$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa File: d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa (raw, json) Hash identifier: uQFh2kt6kpPtXxHKaxrla4r/UDka0LtcGQQCp+TUooU= Subject key identifier: 91:5C:8B:6E:0F:1F:04:43:AB:B2:F0:71:28:A0:64:F2:B0:11:2A:C7 Certificate issuer: /CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Certificate serial: 010D0C9F4328584D95EFEF53DE3B688335A8EC00 Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 22675 IP address blocks: 209.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ef:53:de:3b:68:83:35:a8:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=df6fdf6c-4d31-4f36-96b2-7e87b4f80490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:42:87:04:35:e2:09:9e:c8:48:fb:f4:3e: 9a:46:ad:fc:f8:c5:bf:1a:83:68:60:1d:66:ba:89: f7:aa:5c:98:97:b4:80:17:d7:9a:b9:b9:1e:8d:2c: 38:31:35:89:22:e6:60:b5:22:3f:3e:78:39:08:16: c4:d9:4b:9e:81:02:92:57:0a:d8:a7:9f:b5:96:7d: 61:53:29:58:fb:a3:20:09:e2:2c:67:da:a0:59:1e: 90:64:c9:c4:ee:ee:ea:9e:49:b8:47:9b:e6:f4:6c: 9e:6a:8c:52:09:41:d6:18:f5:16:5c:c8:fd:f2:91: aa:ad:cf:96:a2:d4:f7:19:4d:75:ef:ec:51:84:29: a3:6b:4b:fa:fc:2e:9c:44:51:72:27:9a:27:f2:35: 56:2c:79:e2:ba:f5:86:be:c8:ea:41:00:f8:54:86: 39:f4:48:8f:16:bb:07:25:90:f7:55:b9:fc:20:b3: 8d:a2:2b:e2:48:95:3e:8a:4b:c9:3a:de:a4:48:81: d6:39:5c:8a:17:05:7b:96:cf:86:9b:ca:91:89:cf: e2:45:53:17:84:d4:19:c9:5e:a7:f3:27:e9:7c:eb: ab:ff:d0:63:fc:85:c2:42:6a:86:62:59:df:79:87: 29:cd:09:56:55:86:c0:4d:da:c9:a0:ea:81:fa:56: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5C:8B:6E:0F:1F:04:43:AB:B2:F0:71:28:A0:64:F2:B0:11:2A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl X509v3 Authority Key Identifier: keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer sbgp-ipAddrBlock: critical IPv4: 209.239.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6d:b3:f4:71:b6:7b:43:40:77:18:be:51:20:b7:7e:df:cc: f7:b4:8d:4f:8b:26:e0:f5:6a:e4:8f:d8:cd:20:4f:5a:8e:1b: a4:5f:11:a0:23:6e:c4:05:33:6d:df:6b:24:8d:61:31:54:a9: 3d:bc:09:94:88:d0:a1:38:06:86:52:e8:5e:52:75:cf:e3:ec: 22:f8:b0:9a:4e:c3:d6:92:89:5f:ad:48:f4:f1:70:a5:24:82: f5:32:87:0e:04:68:47:ed:c5:84:a3:06:7d:87:9c:b9:97:46: 7b:f9:5c:ce:23:08:81:62:41:92:42:90:d0:5f:f6:e9:cb:3a: dc:dc:91:0c:a1:92:aa:d9:63:67:6b:ad:59:ac:8e:d9:93:08: ef:61:2c:f4:7f:68:b6:21:7c:77:eb:e9:aa:05:1a:d3:b8:16: 1e:58:c6:bc:c5:33:14:34:95:5e:9e:7a:bc:ab:60:d3:19:f2: 4c:cf:52:22:5d:39:d9:30:f5:5c:3a:ba:a5:83:6b:e2:ff:e8: 91:9d:6e:bb:c2:8d:4b:62:72:2a:c2:a9:4e:7a:af:93:d4:12: 8a:9a:74:65:e8:72:0f:b1:ff:30:df:bf:7e:98:a7:ef:95:4c: fb:3f:37:3d:b7:ce:b4:a9:35:ce:15:82:eb:ce:31:b3:48:70: 6d:48:69:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+9T3jtogzWo7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdiNWZhYWQtNjNkYi00Y2ZkLWE1NWItNDE0M2MzZTk0 MjkxMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZGY2ZmRmNmMtNGQzMS00ZjM2LTk2YjItN2U4N2I0ZjgwNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovdChwQ14gmeyEj79D6aRq38+MW/GoNoYB1m uon3qlyYl7SAF9eaubkejSw4MTWJIuZgtSI/Png5CBbE2UuegQKSVwrYp5+1ln1h UylY+6MgCeIsZ9qgWR6QZMnE7u7qnkm4R5vm9GyeaoxSCUHWGPUWXMj98pGqrc+W otT3GU117+xRhCmja0v6/C6cRFFyJ5on8jVWLHniuvWGvsjqQQD4VIY59EiPFrsH JZD3Vbn8ILONoiviSJU+ikvJOt6kSIHWOVyKFwV7ls+Gm8qRic/iRVMXhNQZyV6n 8yfpfOur/9Bj/IXCQmqGYlnfeYcpzQlWVYbATdrJoOqB+lam6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFci24PHwRDq7LwcSigZPKwESrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1 ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQzYzNlOTQyOTEvZDdlNjdiZmMtZGI3ZS0z Y2ViLWE2ZjEtMGVmMDk5YWE3OGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTdiNWZhYWQtNjNkYi00Y2ZkLWE1 NWItNDE0M2MzZTk0MjkxLzU3YjVmYWFkLTYzZGItNGNmZC1hNTViLTQxNDNjM2U5 NDI5MS5jcmwwHwYDVR0jBBgwFoAUS3Ybjt1V265CNvhniSBnepTz7ZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQz YzNlOTQyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRts/RxtntDQHcYvlEgt37fzPe0jU+LJuD1auSP2M0gT1qOG6RfEaAj bsQFM23faySNYTFUqT28CZSI0KE4BoZS6F5Sdc/j7CL4sJpOw9aSiV+tSPTxcKUk gvUyhw4EaEftxYSjBn2HnLmXRnv5XM4jCIFiQZJCkNBf9unLOtzckQyhkqrZY2dr rVmsjtmTCO9hLPR/aLYhfHfr6aoFGtO4Fh5YxrzFMxQ0lV6eeryrYNMZ8kzPUiJd Odkw9Vw6uqWDa+L/6JGdbrvCjUticirCqU56r5PUEoqadGXocg+x/zDfv36Yp++V TPs/Nz23zrSpNc4VguvOMbNIcG1IaUU= -----END CERTIFICATE-----Generated at Wed May 13 07:22:38 2026 by rpki-client