$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa File: c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa (raw, json) Hash identifier: t8szeb4q2QTx5HKZC3zw9nYDht0qua+r7YbzMIuxkuM= Subject key identifier: AB:3F:1B:2D:FF:0F:AD:8D:05:A6:39:79:4E:48:3D:20:8E:A0:3C:C5 Certificate issuer: /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed Certificate serial: 010D0C9F4328584D92A55902CAE657158D3EFF30 Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa Signing time: Mon 20 Apr 2026 20:42:45 +0000 ROA not before: Mon 20 Apr 2026 20:42:45 +0000 ROA not after: Sun 19 Jul 2026 20:42:45 +0000 asID: 402239 IP address blocks: 209.204.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:a5:59:02:ca:e6:57:15:8d:3e:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed Validity Not Before: Apr 20 20:42:45 2026 GMT Not After : Jul 19 20:42:45 2026 GMT Subject: CN=da9105b8-4c0e-4dd5-9d2f-e23e32582119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:08:6a:01:9d:c6:dd:17:5a:dd:fa:55:05: 1b:09:54:ec:c6:16:b4:da:ff:9d:87:20:af:a7:25: 97:e2:57:aa:68:9b:39:3d:e9:3a:ca:7c:28:fa:15: 20:09:18:ba:7c:e2:c0:33:da:82:3d:cc:73:7b:a1: d7:01:f3:58:0b:72:e7:d7:75:14:28:1d:61:76:7c: 75:f2:4b:6a:0a:61:d7:e9:46:45:ea:ab:b5:15:54: 3b:e4:05:36:6b:cc:09:95:fd:67:5c:11:88:ab:0a: 67:42:f1:9f:5c:83:4d:a0:aa:95:f5:08:4b:b4:82: 98:2e:7f:ec:1d:e0:7e:0b:4b:79:6d:21:35:70:b6: d7:93:31:51:9a:03:22:4f:a6:87:f6:21:da:f8:13: ba:69:96:65:dc:9f:7c:b9:bb:95:46:cb:ac:9a:70: ac:52:9e:48:9b:19:f4:64:f5:74:ef:53:68:cf:c0: 3b:5c:2d:77:2e:7b:53:49:40:ae:41:81:9d:aa:03: 00:c3:a5:86:89:32:a2:70:19:6c:32:1d:ed:e2:83: 9f:18:f9:92:72:aa:df:42:b5:6c:6c:e7:0c:2f:82: 41:d1:8d:1f:3a:56:9c:51:79:1d:e0:aa:29:5a:20: 28:77:a7:b3:78:f1:d0:b0:ea:11:8b:9f:30:36:83: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3F:1B:2D:FF:0F:AD:8D:05:A6:39:79:4E:48:3D:20:8E:A0:3C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl X509v3 Authority Key Identifier: keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer sbgp-ipAddrBlock: critical IPv4: 209.204.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:06:f9:9c:83:28:71:ef:75:92:aa:9e:d6:aa:11:1f:ae:8b: 7b:6f:27:79:0d:e1:f0:32:46:e2:0c:b8:1b:83:4a:3b:94:fd: da:9c:dd:29:fc:80:19:26:6b:77:7c:bd:50:27:79:34:26:28: 35:ce:30:84:07:e7:8f:ea:50:ad:6a:87:79:e2:f6:75:60:03: 72:d1:87:fe:f5:ce:58:37:b0:8e:9a:d7:54:d9:f8:60:c8:50: e6:84:a7:2b:f7:75:53:ee:f4:15:df:44:47:7b:fe:94:46:ac: 3c:c3:f7:b3:be:6a:47:c9:3e:a3:05:90:4c:ec:b1:40:9c:5a: eb:84:2d:17:63:c6:a6:f2:c2:b5:37:49:6c:2a:83:67:ca:9a: a0:7c:a7:9d:c2:57:fd:0f:67:ea:e3:43:c0:f3:39:fa:f7:ec: 0c:12:56:82:b4:a3:d0:cd:b9:f0:f7:8a:e7:3c:f3:93:ff:aa: 08:fb:9b:30:97:02:28:1a:83:c7:49:fb:4e:71:4a:24:57:a5: 7e:80:11:18:e4:5c:d7:52:d8:3f:4b:a0:3a:06:65:ce:f8:e3: 80:ef:53:a1:9b:bd:95:e9:41:9a:18:b5:38:c1:61:ef:e7:54: 06:74:09:7c:3e:d5:1e:2b:13:f6:b1:2a:65:22:9a:2e:b9:9d: 5f:3c:37:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2SpVkCyuZXFY0+/zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTQzNjctM2EwZC00NTBjLWFiMmUtOWI4Zjg0ZTQz NmVkMB4XDTI2MDQyMDIwNDI0NVoXDTI2MDcxOTIwNDI0NVowLzEtMCsGA1UEAxMk ZGE5MTA1YjgtNGMwZS00ZGQ1LTlkMmYtZTIzZTMyNTgyMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYcIagGdxt0XWt36VQUbCVTsxha02v+dhyCv pyWX4leqaJs5Pek6ynwo+hUgCRi6fOLAM9qCPcxze6HXAfNYC3Ln13UUKB1hdnx1 8ktqCmHX6UZF6qu1FVQ75AU2a8wJlf1nXBGIqwpnQvGfXINNoKqV9QhLtIKYLn/s HeB+C0t5bSE1cLbXkzFRmgMiT6aH9iHa+BO6aZZl3J98ubuVRsusmnCsUp5Imxn0 ZPV071Noz8A7XC13LntTSUCuQYGdqgMAw6WGiTKicBlsMh3t4oOfGPmScqrfQrVs bOcML4JB0Y0fOlacUXkd4KopWiAod6ezePHQsOoRi58wNoPkxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs/Gy3/D62NBaY5eU5IPSCOoDzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZh NDM2Ny0zYTBkLTQ1MGMtYWIyZS05YjhmODRlNDM2ZWQvYzM2MTlhYTgtMzNjMC0z YzUwLWE1ZmUtM2YyNDg2OGUyODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTY2YTQzNjctM2EwZC00NTBjLWFi MmUtOWI4Zjg0ZTQzNmVkL2E2NmE0MzY3LTNhMGQtNDUwYy1hYjJlLTliOGY4NGU0 MzZlZC5jcmwwHwYDVR0jBBgwFoAUfPUMrnxr5if+Q4YV78nJWRe2CTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZhNDM2Ny0zYTBkLTQ1MGMtYWIyZS05Yjhm ODRlNDM2ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkG+ZyDKHHvdZKqntaqER+ui3tvJ3kN4fAyRuIMuBuDSjuU/dqc3Sn8 gBkma3d8vVAneTQmKDXOMIQH54/qUK1qh3ni9nVgA3LRh/71zlg3sI6a11TZ+GDI UOaEpyv3dVPu9BXfREd7/pRGrDzD97O+akfJPqMFkEzssUCcWuuELRdjxqbywrU3 SWwqg2fKmqB8p53CV/0PZ+rjQ8DzOfr37AwSVoK0o9DNufD3iuc885P/qgj7mzCX Aigag8dJ+05xSiRXpX6AERjkXNdS2D9LoDoGZc7444DvU6GbvZXpQZoYtTjBYe/n VAZ0CXw+1R4rE/axKmUimi65nV88Nyc= -----END CERTIFICATE-----Generated at Wed May 13 10:40:16 2026 by rpki-client