$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa File: 0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json) Hash identifier: c6+EHmj2A31UXyqDmykS/razweA4VBhrpPfts7zSq7g= Subject key identifier: 2E:D0:AF:28:80:D3:03:EF:C4:6A:3A:4C:67:6C:62:B0:F3:8B:56:78 Certificate issuer: /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Certificate serial: 010D0C9F4328584D7F9A7DCC3DC6D5E1D28FA900 Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 396982 IP address blocks: 209.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7d:cc:3d:c6:d5:e1:d2:8f:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=22d42175-2af2-4143-8d37-ed71017603a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:c9:cf:01:f9:02:72:dd:f4:e5:62:37:10: 43:ec:d4:b4:55:84:f7:e6:74:7e:e1:59:a9:3d:fc: 11:7f:53:7c:38:5b:1c:57:1e:d5:bd:29:b4:91:38: 52:10:bf:da:03:e1:07:4e:41:f7:f0:c4:60:95:e7: ba:a0:98:4c:63:f4:34:30:b3:b3:03:3c:cd:64:88: 3f:81:03:66:d6:ed:94:68:49:a4:b6:6e:9d:37:4f: 30:0b:fa:63:d2:78:6d:c1:f2:e7:72:dd:df:74:1b: a0:01:00:e5:d4:af:64:26:a3:fb:b8:d6:29:5a:40: 0f:7d:15:0d:08:b3:30:1b:70:a3:a5:39:68:1a:f5: 3c:22:ed:fb:07:6a:ee:1f:2c:fe:23:8f:fe:d2:dd: 6b:77:7e:ca:f2:4e:36:97:fd:2f:7e:bb:b2:ab:42: 61:92:bd:ae:d0:36:00:af:07:2b:41:a9:d2:b0:81: d3:86:8a:d9:7b:43:09:dd:66:01:18:c4:e6:8d:23: 5b:66:93:3d:5a:5c:cc:24:d8:07:10:74:09:ec:76: 98:9a:10:c3:fa:b0:d5:a8:54:51:4b:ef:c8:d3:9c: 32:ef:4a:c7:3a:60:ab:9e:8d:ca:88:2d:55:08:9c: 74:51:75:93:c5:55:c5:cf:1f:f3:2d:b9:74:21:86: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D0:AF:28:80:D3:03:EF:C4:6A:3A:4C:67:6C:62:B0:F3:8B:56:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl X509v3 Authority Key Identifier: keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer sbgp-ipAddrBlock: critical IPv4: 209.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:de:22:c9:90:95:75:f8:3e:c7:51:ea:bc:ac:3a:2a:e6: d6:ea:7c:ce:d1:3a:f7:05:62:26:7d:66:a0:69:96:c7:96:5d: 60:6c:55:8e:a7:23:99:34:c3:9c:ff:2c:e4:d8:46:f4:58:4e: 58:38:ca:80:31:d9:38:09:9a:95:79:7c:ef:5f:73:06:7e:66: 0a:43:d0:3c:45:f0:00:6b:98:03:56:93:d4:df:63:88:66:97: 20:a0:13:01:95:60:19:fb:e3:79:a8:38:86:0e:aa:7c:e6:6e: 0a:d1:f0:cd:73:c9:8b:bb:d4:67:b5:e3:87:11:f7:bb:54:f6: ba:ea:07:75:4a:ee:c4:2f:cb:40:2f:a7:8f:8d:1b:16:b9:72: a0:71:85:95:ca:6c:36:4f:8c:91:c0:f5:86:02:ab:c2:d6:b7: 55:b5:54:cc:59:3c:c9:c3:70:14:ec:7d:27:d9:ec:66:23:27: 67:5a:18:ac:be:d6:41:e8:e2:68:c7:4f:4b:c4:b3:a0:21:76: de:ad:9e:74:82:cd:f9:b8:0d:b2:97:54:b0:c5:53:2b:82:65: 80:40:86:a5:ec:36:f6:e1:cf:ed:2d:87:bb:48:55:2e:41:8b: a1:b1:ce:b8:dd:48:9d:5a:02:b7:33:29:c3:1a:fd:0c:e1:73: de:67:00:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mn3MPcbV4dKPqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgyN2E3NGItMDIxZi00YWE0LWE1NTgtNjdkMmQ2YzIy ZmU5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MjJkNDIxNzUtMmFmMi00MTQzLThkMzctZWQ3MTAxNzYwM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwbJzwH5AnLd9OViNxBD7NS0VYT35nR+4Vmp PfwRf1N8OFscVx7VvSm0kThSEL/aA+EHTkH38MRglee6oJhMY/Q0MLOzAzzNZIg/ gQNm1u2UaEmktm6dN08wC/pj0nhtwfLnct3fdBugAQDl1K9kJqP7uNYpWkAPfRUN CLMwG3CjpTloGvU8Iu37B2ruHyz+I4/+0t1rd37K8k42l/0vfruyq0Jhkr2u0DYA rwcrQanSsIHThorZe0MJ3WYBGMTmjSNbZpM9WlzMJNgHEHQJ7HaYmhDD+rDVqFRR S+/I05wy70rHOmCrno3KiC1VCJx0UXWTxVXFzx/zLbl0IYbsjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7QryiA0wPvxGo6TGdsYrDzi1Z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3 YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2QyZDZjMjJmZTkvMGMwYjk2NmYtY2MwOC0z NmZhLTgwOTQtNzczZDU0YTQ1YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjgyN2E3NGItMDIxZi00YWE0LWE1 NTgtNjdkMmQ2YzIyZmU5LzY4MjdhNzRiLTAyMWYtNGFhNC1hNTU4LTY3ZDJkNmMy MmZlOS5jcmwwHwYDVR0jBBgwFoAUwdsOiPLFFzLwUvfATkOCurREVpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2Qy ZDZjMjJmZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXQ3iLJkJV1+D7HUeq8rDoq5tbqfM7ROvcFYiZ9ZqBplseWXWBsVY6n I5k0w5z/LOTYRvRYTlg4yoAx2TgJmpV5fO9fcwZ+ZgpD0DxF8ABrmANWk9TfY4hm lyCgEwGVYBn743moOIYOqnzmbgrR8M1zyYu71Ge144cR97tU9rrqB3VK7sQvy0Av p4+NGxa5cqBxhZXKbDZPjJHA9YYCq8LWt1W1VMxZPMnDcBTsfSfZ7GYjJ2daGKy+ 1kHo4mjHT0vEs6Ahdt6tnnSCzfm4DbKXVLDFUyuCZYBAhqXsNvbhz+0th7tIVS5B i6GxzrjdSJ1aArczKcMa/Qzhc95nAHk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:43 2026 by rpki-client