$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa File: d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa (raw, json) Hash identifier: 3EzNePGrxXS33wsjjkJ1XFXFiQnGkAoJ7mm3iU8AeyU= Subject key identifier: 3F:06:73:A0:C0:C2:17:6B:54:7F:3E:EC:3B:63:55:1E:B1:19:68:79 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584D5E1A72A9CBED73CFBDEB2FE0 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 395301 IP address blocks: 209.251.28.0/24 maxlen: 24 209.251.29.0/24 maxlen: 24 209.251.30.0/24 maxlen: 24 209.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:72:a9:cb:ed:73:cf:bd:eb:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=0796b698-7cb4-4c7c-a960-391142574af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:bf:8e:bd:5d:c0:b4:f4:45:bb:48:b0:35: ae:d3:b4:d7:0e:0c:4e:6c:57:f4:a1:39:f6:55:fb: 72:b5:75:03:3d:3c:71:66:b3:b0:8b:e8:61:20:bf: ec:87:7b:d2:56:51:0a:71:74:6f:c6:4b:10:78:a6: 7e:81:a2:2c:58:7a:fb:54:f9:54:08:21:ee:7b:5b: f4:e6:3b:6f:af:40:35:ee:a5:0c:f5:04:4a:97:fb: 0b:48:0e:35:1d:f4:ca:b2:6b:5c:41:0a:1a:4e:6e: 5f:a0:7e:28:22:2b:98:5e:4f:c8:d7:40:53:a7:60: 89:db:de:46:e9:1c:12:4a:ba:d7:34:64:87:05:47: c6:ba:53:19:a6:4b:90:65:a4:1f:a3:21:62:87:9e: c8:78:6e:b8:2f:68:52:85:5b:de:2e:25:dc:8d:7c: 27:fd:29:be:0f:23:8e:17:72:0c:a6:02:ce:c6:46: d9:3a:1b:e7:84:8a:04:6c:f0:46:ba:ce:fe:2b:f4: 73:bf:da:56:cb:2f:26:d7:30:65:2b:2c:0a:98:40: b0:5f:e1:19:64:c5:48:bc:f3:c3:36:b0:86:d5:b0: f7:04:87:09:fa:5d:b9:af:7d:cf:4d:46:4d:a5:c6: f7:d6:7f:35:9b:81:3b:95:08:ac:f6:ab:f6:45:a4: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:73:A0:C0:C2:17:6B:54:7F:3E:EC:3B:63:55:1E:B1:19:68:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 209.251.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:62:7c:93:2c:de:8c:91:41:e6:89:04:fc:4c:38:e3:d0:3f: 35:67:e8:af:3c:75:70:e4:71:b6:11:9e:84:99:70:aa:ae:6e: 48:ac:cd:e6:74:a0:8c:5d:2b:3d:9f:d5:6d:6e:bd:51:50:bf: 38:ce:04:96:a9:b8:50:9d:17:f9:cb:3d:77:74:fa:42:89:6f: d3:23:6e:13:00:bf:90:c9:d4:51:c4:af:28:7a:2b:c9:a6:f3: 16:b4:4c:f3:27:8e:10:23:f7:1b:43:d1:a4:0b:bd:32:75:2a: 13:93:c0:06:cc:4b:a3:1b:6d:19:39:ac:57:c1:1f:5e:c3:b2: 96:9c:2d:8d:96:51:28:80:b5:30:9f:68:5e:2b:03:aa:fe:26: 12:af:7c:a9:98:ad:56:7a:2c:39:7f:31:78:ee:f4:c0:9f:53: f2:61:ea:ba:d5:4c:b3:6d:5e:38:e4:65:fd:ec:70:32:29:dc: fe:7e:59:66:85:f8:64:55:67:55:28:d1:3c:df:cc:eb:cc:5a: 79:a7:e7:5b:74:0b:f1:c5:7d:87:e2:2c:05:23:e8:b7:26:95: 7c:ff:4b:38:60:45:c0:e5:49:56:f2:7e:fd:80:54:69:80:a1: 41:85:fc:58:c0:4a:de:6b:a6:77:fa:23:a0:8a:ab:84:28:41: 25:34:af:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnKpy+1zz73rL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDc5NmI2OTgtN2NiNC00YzdjLWE5NjAtMzkxMTQyNTc0YWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4q/jr1dwLT0RbtIsDWu07TXDgxObFf0oTn2 VftytXUDPTxxZrOwi+hhIL/sh3vSVlEKcXRvxksQeKZ+gaIsWHr7VPlUCCHue1v0 5jtvr0A17qUM9QRKl/sLSA41HfTKsmtcQQoaTm5foH4oIiuYXk/I10BTp2CJ295G 6RwSSrrXNGSHBUfGulMZpkuQZaQfoyFih57IeG64L2hShVveLiXcjXwn/Sm+DyOO F3IMpgLOxkbZOhvnhIoEbPBGus7+K/Rzv9pWyy8m1zBlKywKmECwX+EZZMVIvPPD NrCG1bD3BIcJ+l25r33PTUZNpcb31n81m4E7lQis9qv2RaRlUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8Gc6DAwhdrVH8+7DtjVR6xGWh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDFjOTdhMWEtNGU1NS0z NjRhLWI0MDctOWY2ZTFhOWJjOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBifJMs3oyRQeaJBPxMOOPQPzVn6K88dXDkcbYRnoSZcKqubkiszeZ0 oIxdKz2f1W1uvVFQvzjOBJapuFCdF/nLPXd0+kKJb9MjbhMAv5DJ1FHEryh6K8mm 8xa0TPMnjhAj9xtD0aQLvTJ1KhOTwAbMS6MbbRk5rFfBH17DspacLY2WUSiAtTCf aF4rA6r+JhKvfKmYrVZ6LDl/MXju9MCfU/Jh6rrVTLNtXjjkZf3scDIp3P5+WWaF +GRVZ1Uo0TzfzOvMWnmn51t0C/HFfYfiLAUj6LcmlXz/SzhgRcDlSVbyfv2AVGmA oUGF/FjASt5rpnf6I6CKq4QoQSU0rxc= -----END CERTIFICATE-----Generated at Fri Apr 17 23:40:07 2026 by rpki-client