$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa File: dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa (raw, json) Hash identifier: buwWRRr2baIIxVkVcGHEjPcvB1vxRfpOZ9wxVMT2VB8= Subject key identifier: 06:86:0F:02:CD:38:CD:94:74:CB:23:0A:5F:4A:FB:EB:E9:5F:1F:23 Certificate issuer: /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Certificate serial: 010D0C9F4328584D703FD5DE12C3C599B232D000 Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 11023 IP address blocks: 209.251.32.0/20 maxlen: 20 209.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d5:de:12:c3:c5:99:b2:32:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=b84c40a1-f7ff-4c44-b68f-87574693420b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:98:16:44:f2:74:84:01:8a:18:ac:dc:ca: 7d:d3:17:af:84:f8:04:60:54:dc:e7:02:b2:24:88: ee:1e:f2:20:45:e7:61:5e:85:14:ce:7e:bd:fe:6e: 6d:c2:94:ff:dd:58:8a:04:59:c0:89:26:0b:a6:fd: 6e:a1:e6:24:eb:fc:28:75:0d:16:7f:d2:01:e1:49: e4:e7:84:db:fe:3b:91:67:4c:f6:ee:86:eb:4d:b3: 1f:d8:c1:22:5a:56:fd:63:b6:1b:92:c7:c4:93:b0: 09:1b:82:e8:87:5f:5f:9a:ac:7a:27:bd:c8:45:e5: 0f:5f:66:6b:b3:ca:86:c5:92:93:07:a4:b3:62:13: 3e:fa:66:54:cb:87:74:3f:e3:d4:b1:59:65:43:af: 98:bd:08:9e:91:b9:8f:c8:4c:ad:c1:82:45:d0:a9: 7a:93:89:f8:ae:09:9c:f7:71:d4:5c:66:63:61:db: c4:32:17:24:67:78:af:77:a7:8d:f6:b5:8c:f3:78: c8:33:46:c2:ec:d5:76:d6:d9:73:d4:f8:66:28:4d: 0e:c3:6b:8a:f1:e8:e5:a5:c9:5b:7b:e0:34:2e:df: a0:f5:b8:6a:41:d8:9d:d0:20:40:ae:aa:66:e4:3d: 3f:6c:e1:b9:34:a5:85:0b:aa:6d:36:ff:a0:f1:5d: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:86:0F:02:CD:38:CD:94:74:CB:23:0A:5F:4A:FB:EB:E9:5F:1F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl X509v3 Authority Key Identifier: keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer sbgp-ipAddrBlock: critical IPv4: 209.251.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:da:46:9b:e9:a5:eb:0d:4a:f7:57:3d:a5:2e:74:d3:ed:65: d4:9b:c6:0b:0c:76:ce:e5:ea:9c:ae:ba:dc:96:9a:c5:31:11: 48:ff:5b:ee:b8:c8:62:ba:51:c2:e4:23:79:bc:90:ec:d2:94: 03:cb:14:04:29:f4:15:48:71:8a:99:f4:d7:42:af:42:24:40: 97:52:2b:14:08:45:73:c1:43:f4:dd:97:a9:4a:0d:96:a5:b2: b6:66:6a:26:41:ca:ac:c5:c8:a4:a2:42:72:db:51:e6:b3:c7: 96:66:84:79:c5:4d:cb:18:51:b7:b4:3e:75:8e:7f:77:03:aa: b2:cb:94:d7:f4:e1:6e:0f:87:6e:e9:46:bc:0c:8a:9a:ff:27: 34:da:2e:1b:04:01:22:ee:13:2b:d1:df:27:ed:86:d2:0f:d5: 3d:51:9f:ca:34:e4:26:29:c9:17:38:07:8b:47:02:7f:61:2d: 40:9b:a4:55:43:9b:cd:81:f6:ed:87:6e:0a:89:85:13:22:ef: b4:57:c2:69:9b:dc:10:8d:78:ce:93:25:2b:bd:99:96:a4:4d: 30:19:c6:78:98:7d:87:80:f6:be:6b:39:4f:72:03:33:b0:5b: 0a:1c:f8:7b:10:32:ae:6f:f1:82:81:65:aa:e7:55:e0:f4:2d: 2b:dd:10:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9XeEsPFmbIy0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWVi ZjhjMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk Yjg0YzQwYTEtZjdmZi00YzQ0LWI2OGYtODc1NzQ2OTM0MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkmYFkTydIQBihis3Mp90xevhPgEYFTc5wKy JIjuHvIgRedhXoUUzn69/m5twpT/3ViKBFnAiSYLpv1uoeYk6/wodQ0Wf9IB4Unk 54Tb/juRZ0z27obrTbMf2MEiWlb9Y7YbksfEk7AJG4Loh19fmqx6J73IReUPX2Zr s8qGxZKTB6SzYhM++mZUy4d0P+PUsVllQ6+YvQiekbmPyEytwYJF0Kl6k4n4rgmc 93HUXGZjYdvEMhckZ3ivd6eN9rWM83jIM0bC7NV21tlz1PhmKE0Ow2uK8ejlpclb e+A0Lt+g9bhqQdid0CBArqpm5D0/bOG5NKWFC6ptNv+g8V2GHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaGDwLNOM2UdMsjCl9K++vpXx8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODUy MmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvZGJiZDc3ODItOWViMC0z NGUxLWJlMjEtYThiMmY0NDIzNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTg1MjJiOTUtMTQ0Zi00ODNmLWJi ZmItYmVjMDYwNWViZjhjL2U4NTIyYjk1LTE0NGYtNDgzZi1iYmZiLWJlYzA2MDVl YmY4Yy5jcmwwHwYDVR0jBBgwFoAUAR18+sVY6EiJayDd19XPFdMOIFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMw NjA1ZWJmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0fsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnaRpvppesNSvdXPaUudNPtZdSbxgsMds7l6pyuutyWmsUxEUj/W+64 yGK6UcLkI3m8kOzSlAPLFAQp9BVIcYqZ9NdCr0IkQJdSKxQIRXPBQ/Tdl6lKDZal srZmaiZByqzFyKSiQnLbUeazx5ZmhHnFTcsYUbe0PnWOf3cDqrLLlNf04W4Ph27p RrwMipr/JzTaLhsEASLuEyvR3yfthtIP1T1Rn8o05CYpyRc4B4tHAn9hLUCbpFVD m82B9u2HbgqJhRMi77RXwmmb3BCNeM6TJSu9mZakTTAZxniYfYeA9r5rOU9yAzOw Wwoc+HsQMq5v8YKBZarnVeD0LSvdEMk= -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:53 2026 by rpki-client