69:ad:ff: 53:32:75:b5:1b:49:c3:ac:86:09:8d:bf:1a:db:ca:4b:0f:c6: a7:39:ea:8b:63:05:b3:ee:58:d9:96:42:5f:bd:70:6b:e4:b1: 53:18:79:c4:a0:85:c4:50:9d:4e:06:8d:0a:14:cf:52:e8:d6: e7:0e:21:1f:98:05:96:ef:e4:60:58:13:d1:b7:06:1a:9d:4f: 08:98:02:04:71:13:c9:c3:3b:49:7d:1e:c9:52:e1:a1:fb:f6: 8b:3f:d6:9d:1b:bc:a2:9e:e0:8a:45:fe:6c:f9:6d:b3:a5:03: a7:13:6e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AymYvO2kDSyZZToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MjhjMjY5N2ItMDFlOC00ODY5LTlhZGItMTA2OGQ4YmM5ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaReAQj95FdlvQvOBTKFTdZXUTrG+H+2q/Ah zaFwFgRbdQ7Ae6aUzoGzCstsT/i+V+h4T9rPdFta4yROg0hpTzKZTikoEuUxTxjU Ikj6AIqvOMJmsmFtUP0H/3TPtadiLBNRI9HhsjcGRIiDZ+jCciFi+YE6XrH4vAqA ltgm3YjGHd0ZSqgQlW/AtqwtStCW65v6wBPTSGPFCclsmZKQwP6gQkE2eL19ZPO1 nFzHZLpr/4vwWatnmn30bJEJe1nAGLcy6sMTp2tB84LDsbdZQarFBDGehZ8RQs8R ATu49Z4WSaJkhTAykbyTp4fXnNUt+5EVYcjaxwxKMP+s7lKgVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRIuvw7nKj8Cf9+GWV8k8Zl1r3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjUzZDFiMTQtZDAzOS0z NTk2LWJjYmUtOGE0YTY3ZWE5MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGNGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEicvguAky0zJI+FIG7rLYtutxi696c9P07wUTlD5gf1OOnCkw6frWLU EAfKprl1XE83qstFGklPSuAyoggGSCOdvhuuREnVXNlpuFu+wNH4QNMtTeGZRxzf UGroY5qUj/gfIYX6spYA7CnT4at+bUZj2GqbwJnqyNWJzCQDp2PygPTnklXUfmU1 W2IREWmt/1MydbUbScOshgmNvxrbyksPxqc56otjBbPuWNmWQl+9cGvksVMYecSg hcRQnU4GjQoUz1Lo1ucOIR+YBZbv5GBYE9G3BhqdTwiYAgRxE8nDO0l9HslS4aH7 9os/1p0bvKKe4IpF/mz5bbOlA6cTbjE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:51 2026 by rpki-client