$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa File: 6910e57a-19e1-35c1-a202-faf2127b1fe1.roa (raw, json) Hash identifier: 9XUKzCWEpDqP/AVqWazH4CoCIoTdd8ZEXSoINzGzVRE= Subject key identifier: 5F:01:00:7C:27:24:7B:3C:F9:62:4C:34:AC:B4:81:C8:FE:53:D9:05 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584DA8157D772F17E291B329CB80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 209.114.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:7d:77:2f:17:e2:91:b3:29:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=9e4a01f1-f87d-4c05-ac53-9b13b5209722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:f8:ae:be:9b:27:2f:e0:5c:04:57:06:1a: e8:4d:02:20:a1:da:2e:76:c0:2a:a8:92:7c:10:bc: 57:c5:01:de:cc:95:b9:80:88:25:fe:4a:6d:2b:2f: 9e:96:47:f9:fc:d2:40:59:e0:78:95:1c:23:c8:22: be:b7:ad:9b:13:fd:36:10:c2:06:23:b5:0c:71:f7: 4b:c5:44:be:84:85:fa:4f:d1:55:06:64:6f:3d:1f: 26:6d:ae:6b:cc:a6:1f:34:74:14:4f:df:72:16:80: f4:51:d5:d7:86:1e:16:21:58:ad:f8:cb:25:e7:ca: b5:8d:5f:68:db:eb:c5:96:6a:65:b6:4c:82:4b:30: 9e:bb:48:33:07:40:7e:8f:cc:a4:4a:ec:dd:12:79: 23:aa:ac:f2:b3:5c:23:1d:dc:3f:53:1e:ee:ee:19: 37:a6:2b:5f:e3:08:9f:c0:fc:04:4e:23:98:b8:fc: 72:dd:21:b2:ea:dc:79:81:99:b9:8e:0e:4c:e1:77: 35:0e:2f:ef:39:9a:38:36:5e:68:11:34:12:72:05: c8:93:cb:ee:dd:e4:ca:f1:35:27:33:27:3f:89:07: 37:8d:2b:1c:9b:ae:99:e2:77:1d:11:1a:fa:d6:eb: d8:0b:4d:c2:b7:69:45:6f:c2:7a:0c:60:43:10:5d: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:01:00:7C:27:24:7B:3C:F9:62:4C:34:AC:B4:81:C8:FE:53:D9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9e:43:f1:35:c3:07:65:57:57:e3:3d:f6:7a:f3:75:8b:93: 67:1f:1b:ed:59:f7:c3:5a:a7:68:8a:07:e2:00:b0:b3:da:19: e6:9f:e5:9a:44:93:db:2d:99:f3:ec:80:19:4a:16:9b:b9:f4: 45:92:95:ea:04:27:e1:e9:df:da:6a:28:bd:7c:a9:0a:9b:23: f3:b7:d7:d2:dc:7e:4f:f7:10:ae:ea:c2:3f:7d:07:30:35:dc: 9d:b5:11:76:78:9d:7b:d7:e4:93:ee:4b:a8:c0:44:14:18:d2: 6b:81:ac:da:17:f2:ac:e1:b5:c8:c5:1e:17:c9:d0:07:8c:6f: c7:b5:c9:23:e8:fb:8f:45:2a:aa:02:1a:52:d2:b5:c5:0e:d7: e5:3c:6d:7a:a8:7b:62:f4:ab:72:37:0e:b1:4f:8f:ee:6d:a1: cb:30:32:1c:29:83:c8:f5:2b:de:a7:19:8d:7c:45:7e:71:5c: 21:c8:fd:78:ea:55:67:89:bb:25:82:85:45:cb:98:1f:8c:d7: dd:ad:ec:ab:4d:7f:85:82:e8:86:aa:30:ef:41:c8:a1:96:3e: 9a:6f:26:01:01:4f:a7:66:d8:5e:1e:6a:37:8d:78:cd:d1:68: 22:56:ee:91:89:4c:49:f7:d2:5a:ef:49:37:36:6d:d5:f8:7a: bb:68:dc:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFX13LxfikbMpy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk OWU0YTAxZjEtZjg3ZC00YzA1LWFjNTMtOWIxM2I1MjA5NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mn4rr6bJy/gXARXBhroTQIgodoudsAqqJJ8 ELxXxQHezJW5gIgl/kptKy+elkf5/NJAWeB4lRwjyCK+t62bE/02EMIGI7UMcfdL xUS+hIX6T9FVBmRvPR8mba5rzKYfNHQUT99yFoD0UdXXhh4WIVit+Msl58q1jV9o 2+vFlmpltkyCSzCeu0gzB0B+j8ykSuzdEnkjqqzys1wjHdw/Ux7u7hk3pitf4wif wPwETiOYuPxy3SGy6tx5gZm5jg5M4Xc1Di/vOZo4Nl5oETQScgXIk8vu3eTK8TUn Myc/iQc3jSscm66Z4ncdERr61uvYC03Ct2lFb8J6DGBDEF1tVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8BAHwnJHs8+WJMNKy0gcj+U9kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNjkxMGU1N2EtMTllMS0z NWMxLWEyMDItZmFmMjEyN2IxZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqeQ/E1wwdlV1fjPfZ683WLk2cfG+1Z98Nap2iKB+IAsLPaGeaf5ZpE k9stmfPsgBlKFpu59EWSleoEJ+Hp39pqKL18qQqbI/O319Lcfk/3EK7qwj99BzA1 3J21EXZ4nXvX5JPuS6jARBQY0muBrNoX8qzhtcjFHhfJ0AeMb8e1ySPo+49FKqoC GlLStcUO1+U8bXqoe2L0q3I3DrFPj+5tocswMhwpg8j1K96nGY18RX5xXCHI/Xjq VWeJuyWChUXLmB+M192t7KtNf4WC6IaqMO9ByKGWPppvJgEBT6dm2F4eajeNeM3R aCJW7pGJTEn30lrvSTc2bdX4erto3Ps= -----END CERTIFICATE-----Generated at Wed May 13 15:59:34 2026 by rpki-client