$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa File: e21aefd6-472c-3930-aa58-debd99be2072.roa (raw, json) Hash identifier: J1r86GoZkve8NIpTl5NkqFsUmbHxudQWluISGQSDH6I= Subject key identifier: 95:DD:01:EF:CF:63:67:D9:3C:3F:23:23:8A:A5:80:5D:28:47:48:E7 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584DC56597CA94758703726C9E00 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 395035 IP address blocks: 216.150.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:97:ca:94:75:87:03:72:6c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=fcb56e60-375e-49d9-9de1-72310eb440ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:9e:c1:fe:36:ba:0a:4d:b4:77:3c:de:6f: fd:9b:6e:d7:35:da:09:85:2f:e9:4a:6a:5b:07:ed: 5d:fc:cd:7e:db:90:f1:5b:68:df:8d:bc:18:5f:b9: 19:d2:49:55:c5:49:5b:bb:f6:10:6f:04:48:64:8f: 2f:03:b0:12:5c:fc:d4:52:69:1a:04:54:34:ae:35: 99:cc:79:1e:98:53:ca:81:bc:39:90:f4:cd:ab:b4: 01:15:c1:18:82:e9:b0:1f:6c:b2:c5:3d:ee:50:92: 83:8b:71:bf:38:61:9a:52:65:98:35:61:47:0d:ea: 31:3e:55:f4:9a:a2:cc:b8:9f:64:ad:de:f1:07:8f: 7d:9f:72:b5:82:11:01:99:b4:02:0a:6f:7b:ea:bc: e6:40:f5:cb:fd:70:fa:6b:07:c8:45:10:4d:4c:3b: c6:b3:b5:5e:aa:09:5b:80:e8:46:a4:76:a9:aa:16: ad:dd:2a:68:95:d3:b2:df:99:1e:ec:aa:bf:cb:46: d6:c7:21:3b:77:4a:45:dc:a7:1b:76:a5:73:a7:7e: 58:c6:4e:1a:96:a1:3f:af:19:cb:b5:66:da:9f:04: a3:02:05:0f:15:05:c6:04:59:85:59:ca:7f:c3:6a: 83:19:74:02:65:d2:69:93:8f:11:ac:51:f7:3f:f7: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:01:EF:CF:63:67:D9:3C:3F:23:23:8A:A5:80:5D:28:47:48:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/e21aefd6-472c-3930-aa58-debd99be2072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 216.150.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:95:30:2b:d8:da:80:a1:11:1e:35:74:df:9e:5c:e4:9d:90: 3e:eb:42:51:e2:5e:fe:0b:db:55:fb:8f:7c:74:01:95:37:af: 02:a1:a8:8a:54:68:15:f6:eb:01:4d:24:d0:f2:3f:d3:be:16: ed:49:8d:35:1f:a0:57:bf:9b:42:a7:f4:e1:a9:57:4b:80:ec: 79:bf:b5:49:59:2e:b0:62:36:2e:4f:65:a1:cd:97:ee:13:60: cd:1a:09:3e:12:71:81:4b:a6:82:3d:1d:bb:7f:49:e7:03:ee: c9:eb:b7:bd:2d:f3:1a:7f:b3:11:ae:02:3d:c1:92:57:56:c9: 05:32:57:d4:5a:90:9a:02:43:af:06:98:ea:f2:08:37:74:2d: 11:fa:e3:79:b1:44:f0:71:e6:e9:b2:4c:c9:13:c3:cf:4d:77: 20:f0:b5:da:55:7b:9f:30:0b:11:bd:69:63:c0:dc:22:42:98: 2b:8e:d8:4a:19:df:17:ad:3b:57:f9:aa:cc:c3:b9:34:88:a7: 92:9b:96:18:b9:b4:7f:5d:d4:48:50:d7:21:19:e4:d9:85:48: 8d:3a:14:0a:44:ea:06:ef:34:cc:f2:8e:49:d2:e3:c5:87:43: 30:3a:22:f6:0d:ef:1b:99:54:48:7d:c5:43:a5:36:07:c5:d4: db:0e:5f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZfKlHWHA3JsngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk ZmNiNTZlNjAtMzc1ZS00OWQ5LTlkZTEtNzIzMTBlYjQ0MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5eewf42ugpNtHc83m/9m27XNdoJhS/pSmpb B+1d/M1+25DxW2jfjbwYX7kZ0klVxUlbu/YQbwRIZI8vA7ASXPzUUmkaBFQ0rjWZ zHkemFPKgbw5kPTNq7QBFcEYgumwH2yyxT3uUJKDi3G/OGGaUmWYNWFHDeoxPlX0 mqLMuJ9krd7xB499n3K1ghEBmbQCCm976rzmQPXL/XD6awfIRRBNTDvGs7Veqglb gOhGpHapqhat3SpoldOy35ke7Kq/y0bWxyE7d0pF3KcbdqVzp35Yxk4alqE/rxnL tWbanwSjAgUPFQXGBFmFWcp/w2qDGXQCZdJpk48RrFH3P/dH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXdAe/PY2fZPD8jI4qlgF0oR0jnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZTIxYWVmZDYtNDcyYy0z OTMwLWFhNTgtZGViZDk5YmUyMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2JYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqVMCvY2oChER41dN+eXOSdkD7rQlHiXv4L21X7j3x0AZU3rwKhqIpU aBX26wFNJNDyP9O+Fu1JjTUfoFe/m0Kn9OGpV0uA7Hm/tUlZLrBiNi5PZaHNl+4T YM0aCT4ScYFLpoI9Hbt/SecD7snrt70t8xp/sxGuAj3BkldWyQUyV9RakJoCQ68G mOryCDd0LRH643mxRPBx5umyTMkTw89NdyDwtdpVe58wCxG9aWPA3CJCmCuO2EoZ 3xetO1f5qszDuTSIp5Kblhi5tH9d1EhQ1yEZ5NmFSI06FApE6gbvNMzyjknS48WH QzA6IvYN7xuZVEh9xUOlNgfF1NsOX1Y= -----END CERTIFICATE-----Generated at Wed May 13 13:18:00 2026 by rpki-client