$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa File: 84273be5-301a-3d96-8539-4750e24fcce2.roa (raw, json) Hash identifier: envukVxT4eKk/Jh0OM01Q0xzoD2ItMKt4fvQzGMYCDQ= Subject key identifier: 15:8E:A2:A8:0C:25:F8:88:B5:4C:68:6D:D4:29:4E:40:4B:54:D6:87 Certificate issuer: /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Certificate serial: 010D0C9F4328584D40CA373E7D3C356E6776BF80 Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 69.52.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:37:3e:7d:3c:35:6e:67:76:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=dbb9896f-34c9-42ff-9e01-0b5dea473ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:ab:5a:76:67:5c:ff:50:bc:18:65:92:16: 47:64:a5:ac:5f:bd:46:f3:03:46:17:c9:82:b0:b1: 85:81:fd:62:b4:9e:ed:ff:75:24:43:5d:04:d0:57: 89:5c:95:b5:5e:c8:9b:e6:b0:f7:e6:9f:bb:05:5a: c0:a2:08:40:4b:d1:01:ea:1e:87:99:c3:99:f7:e1: da:ce:83:79:0b:32:d2:a5:c3:bf:19:77:8b:32:e7: c2:dc:b7:cd:db:b9:22:bf:e3:41:2c:09:95:6c:9f: 84:67:55:8c:b1:2e:81:bc:76:3e:99:09:10:bb:74: e2:1f:14:be:27:1a:b3:ac:20:73:59:c8:3e:46:7a: 1a:ed:f8:86:41:24:83:f1:0f:0f:02:23:be:03:95: 1e:b1:8c:81:5e:35:20:bf:66:a9:d8:68:78:2c:31: 28:a8:54:dd:cc:5a:1e:20:8f:39:91:6d:95:67:82: fc:34:b2:4a:f4:38:b5:e4:9c:f1:8e:33:24:8c:10: aa:79:10:a0:40:5c:6f:07:22:33:7a:2b:79:5a:c0: d1:ff:c5:fe:06:da:7b:58:5d:6a:fb:21:2d:ad:bc: 0f:b8:7c:ca:1a:ae:54:88:3e:a2:ca:e5:ee:c4:f5: 03:9c:ea:5c:f6:2a:cc:47:f1:2b:52:c2:68:ba:b5: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8E:A2:A8:0C:25:F8:88:B5:4C:68:6D:D4:29:4E:40:4B:54:D6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl X509v3 Authority Key Identifier: keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer sbgp-ipAddrBlock: critical IPv4: 69.52.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6d:4f:70:fc:6c:6c:35:26:40:37:4d:4b:48:12:38:3e:b2: 1b:94:89:e6:63:77:47:7e:84:37:75:02:82:59:46:34:56:42: 11:84:4d:3d:39:d0:f2:23:80:22:a5:c8:98:c1:4a:8b:69:ec: 7e:3e:cf:be:c0:2a:6f:72:99:32:40:e6:d1:39:dc:86:1a:e4: 59:db:d1:82:d2:5a:b4:f8:7b:56:96:0c:4d:01:da:47:49:7f: d6:53:9d:14:28:29:aa:3c:77:2c:c2:3d:d5:95:42:cb:df:6f: 87:49:39:b7:52:1a:c5:45:43:0e:e1:0b:62:a0:81:3f:14:95: 10:56:2a:62:77:8e:01:60:8d:b1:9a:d8:78:3b:d8:e4:e2:96: 95:eb:7c:e8:bc:a3:a9:fa:16:db:e1:e6:1a:bf:89:6e:b7:93: 89:9d:30:61:ed:9d:bf:32:9b:92:05:d5:0b:6c:5e:db:a3:c5: 1a:af:5d:a9:4e:30:76:b6:dd:36:20:a2:8c:fd:9f:d6:51:9a: 45:6b:a4:cb:0f:a7:a8:bd:2f:21:78:2c:55:37:2a:d2:09:a7: fc:31:11:c6:7d:7e:9b:15:c5:97:0b:42:6e:39:dd:9b:d2:fc: ee:39:dc:88:52:d6:81:70:db:13:c7:f4:e3:0b:f1:92:67:d1: 85:79:19:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayjc+fTw1bmd2v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi MjYxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGJiOTg5NmYtMzRjOS00MmZmLTllMDEtMGI1ZGVhNDczZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPCrWnZnXP9QvBhlkhZHZKWsX71G8wNGF8mC sLGFgf1itJ7t/3UkQ10E0FeJXJW1Xsib5rD35p+7BVrAoghAS9EB6h6HmcOZ9+Ha zoN5CzLSpcO/GXeLMufC3LfN27kiv+NBLAmVbJ+EZ1WMsS6BvHY+mQkQu3TiHxS+ JxqzrCBzWcg+Rnoa7fiGQSSD8Q8PAiO+A5UesYyBXjUgv2ap2Gh4LDEoqFTdzFoe II85kW2VZ4L8NLJK9Di15JzxjjMkjBCqeRCgQFxvByIzeit5WsDR/8X+Btp7WF1q +yEtrbwPuHzKGq5UiD6iyuXuxPUDnOpc9irMR/ErUsJourUqqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWOoqgMJfiItUxobdQpTkBLVNaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3 YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvODQyNzNiZTUtMzAxYS0z ZDk2LTg1MzktNDc1MGUyNGZjY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3 ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2 YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1 YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGttT3D8bGw1JkA3TUtIEjg+shuUieZjd0d+hDd1AoJZRjRWQhGETT05 0PIjgCKlyJjBSotp7H4+z77AKm9ymTJA5tE53IYa5Fnb0YLSWrT4e1aWDE0B2kdJ f9ZTnRQoKao8dyzCPdWVQsvfb4dJObdSGsVFQw7hC2KggT8UlRBWKmJ3jgFgjbGa 2Hg72OTilpXrfOi8o6n6Ftvh5hq/iW63k4mdMGHtnb8ym5IF1QtsXtujxRqvXalO MHa23TYgooz9n9ZRmkVrpMsPp6i9LyF4LFU3KtIJp/wxEcZ9fpsVxZcLQm453ZvS /O453IhS1oFw2xPH9OML8ZJn0YV5GWc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:05:09 2026 by rpki-client