$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/9fef41c7-f411-3a77-bd55-cc8cb170df78.roa File: 9fef41c7-f411-3a77-bd55-cc8cb170df78.roa (raw, json) Hash identifier: 1d8ZGcY/J9TjgTYubyn/0tYFbTWRif1BKhcnBW4Stoo= Subject key identifier: B2:DC:F1:67:27:BF:C1:DE:98:15:06:2B:A8:57:7D:5F:F7:83:40:97 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584D44FA39DE385249D793BA2680 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/9fef41c7-f411-3a77-bd55-cc8cb170df78.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 6169 IP address blocks: 209.50.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:39:de:38:52:49:d7:93:ba:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=2128f5ba-5d2e-422f-b016-606a3b9e7b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:a8:b4:b0:dc:2f:70:64:01:07:04:5a:67: e2:59:df:42:b7:14:6d:ea:58:d7:b6:04:77:6e:db: b3:49:74:35:8c:25:7a:cb:8f:25:7f:9c:ec:8e:69: 45:40:f8:5c:40:e7:81:71:df:81:ee:f9:55:85:b0: 92:ef:b3:02:89:81:77:7c:5b:1d:7c:f9:93:5d:a3: 98:f7:ff:94:da:0f:0a:95:c2:f9:bb:c5:16:06:f1: f8:57:f4:b2:11:e9:2a:9f:24:64:38:a1:28:c6:d7: f9:ab:ee:64:24:15:c1:a4:3e:b7:52:b8:3a:c0:5a: 53:81:87:b8:63:c3:6b:38:08:44:aa:59:e6:8a:8f: d4:0f:52:a9:20:63:08:29:26:28:04:07:7b:04:cb: 19:e5:f2:13:5c:80:ea:c7:c6:97:5e:9b:80:21:63: f1:eb:df:fc:90:be:0d:02:09:b5:c8:69:c9:8c:cf: aa:50:6e:73:37:20:2d:8d:62:a0:16:43:ec:b1:d8: e5:33:65:05:ab:63:36:34:52:5a:a1:28:ce:fe:2d: a0:fa:4f:3b:bb:8f:1c:67:33:3d:11:e5:64:89:d8: 7f:41:c4:e7:c2:90:dd:9e:36:80:e4:ad:31:60:fe: ff:da:03:f1:f0:ba:5a:bd:a7:92:6c:1f:8a:e1:71: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:F1:67:27:BF:C1:DE:98:15:06:2B:A8:57:7D:5F:F7:83:40:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/9fef41c7-f411-3a77-bd55-cc8cb170df78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c7:85:02:d4:56:ad:1a:94:e9:2e:5e:49:2a:f8:13:c1:5d: f6:2e:85:9b:54:7a:2b:66:1a:8f:47:c1:64:8a:c4:14:53:9c: 24:45:25:e1:97:a6:a3:cf:86:30:55:5d:e6:12:53:55:69:96: 83:14:8d:89:64:16:21:51:e8:35:7a:05:44:2f:7f:49:af:21: e2:7c:0e:98:3d:92:c1:9a:25:51:fe:ff:a6:35:c6:a8:93:f8: 75:d6:28:20:27:34:88:23:f2:7f:5b:37:b9:0d:70:e0:b8:e2: 48:fd:b1:aa:b8:17:48:e1:74:52:24:d3:60:63:e7:d5:d8:08: 77:f6:6f:bd:9f:7a:bf:19:73:38:b6:8e:4d:d7:e0:2b:92:bb: 75:7e:3a:1b:77:a8:47:45:ae:9a:f7:3d:cb:ad:70:4b:7d:e0: ba:7a:87:00:18:76:00:0d:b7:92:c2:79:95:67:85:9a:69:fe: dc:8e:fb:6f:58:cc:1d:3f:90:10:66:49:1c:dd:96:69:37:f2: 2d:a1:2d:ec:7d:b2:de:1d:7f:8e:c7:74:68:cb:34:41:95:dd: 2a:8b:32:b2:4e:10:6f:88:5c:b1:dd:67:05:c3:8a:d0:29:7d: dd:54:e1:37:a3:b6:2a:17:58:b2:03:8f:3b:1e:ab:d7:03:3a: 36:4b:e2:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jneOFJJ15O6JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjEyOGY1YmEtNWQyZS00MjJmLWIwMTYtNjA2YTNiOWU3YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKaotLDcL3BkAQcEWmfiWd9CtxRt6ljXtgR3 btuzSXQ1jCV6y48lf5zsjmlFQPhcQOeBcd+B7vlVhbCS77MCiYF3fFsdfPmTXaOY 9/+U2g8KlcL5u8UWBvH4V/SyEekqnyRkOKEoxtf5q+5kJBXBpD63Urg6wFpTgYe4 Y8NrOAhEqlnmio/UD1KpIGMIKSYoBAd7BMsZ5fITXIDqx8aXXpuAIWPx69/8kL4N Agm1yGnJjM+qUG5zNyAtjWKgFkPssdjlM2UFq2M2NFJaoSjO/i2g+k87u48cZzM9 EeVkidh/QcTnwpDdnjaA5K0xYP7/2gPx8LpavaeSbB+K4XH9PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLc8Wcnv8HemBUGK6hXfV/3g0CXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvOWZlZjQxYzctZjQxMS0z YTc3LWJkNTUtY2M4Y2IxNzBkZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDHhQLUVq0alOkuXkkq+BPBXfYuhZtUeitmGo9HwWSKxBRTnCRFJeGX pqPPhjBVXeYSU1VploMUjYlkFiFR6DV6BUQvf0mvIeJ8Dpg9ksGaJVH+/6Y1xqiT +HXWKCAnNIgj8n9bN7kNcOC44kj9saq4F0jhdFIk02Bj59XYCHf2b72fer8Zczi2 jk3X4CuSu3V+Oht3qEdFrpr3PcutcEt94Lp6hwAYdgANt5LCeZVnhZpp/tyO+29Y zB0/kBBmSRzdlmk38i2hLex9st4df47HdGjLNEGV3SqLMrJOEG+IXLHdZwXDitAp fd1U4TejtioXWLIDjzseq9cDOjZL4hg= -----END CERTIFICATE-----Generated at Thu Mar 26 22:19:36 2026 by rpki-client