$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa File: 6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa (raw, json) Hash identifier: sxqEQ3mbFxWGRZuPr4l14xVA2JTDw/z/tMMyTHahe7I= Subject key identifier: FC:74:7A:BE:7E:C5:D8:0B:2A:4F:1D:D3:45:90:8A:4A:C3:5B:57:71 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584D9E500DAB3A2C3BC695B7DD00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 55286 IP address blocks: 209.127.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:ab:3a:2c:3b:c6:95:b7:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=fe3c34fb-b25b-4d3e-855f-9a0284236938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:9d:99:3c:18:0c:5d:92:bf:a3:ba:e4:4f: 72:43:eb:42:70:b5:7b:2e:c6:25:bc:17:5b:a6:91: cf:73:21:c7:66:ec:db:a7:05:23:43:35:b2:0a:75: 4a:0b:99:a2:70:c2:50:af:13:4f:68:e4:16:b4:d4: f1:ae:3e:b0:9b:76:7b:64:06:01:6d:f1:21:5c:35: c4:a0:e5:12:92:f8:4a:37:0b:86:96:db:c0:96:15: e3:9e:94:6d:31:61:67:d6:fd:22:e3:24:eb:c8:23: 77:5c:bd:d1:f1:91:98:ac:a0:69:11:b0:24:bb:d6: f0:07:b9:59:71:7b:f2:b3:98:d0:ea:77:7c:89:51: ba:60:7a:6b:08:bf:f9:50:05:3a:05:a5:76:83:f6: 8d:44:4f:ce:2f:cd:d1:08:4c:23:37:cd:e3:07:dc: 1a:86:2c:da:1c:66:cd:8b:c9:20:1d:1a:ea:ef:ca: c0:fb:8e:e8:6f:1a:7d:7b:d6:47:61:d0:09:34:a4: d2:53:64:cd:43:77:3d:d1:9a:20:25:f5:e1:69:a6: 93:59:c2:34:8e:9d:ee:bb:4b:78:8e:cc:82:79:b4: 1e:19:23:af:49:ff:1b:4f:4f:ae:b0:81:47:7d:85: 14:fc:5d:21:5d:b8:e1:ed:15:f1:fd:b5:12:74:d1: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:74:7A:BE:7E:C5:D8:0B:2A:4F:1D:D3:45:90:8A:4A:C3:5B:57:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ec:c6:a9:1e:55:af:b8:df:9d:aa:a3:e5:ec:6d:b8:ce:7b: 8a:f5:a0:d0:f8:b3:35:1b:42:2f:fc:9e:d1:ca:26:25:fb:0a: 31:af:80:8c:ef:7e:a4:b1:fc:d0:48:a9:2e:8b:35:00:45:63: 3f:f9:05:5c:fe:86:35:88:4a:d4:07:91:a0:d5:3c:28:de:ae: ac:dc:25:4f:0f:79:c4:76:41:bf:87:0a:95:6c:d2:bb:f2:dc: 62:53:9a:34:4b:63:fe:ac:ae:d3:ea:47:f8:d7:f0:1b:a2:0a: c9:d7:1a:70:4c:23:0e:42:80:76:f0:bc:cc:d5:85:50:f1:f5: dd:70:3a:d7:09:c3:be:34:4b:f2:0c:99:76:e6:2d:1f:4b:88: ca:56:e5:d4:b4:93:4f:e7:5d:65:42:ef:69:cc:55:cb:ab:f5: 3b:56:0c:fe:57:c0:41:27:a1:6d:22:b6:40:8d:f5:cf:c1:a7: 46:88:1e:9f:16:82:6f:be:5e:51:59:6f:17:45:c4:66:f8:5b: 62:c5:a6:83:69:cd:c8:b7:e2:de:06:e6:6c:6d:85:51:2c:c4: 79:d8:67:9b:55:2a:1b:b1:66:0e:f8:0c:1a:a1:42:9e:73:7c: 85:f0:d1:7c:58:ea:51:e9:6d:71:12:4f:f3:37:79:6c:e5:97: 6a:d8:31:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA2rOiw7xpW33QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmUzYzM0ZmItYjI1Yi00ZDNlLTg1NWYtOWEwMjg0MjM2OTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQedmTwYDF2Sv6O65E9yQ+tCcLV7LsYlvBdb ppHPcyHHZuzbpwUjQzWyCnVKC5micMJQrxNPaOQWtNTxrj6wm3Z7ZAYBbfEhXDXE oOUSkvhKNwuGltvAlhXjnpRtMWFn1v0i4yTryCN3XL3R8ZGYrKBpEbAku9bwB7lZ cXvys5jQ6nd8iVG6YHprCL/5UAU6BaV2g/aNRE/OL83RCEwjN83jB9wahizaHGbN i8kgHRrq78rA+47obxp9e9ZHYdAJNKTSU2TNQ3c90ZogJfXhaaaTWcI0jp3uu0t4 jsyCebQeGSOvSf8bT0+usIFHfYUU/F0hXbjh7RXx/bUSdNFoQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx0er5+xdgLKk8d00WQikrDW1dxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNmU0OWYyNjEtOGM1ZS0z MDhlLThkYTYtN2ZkMWJlYmZmOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDsxqkeVa+4352qo+XsbbjOe4r1oND4szUbQi/8ntHKJiX7CjGvgIzv fqSx/NBIqS6LNQBFYz/5BVz+hjWIStQHkaDVPCjerqzcJU8PecR2Qb+HCpVs0rvy 3GJTmjRLY/6srtPqR/jX8BuiCsnXGnBMIw5CgHbwvMzVhVDx9d1wOtcJw740S/IM mXbmLR9LiMpW5dS0k0/nXWVC72nMVcur9TtWDP5XwEEnoW0itkCN9c/Bp0aIHp8W gm++XlFZbxdFxGb4W2LFpoNpzci34t4G5mxthVEsxHnYZ5tVKhuxZg74DBqhQp5z fIXw0XxY6lHpbXEST/M3eWzll2rYMUk= -----END CERTIFICATE-----Generated at Wed May 13 11:16:25 2026 by rpki-client