$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa File: ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa (raw, json) Hash identifier: 3ZCM1G98yV3leycJz8oI49NFL1eAHAv2e2UkqgSbjGQ= Subject key identifier: D0:88:24:0F:77:1A:7E:1E:9B:0B:1C:5E:07:FB:7A:8E:D6:74:A3:F0 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584DCF208CB2B67B2141B1407D00 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa Signing time: Tue 12 May 2026 12:39:29 +0000 ROA not before: Tue 12 May 2026 12:39:29 +0000 ROA not after: Mon 10 Aug 2026 12:39:29 +0000 asID: 21669 IP address blocks: 209.212.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:20:8c:b2:b6:7b:21:41:b1:40:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: May 12 12:39:29 2026 GMT Not After : Aug 10 12:39:29 2026 GMT Subject: CN=8fae7c27-83c1-413e-a845-3a3072aae754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:27:c7:0c:65:e1:bc:89:03:30:44:d2:91: a0:b3:df:37:78:3e:e5:96:0d:24:0e:a8:a9:80:c3: ac:a5:97:31:2d:17:0d:8c:bd:19:5a:bc:e4:38:9d: 05:18:b9:42:c3:95:ea:95:d3:a5:9d:98:b5:8d:c5: b6:65:e5:55:29:be:7e:c8:63:62:c7:94:02:d3:44: 9d:90:1a:83:05:dd:88:35:75:6f:f9:11:1b:73:d8: 0d:13:3e:cf:35:e3:13:10:a5:03:6b:90:0f:d5:71: 17:51:7e:e9:b9:c7:37:d8:27:07:c0:78:88:d2:75: bf:59:6f:64:d4:ec:cf:60:aa:1e:47:d7:2e:71:62: f9:93:75:b9:11:27:b6:2e:c4:54:6f:38:87:93:28: d2:ff:29:3f:75:c9:93:bd:50:cb:0b:ef:5e:53:05: 6d:ad:b4:b1:dd:41:a4:e8:5c:24:28:ac:a2:82:56: fd:71:6a:b7:4f:3b:85:23:83:8c:6f:3e:85:b3:97: 47:ff:30:d6:95:1a:b7:43:4e:8e:e4:2b:c9:49:2b: d2:47:c7:22:ba:86:ce:6a:a2:39:63:c8:1d:75:dd: a8:b9:a9:eb:67:c2:64:ea:2e:84:00:3e:0c:13:e2: 3f:2f:8b:49:29:07:ad:d6:cf:0b:01:42:7d:21:99: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:88:24:0F:77:1A:7E:1E:9B:0B:1C:5E:07:FB:7A:8E:D6:74:A3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d9:5a:11:06:b4:7f:c6:c6:87:97:66:e8:d7:2f:bc:db:4d: 83:ae:21:a0:94:6d:86:0a:db:91:11:d8:8b:23:2b:5e:ee:d2: 8a:f4:01:21:20:aa:01:15:ae:62:e0:b6:57:a6:03:81:b3:8e: e7:41:36:bd:58:b0:96:70:8b:fb:8e:c2:f9:5a:35:73:f1:92: ab:68:d2:a1:6f:01:8f:7b:3f:56:4e:ca:aa:23:bb:55:5e:bf: cc:34:a1:9f:08:8f:1e:e7:c1:11:e9:34:ba:99:b4:05:bf:98: ad:19:19:8b:00:81:b6:5c:f8:a4:c6:85:9e:ee:e7:05:17:50: 53:0b:8f:a4:e3:95:f3:7c:76:f7:ae:4d:27:05:81:af:6b:9a: ca:1f:6b:6e:29:f0:3a:f6:a6:3f:9b:e3:1c:ae:76:87:f5:25: 20:0f:92:e8:97:2f:91:71:35:46:9a:3c:24:9e:84:ea:1b:88: f0:00:fa:aa:a8:83:40:c7:22:2a:ed:7f:1a:37:2a:0b:3f:db: 69:59:fd:70:40:93:c4:6a:1d:ac:af:13:c0:b5:d7:8b:a8:29: 8b:52:f0:11:a8:aa:f9:67:58:61:fc:58:99:7e:cc:be:97:fb: 63:88:83:7c:4b:ae:85:af:a8:c9:93:64:df:69:9c:f7:97:6d: cb:40:47:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PIIyytnshQbFAfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDUxMjEyMzkyOVoXDTI2MDgxMDEyMzkyOVowLzEtMCsGA1UEAxMk OGZhZTdjMjctODNjMS00MTNlLWE4NDUtM2EzMDcyYWFlNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvcnxwxl4byJAzBE0pGgs983eD7llg0kDqip gMOspZcxLRcNjL0ZWrzkOJ0FGLlCw5XqldOlnZi1jcW2ZeVVKb5+yGNix5QC00Sd kBqDBd2INXVv+REbc9gNEz7PNeMTEKUDa5AP1XEXUX7pucc32CcHwHiI0nW/WW9k 1OzPYKoeR9cucWL5k3W5ESe2LsRUbziHkyjS/yk/dcmTvVDLC+9eUwVtrbSx3UGk 6FwkKKyiglb9cWq3TzuFI4OMbz6Fs5dH/zDWlRq3Q06O5CvJSSvSR8ciuobOaqI5 Y8gddd2ouanrZ8Jk6i6EAD4ME+I/L4tJKQet1s8LAUJ9IZkWnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCIJA93Gn4emwscXgf7eo7WdKPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvY2E3ZjdjMTYtOGJjZS0z MGEyLWI1ZGUtNjhjZTQ3YThkNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfZWhEGtH/GxoeXZujXL7zbTYOuIaCUbYYK25ER2IsjK17u0or0ASEg qgEVrmLgtlemA4GzjudBNr1YsJZwi/uOwvlaNXPxkqto0qFvAY97P1ZOyqoju1Ve v8w0oZ8Ijx7nwRHpNLqZtAW/mK0ZGYsAgbZc+KTGhZ7u5wUXUFMLj6TjlfN8dveu TScFga9rmsofa24p8Dr2pj+b4xyudof1JSAPkuiXL5FxNUaaPCSehOobiPAA+qqo g0DHIirtfxo3Kgs/22lZ/XBAk8RqHayvE8C114uoKYtS8BGoqvlnWGH8WJl+zL6X +2OIg3xLroWvqMmTZN9pnPeXbctAR10= -----END CERTIFICATE-----Generated at Wed May 13 04:03:56 2026 by rpki-client