$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: KzrCKM655iAT6EaKxtABQo6AEQSOdxZnaizjRcpuUi0= Subject key identifier: 94:4D:5A:7F:DB:94:A7:B7:22:CA:E4:E7:4A:A9:0B:90:CE:3C:52:90 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DFA7073E6CD846598BD31C780 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:73:e6:cd:84:65:98:bd:31:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=81282a18-0ddc-4eaf-bb1d-8d3b0f1b57fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:2a:f8:27:90:4a:41:8c:57:68:3d:7b:65: 6d:8b:13:50:84:c6:84:f0:d2:33:e9:a6:01:e1:e1: 6a:86:a4:ee:29:47:5b:ae:d4:68:b8:d4:da:b1:9f: 7c:54:8e:de:5d:fc:2f:e6:3f:31:98:6e:d3:7a:06: 5e:5d:29:63:bb:75:e3:8d:88:82:00:7d:d1:a7:97: f9:a8:ca:22:77:67:c6:72:5d:3e:ec:8c:c3:2a:bb: f3:95:5d:8e:c1:0c:9a:3c:5f:a6:f4:ca:fa:f0:e5: 58:12:b0:1e:ed:a2:59:af:14:19:42:20:47:73:42: d1:4b:0d:dd:a4:eb:5c:6e:13:55:45:b8:df:93:75: d3:f7:d7:e2:94:2e:c6:a7:85:c1:8f:79:51:9b:ef: 64:ae:68:91:00:48:7c:eb:9d:c9:29:1c:9f:0d:c9: 4f:ae:b7:2b:6e:8f:82:e0:04:cb:ff:79:36:2c:03: 02:7e:f9:33:1f:f5:ac:8e:7a:86:31:a6:ec:f1:a0: 60:7b:34:b4:a9:e1:b1:7a:1d:41:00:2c:61:79:e8: 5f:2d:f8:52:2f:96:b3:24:de:a4:a5:a0:92:b0:e6: 4e:8d:0c:a5:64:6b:5c:ce:d7:38:61:7e:f9:28:43: 31:d4:35:43:58:d8:d7:fe:d4:29:21:31:a9:cd:83: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4D:5A:7F:DB:94:A7:B7:22:CA:E4:E7:4A:A9:0B:90:CE:3C:52:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:84:e6:3c:53:59:cc:59:6e:97:49:2f:b7:c8:db:45:d5:76: fe:49:41:ae:6c:47:12:ec:48:cc:20:f2:53:15:cc:e7:e8:a1: 1a:1e:ab:77:61:78:24:d1:03:80:8c:44:f8:4d:68:c5:72:36: 26:e3:93:c5:11:92:5d:7f:7f:ef:b3:7a:94:4d:d7:8b:29:fa: 34:a1:c7:cd:52:2c:c1:90:1b:13:19:22:19:68:d7:21:77:4a: a2:70:73:a4:5a:9a:8c:2a:62:f9:d0:b4:da:88:2a:8a:37:76: e3:8a:47:3e:69:eb:f4:b6:b2:4d:cd:3f:50:a2:61:6c:8e:ec: 81:08:cc:64:ae:b7:44:ba:11:07:81:4f:49:50:7d:aa:e0:be: 04:3e:99:d9:b9:ee:37:ad:52:70:73:de:8c:5b:dd:d0:71:70: 41:49:57:ac:5d:59:3f:ed:9d:79:92:d4:e3:a9:f7:6d:ea:b9: 94:8c:93:b2:e2:f7:35:28:00:54:a7:65:39:c5:82:61:35:2c: 43:f2:b9:35:b7:e7:c1:ca:2f:00:03:65:4c:11:04:ec:c6:d8: e4:55:9d:df:33:9c:73:f0:cf:22:fa:6c:2c:1e:e7:f4:b3:88: 68:4a:c4:3b:da:4e:19:e6:91:70:7e:0c:c4:a6:2c:06:c4:c7: 70:63:58:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHPmzYRlmL0xx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ODEyODJhMTgtMGRkYy00ZWFmLWJiMWQtOGQzYjBmMWI1N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJkq+CeQSkGMV2g9e2VtixNQhMaE8NIz6aYB 4eFqhqTuKUdbrtRouNTasZ98VI7eXfwv5j8xmG7TegZeXSlju3XjjYiCAH3Rp5f5 qMoid2fGcl0+7IzDKrvzlV2OwQyaPF+m9Mr68OVYErAe7aJZrxQZQiBHc0LRSw3d pOtcbhNVRbjfk3XT99filC7Gp4XBj3lRm+9krmiRAEh8653JKRyfDclPrrcrbo+C 4ATL/3k2LAMCfvkzH/WsjnqGMabs8aBgezS0qeGxeh1BACxheehfLfhSL5azJN6k paCSsOZOjQylZGtcztc4YX75KEMx1DVDWNjX/tQpITGpzYMwxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRNWn/blKe3Isrk50qpC5DOPFKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaE5jxTWcxZbpdJL7fI20XVdv5JQa5sRxLsSMwg8lMVzOfooRoeq3dh eCTRA4CMRPhNaMVyNibjk8URkl1/f++zepRN14sp+jShx81SLMGQGxMZIhlo1yF3 SqJwc6RamowqYvnQtNqIKoo3duOKRz5p6/S2sk3NP1CiYWyO7IEIzGSut0S6EQeB T0lQfargvgQ+mdm57jetUnBz3oxb3dBxcEFJV6xdWT/tnXmS1OOp923quZSMk7Li 9zUoAFSnZTnFgmE1LEPyuTW358HKLwADZUwRBOzG2ORVnd8znHPwzyL6bCwe5/Sz iGhKxDvaThnmkXB+DMSmLAbEx3BjWDU= -----END CERTIFICATE-----Generated at Sat Jun 13 22:53:26 2026 by rpki-client