$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa File: 10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json) Hash identifier: +42gG0xqA1WQJTBu+NT+PS2isIRUCUcbC4NYdA8eP2A= Subject key identifier: E1:93:60:E4:D9:F0:71:94:BD:14:06:1C:4A:B1:AF:F1:7E:EA:C1:09 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584DFBD5EC599F0B484A28EBAE40 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 398465 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:ec:59:9f:0b:48:4a:28:eb:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=0f58b6d7-593a-4f57-958e-3c649959e4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:e6:49:a4:6d:c5:09:fb:aa:3c:ef:91:a8: 00:bc:d5:90:7f:ae:d2:f8:b3:c6:04:fd:21:b7:fb: 48:c3:28:5d:08:1e:c5:85:ba:d9:00:a7:6d:cb:73: a4:bc:2b:65:f9:14:5f:7d:94:94:28:d6:ac:4f:bc: 9b:7b:3e:d5:96:f2:78:7d:a0:be:2c:e0:be:c1:d8: 34:ea:d2:69:24:10:be:ec:49:6b:b6:d4:e0:38:45: 0d:17:7a:af:82:05:e7:74:a7:51:f1:ab:02:ff:22: dd:70:08:c2:79:b0:17:5e:23:e4:0d:48:14:bc:97: a1:8f:da:b9:dd:e6:7e:a4:67:f3:d2:11:26:28:e0: 35:02:65:d0:c7:cf:c7:56:e1:c7:fe:87:e6:27:3c: 90:19:f4:d4:a7:cc:5a:c4:04:3d:34:83:1d:dc:d7: 5d:81:e8:54:5c:4b:88:80:1b:5b:8a:de:6e:2a:68: 37:42:d3:9d:c2:b9:1d:a7:dd:03:62:90:1b:45:58: 8c:96:ce:32:f2:6c:b6:4e:53:a8:f2:e7:2f:27:83: 61:96:98:61:85:db:1e:4a:43:0e:3f:95:e3:d0:03: ca:b0:e2:f1:cb:d1:f7:79:11:80:90:17:a0:02:0b: 80:8c:47:67:c9:f1:a8:8a:46:51:c7:95:cf:5e:3a: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:93:60:E4:D9:F0:71:94:BD:14:06:1C:4A:B1:AF:F1:7E:EA:C1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:42:cc:b3:b0:bd:4b:56:cb:08:d8:79:10:86:bb:34:86:ab: 98:ea:e2:2d:c9:b0:16:e4:88:61:28:d4:13:b6:6c:37:da:12: ec:7d:97:dc:70:59:a7:ae:ee:02:4d:98:e0:ae:07:03:00:0a: 70:57:5e:36:df:a7:68:1a:30:82:5b:46:06:2e:f2:b1:66:79: ed:c1:24:a4:8d:45:5e:ae:2c:df:a2:9c:bc:58:6c:06:5b:a8: a8:8f:24:51:fa:8b:18:c1:42:1e:ce:47:ae:5c:b7:83:34:81: 37:fa:dc:95:17:9d:92:d5:2c:ad:81:a2:07:44:dc:fe:2e:4e: a4:8d:d4:d9:9f:03:bc:3c:f1:35:b1:f2:98:a9:1b:03:25:f7: 25:25:81:eb:0c:34:94:64:48:ed:9d:b1:a2:42:54:52:25:21: f5:9d:16:63:c3:53:2c:d9:4f:93:78:79:cf:0f:43:f0:fa:94: 1a:a4:2e:dd:9e:56:6e:ec:a4:db:a8:13:65:f4:df:48:44:6b: 56:07:2d:7f:64:70:3c:0d:90:ff:b4:6f:92:cb:c5:19:56:27: 9d:6f:12:b2:88:d9:24:ec:af:11:3d:4c:d2:f0:98:be:fb:9e: 08:77:f1:bf:e0:f5:be:c5:73:3b:28:6f:ea:91:cf:f9:59:a2: 65:0a:fd:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371exZnwtISijrrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MGY1OGI2ZDctNTkzYS00ZjU3LTk1OGUtM2M2NDk5NTllNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIHmSaRtxQn7qjzvkagAvNWQf67S+LPGBP0h t/tIwyhdCB7FhbrZAKdty3OkvCtl+RRffZSUKNasT7ybez7VlvJ4faC+LOC+wdg0 6tJpJBC+7ElrttTgOEUNF3qvggXndKdR8asC/yLdcAjCebAXXiPkDUgUvJehj9q5 3eZ+pGfz0hEmKOA1AmXQx8/HVuHH/ofmJzyQGfTUp8xaxAQ9NIMd3NddgehUXEuI gBtbit5uKmg3QtOdwrkdp90DYpAbRViMls4y8my2TlOo8ucvJ4NhlphhhdseSkMO P5Xj0APKsOLxy9H3eRGAkBegAguAjEdnyfGoikZRx5XPXjrokQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGTYOTZ8HGUvRQGHEqxr/F+6sEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTAzNDdlNzEtN2ZlNi0z OTQ0LWFhZmEtZjUwMjliNWY4N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFCzLOwvUtWywjYeRCGuzSGq5jq4i3JsBbkiGEo1BO2bDfaEux9l9xw Waeu7gJNmOCuBwMACnBXXjbfp2gaMIJbRgYu8rFmee3BJKSNRV6uLN+inLxYbAZb qKiPJFH6ixjBQh7OR65ct4M0gTf63JUXnZLVLK2BogdE3P4uTqSN1NmfA7w88TWx 8pipGwMl9yUlgesMNJRkSO2dsaJCVFIlIfWdFmPDUyzZT5N4ec8PQ/D6lBqkLt2e Vm7spNuoE2X030hEa1YHLX9kcDwNkP+0b5LLxRlWJ51vErKI2STsrxE9TNLwmL77 ngh38b/g9b7Fczsob+qRz/lZomUK/Ww= -----END CERTIFICATE-----Generated at Sat Jun 13 06:06:25 2026 by rpki-client