$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa File: 8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa (raw, json) Hash identifier: kqkGyYOLQmi5lDtaMgnta/HGfn9pPsI/XLirK6l23mc= Subject key identifier: 28:1A:7A:D8:C3:C6:CA:AC:1C:9C:E5:D6:1F:9B:DC:B4:69:2C:A9:66 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D86953C1880624802F65B5C00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 25645 IP address blocks: 209.42.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:3c:18:80:62:48:02:f6:5b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=414fd27b-b01a-49e1-a79b-ccfefdb656f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:70:c1:39:82:ac:19:7f:2b:bc:61:8c:77: ee:54:cd:43:47:4f:a9:c3:d1:e1:76:26:50:a2:4d: af:10:10:07:f0:85:66:3f:5d:cc:93:9f:37:56:4e: bb:7a:be:20:17:04:fa:ea:b4:a7:23:59:4a:27:96: 8f:10:25:de:26:11:c0:9f:2a:3c:72:3e:cc:cc:c9: 96:f2:ff:f1:10:86:a7:b4:e0:4e:24:dc:97:d5:4c: 27:84:4d:67:a0:dc:22:15:a0:f5:77:41:14:e5:93: 04:6e:63:55:42:05:c0:42:ee:39:a8:cf:3a:1f:5c: c0:23:62:ef:a0:d5:aa:1a:d0:24:37:a5:c3:e5:f9: bc:90:15:24:a3:c2:05:18:e9:ef:2e:4c:57:60:64: 4d:07:61:5a:34:41:1d:7d:de:93:95:31:eb:7a:62: 11:df:d0:83:90:b5:d2:7f:05:df:7e:6e:b6:2d:9c: 40:cc:d3:f1:31:16:49:55:c4:fe:e7:ae:ba:20:a2: 39:08:e1:55:f4:b5:19:b3:46:0e:5e:3c:03:09:c7: 8e:4d:ae:6d:84:cb:c3:ce:98:16:93:a6:d5:68:c7: e4:91:cf:21:85:20:14:17:e4:ac:95:07:a0:f5:d7: bb:57:c4:b6:77:0c:f7:b2:8c:64:43:98:cf:eb:2b: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:7A:D8:C3:C6:CA:AC:1C:9C:E5:D6:1F:9B:DC:B4:69:2C:A9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8b9a6da0-ae61-3d5e-b7e4-522cc504c8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:21:d1:db:bb:ce:aa:f9:81:c8:a2:7f:23:55:41:f9:38:a0: 48:cd:a6:76:ad:45:cb:c6:a2:e4:ff:67:96:b0:09:2c:40:ed: 3d:94:81:77:fb:74:57:a6:c1:d2:fc:5e:9e:8b:6a:f1:35:fc: 53:38:92:1b:1f:bb:7d:b6:39:99:26:f9:3a:b6:d0:9d:a9:37: 51:67:36:46:5a:2d:75:e0:68:22:60:9a:5b:88:60:45:9b:c8: a4:16:89:a1:cb:9e:bb:98:f1:3a:e7:bf:10:7b:64:61:98:ef: fc:d0:ed:0e:34:8e:21:83:10:c4:37:b2:2d:80:54:95:0e:9a: 5e:d2:dd:7d:08:25:3f:32:24:03:29:1d:b9:2b:50:37:7b:99: 28:48:d1:8c:65:7d:1e:ee:c7:66:2d:76:f0:71:dc:b4:8b:3d: bc:7c:af:63:4d:e9:db:dd:6e:a7:9e:74:5e:44:55:5b:5b:50: 1e:19:bd:38:27:d6:5f:e3:19:e5:81:93:94:21:c3:31:6c:70: e8:d0:40:75:5f:02:e1:4f:90:e3:7b:d7:69:07:39:8a:73:e9: 9a:8a:00:86:12:5c:98:00:37:6f:3c:1e:19:e4:3f:df:a8:42: 3a:4a:d5:31:10:33:87:22:0c:e5:44:c3:74:06:da:98:15:f7: 70:26:3a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlTwYgGJIAvZbXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NDE0ZmQyN2ItYjAxYS00OWUxLWE3OWItY2NmZWZkYjY1NmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj1wwTmCrBl/K7xhjHfuVM1DR0+pw9HhdiZQ ok2vEBAH8IVmP13Mk583Vk67er4gFwT66rSnI1lKJ5aPECXeJhHAnyo8cj7MzMmW 8v/xEIantOBOJNyX1UwnhE1noNwiFaD1d0EU5ZMEbmNVQgXAQu45qM86H1zAI2Lv oNWqGtAkN6XD5fm8kBUko8IFGOnvLkxXYGRNB2FaNEEdfd6TlTHremIR39CDkLXS fwXffm62LZxAzNPxMRZJVcT+5666IKI5COFV9LUZs0YOXjwDCceOTa5thMvDzpgW k6bVaMfkkc8hhSAUF+SslQeg9de7V8S2dwz3soxkQ5jP6yuKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgaetjDxsqsHJzl1h+b3LRpLKlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOGI5YTZkYTAtYWU2MS0z ZDVlLWI3ZTQtNTIyY2M1MDRjOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4h0du7zqr5gciifyNVQfk4oEjNpnatRcvGouT/Z5awCSxA7T2UgXf7 dFemwdL8Xp6LavE1/FM4khsfu322OZkm+Tq20J2pN1FnNkZaLXXgaCJgmluIYEWb yKQWiaHLnruY8TrnvxB7ZGGY7/zQ7Q40jiGDEMQ3si2AVJUOml7S3X0IJT8yJAMp HbkrUDd7mShI0YxlfR7ux2YtdvBx3LSLPbx8r2NN6dvdbqeedF5EVVtbUB4ZvTgn 1l/jGeWBk5QhwzFscOjQQHVfAuFPkON712kHOYpz6ZqKAIYSXJgAN288HhnkP9+o QjpK1TEQM4ciDOVEw3QG2pgV93AmOsA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:06:39 2026 by rpki-client