$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa File: 9900922b-5c2f-374f-b782-511c12d98afb.roa (raw, json) Hash identifier: yHBjEIugkUz/LvkVywofJijdXQKRLApzrA+OKYv3pqk= Subject key identifier: B8:81:89:45:AE:D6:14:89:8B:9B:4E:75:88:2F:A1:BC:A2:01:FA:A2 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584DB1DAD54C33A764825333B340 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 14090 IP address blocks: 209.243.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d5:4c:33:a7:64:82:53:33:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=775eb417-67aa-4a7e-b108-afa4fb26e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:27:0e:49:c1:7b:de:56:23:da:7e:c5:59: 98:aa:9d:63:7c:66:b8:b6:62:38:66:40:65:eb:98: d1:f5:25:bf:63:26:b9:23:16:0f:b2:db:26:6c:d9: ba:d7:f3:c7:3d:e6:ee:ad:66:75:69:17:12:db:98: 46:61:29:72:33:93:b3:c6:1b:de:f0:c8:56:ca:8e: 57:11:e5:34:83:f2:98:66:86:95:bd:0f:33:17:49: a8:88:da:54:ec:e4:57:37:af:79:74:d2:43:73:bd: 1f:65:2f:6d:1b:ea:79:58:0c:6f:e8:28:87:84:65: e3:c2:c2:af:2a:30:c9:5b:9c:4b:b8:d2:1b:34:d2: a7:10:41:2a:12:b0:8c:b2:80:b7:6e:34:2b:d8:cb: 35:3b:3d:c2:89:47:33:50:45:52:ad:58:5f:39:1d: 63:a7:52:cb:c2:4b:f7:35:8d:07:4d:72:f2:bf:9e: 85:2e:50:ff:05:2e:15:82:ab:bf:89:36:fe:fa:53: 5d:63:51:20:56:a8:cd:22:5d:76:fa:15:4b:ac:a7: 9a:d2:79:d9:68:b0:1e:ec:29:4b:4e:05:21:03:fb: de:1c:1e:24:38:de:d2:65:89:66:91:68:45:b0:87: bf:9a:bc:7b:d2:1f:9d:10:c6:16:59:2d:a9:15:a6: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:89:45:AE:D6:14:89:8B:9B:4E:75:88:2F:A1:BC:A2:01:FA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 209.243.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:82:d2:03:58:92:57:55:bc:b6:34:4a:92:65:02:c5:3d:8d: df:3b:6e:a3:f8:5f:d0:80:e7:d9:90:78:7f:aa:c5:cf:1e:8a: 87:78:24:4d:78:9a:ad:c3:a3:e0:77:cf:9e:7b:b5:63:4b:22: d8:54:d3:1c:66:1b:28:e8:b3:05:78:c4:c5:2b:dd:63:57:2f: 96:ce:0b:b9:8d:b8:12:c6:c8:7d:28:1a:73:3f:58:e8:1c:00: e2:a8:b9:f7:ff:c9:b7:6b:79:48:96:ce:4e:f8:d4:34:5b:d2: 2e:79:62:71:17:a1:c9:d8:7f:77:d8:21:44:1a:ca:1d:f3:27: 91:ab:16:13:bd:5c:2e:df:ae:4c:71:75:84:f4:53:42:a0:24: 42:9a:35:5b:08:0f:fb:0f:e8:83:dc:be:7b:79:89:9b:ab:93: f9:ee:59:53:7f:24:4f:d4:4a:6b:07:76:b0:d0:58:a4:8c:3c: 5e:a5:d5:f3:3d:b5:2d:bd:bf:53:07:0a:7e:d6:2d:d7:15:77: 4f:e5:a5:72:fd:84:30:b7:71:36:d5:5a:01:2e:47:b8:3f:91: bf:56:e8:71:a7:80:f2:43:b4:48:b8:43:d2:e3:fc:0c:25:04: cd:a4:78:06:92:a4:af:9e:5a:7e:f0:dd:7b:0a:1c:79:fc:3c: b7:d5:a9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tVMM6dkglMzs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk Nzc1ZWI0MTctNjdhYS00YTdlLWIxMDgtYWZhNGZiMjZlOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWMnDknBe95WI9p+xVmYqp1jfGa4tmI4ZkBl 65jR9SW/Yya5IxYPstsmbNm61/PHPeburWZ1aRcS25hGYSlyM5Ozxhve8MhWyo5X EeU0g/KYZoaVvQ8zF0moiNpU7ORXN695dNJDc70fZS9tG+p5WAxv6CiHhGXjwsKv KjDJW5xLuNIbNNKnEEEqErCMsoC3bjQr2Ms1Oz3CiUczUEVSrVhfOR1jp1LLwkv3 NY0HTXLyv56FLlD/BS4Vgqu/iTb++lNdY1EgVqjNIl12+hVLrKea0nnZaLAe7ClL TgUhA/veHB4kON7SZYlmkWhFsIe/mrx70h+dEMYWWS2pFab0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiBiUWu1hSJi5tOdYgvobyiAfqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvOTkwMDkyMmItNWMyZi0z NzRmLWI3ODItNTExYzEyZDk4YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaC0gNYkldVvLY0SpJlAsU9jd87bqP4X9CA59mQeH+qxc8eiod4JE14 mq3Do+B3z557tWNLIthU0xxmGyjoswV4xMUr3WNXL5bOC7mNuBLGyH0oGnM/WOgc AOKouff/ybdreUiWzk741DRb0i55YnEXocnYf3fYIUQayh3zJ5GrFhO9XC7frkxx dYT0U0KgJEKaNVsID/sP6IPcvnt5iZurk/nuWVN/JE/USmsHdrDQWKSMPF6l1fM9 tS29v1MHCn7WLdcVd0/lpXL9hDC3cTbVWgEuR7g/kb9W6HGngPJDtEi4Q9Lj/Awl BM2keAaSpK+eWn7w3XsKHHn8PLfVqcA= -----END CERTIFICATE-----Generated at Wed May 13 08:40:29 2026 by rpki-client