$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa File: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json) Hash identifier: Xkj1/1PuxSqNOYs/ow3TdRg6ql9ko6uHqYUAMi4f61k= Subject key identifier: 3F:57:2A:61:AA:49:E0:8D:E5:7B:F3:DB:A5:EA:BE:67:1B:6F:56:6A Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F4328584DCAFAFD2FAEE70B0B72D0A880 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 3925 IP address blocks: 209.165.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:fd:2f:ae:e7:0b:0b:72:d0:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=9cff22fa-f874-4bc8-b2b8-8be897312fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:7c:86:9d:42:8c:6f:3f:d5:a0:16:94:e5: c1:07:cf:c5:8c:c8:aa:7f:1b:70:b8:79:16:01:c8: 47:1e:5a:a9:62:8f:d4:22:07:3e:71:4f:1c:2d:3f: c4:8f:d1:7c:c1:38:36:67:c6:a2:e5:c4:19:0f:78: 87:46:db:40:e2:e5:a3:2c:73:5c:d0:1d:ac:e1:e8: 93:f9:09:f9:02:08:a4:83:ed:f6:a7:82:b4:f4:b6: 7a:45:39:02:d6:73:19:63:10:f3:bc:d9:d8:e2:e0: 96:05:f9:4c:e3:85:35:37:e6:33:08:58:53:1f:23: 12:b9:24:a6:52:dc:95:d9:a1:cd:bd:00:6e:7f:d5: c8:2e:d5:97:fb:3c:b2:27:fa:ef:e9:ff:d0:96:32: 06:14:8f:56:15:fb:e9:50:fe:05:95:9d:5a:27:79: fe:26:c6:cc:86:90:33:8c:98:d1:12:b9:b7:24:59: 39:90:c3:15:18:ac:75:7f:d1:36:24:dc:ef:b9:51: f1:2d:9d:44:39:ca:b3:8a:f2:e7:40:bc:4f:9f:8f: ec:cd:97:57:90:b7:bc:8d:ed:5a:70:b2:48:a1:98: 4e:21:c1:b6:fa:12:bf:6a:60:c3:de:db:e5:e5:08: e3:23:a5:c9:c9:77:20:de:61:7d:91:0f:0e:c6:5b: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:57:2A:61:AA:49:E0:8D:E5:7B:F3:DB:A5:EA:BE:67:1B:6F:56:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:90:48:45:bf:44:b4:99:d0:bc:d5:b8:92:d5:42:fd:dd:04: bd:2b:23:a5:a1:1b:5a:c7:03:27:82:c1:11:00:50:b8:80:dc: 34:48:e3:3d:e8:98:62:41:7b:84:bf:35:7c:4a:f8:36:73:11: cf:84:3d:9d:7f:eb:2d:25:4b:92:0a:80:89:ad:0d:a9:93:fd: eb:42:13:1c:ca:c0:bf:ea:af:1b:5e:88:27:14:65:13:3a:99: 41:82:04:13:4e:83:cc:f6:c7:bd:e2:f6:6f:73:b0:be:f8:66: e9:b0:bf:36:c0:fb:80:1e:09:e2:6d:5a:7b:7e:98:bc:44:d4: f1:a0:60:19:47:ae:02:02:ac:ba:30:44:d0:6c:94:31:2a:05: 97:f2:db:6a:f2:00:77:76:24:83:d9:04:31:71:fc:ae:3a:78: 25:ce:9c:ee:e3:48:48:3f:3c:8b:3b:97:b9:80:0c:e2:01:ce: ec:95:e4:49:ca:0a:a6:40:1b:c6:36:47:8b:ef:30:7c:25:67: 28:58:4d:bd:7d:00:2e:22:f1:8c:28:fa:cb:e6:69:2c:dc:da: 83:25:71:9d:82:a9:30:d3:bd:71:a5:01:ca:e6:67:02:66:2e: 07:88:2d:b6:d8:3f:64:f2:23:7d:43:05:3f:6a:da:45:2b:e1: d1:11:e9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+v0vrucLC3LQqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk OWNmZjIyZmEtZjg3NC00YmM4LWIyYjgtOGJlODk3MzEyZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19p8hp1CjG8/1aAWlOXBB8/FjMiqfxtwuHkW AchHHlqpYo/UIgc+cU8cLT/Ej9F8wTg2Z8ai5cQZD3iHRttA4uWjLHNc0B2s4eiT +Qn5Agikg+32p4K09LZ6RTkC1nMZYxDzvNnY4uCWBflM44U1N+YzCFhTHyMSuSSm UtyV2aHNvQBuf9XILtWX+zyyJ/rv6f/QljIGFI9WFfvpUP4FlZ1aJ3n+JsbMhpAz jJjRErm3JFk5kMMVGKx1f9E2JNzvuVHxLZ1EOcqzivLnQLxPn4/szZdXkLe8je1a cLJIoZhOIcG2+hK/amDD3tvl5QjjI6XJyXcg3mF9kQ8OxlsDOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9XKmGqSeCN5Xvz26Xqvmcbb1ZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0aXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaQSEW/RLSZ0LzVuJLVQv3dBL0rI6WhG1rHAyeCwREAULiA3DRI4z3o mGJBe4S/NXxK+DZzEc+EPZ1/6y0lS5IKgImtDamT/etCExzKwL/qrxteiCcUZRM6 mUGCBBNOg8z2x73i9m9zsL74ZumwvzbA+4AeCeJtWnt+mLxE1PGgYBlHrgICrLow RNBslDEqBZfy22ryAHd2JIPZBDFx/K46eCXOnO7jSEg/PIs7l7mADOIBzuyV5EnK CqZAG8Y2R4vvMHwlZyhYTb19AC4i8Ywo+svmaSzc2oMlcZ2CqTDTvXGlAcrmZwJm LgeILbbYP2TyI31DBT9q2kUr4dER6d4= -----END CERTIFICATE-----Generated at Wed May 13 17:18:29 2026 by rpki-client