$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa File: 6326754f-fb2e-3c8f-b430-f0e8b4107969.roa (raw, json) Hash identifier: bgNmdNQbFRIQchnGL0z7nujqV6aPrO0A6Tm2JMc/fn0= Subject key identifier: 4C:A0:F4:EB:5D:7F:9D:C2:70:87:0C:5F:36:4B:5B:DB:F8:60:84:66 Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc Certificate serial: 010D0C9F4328584D52434550B069D5601414BE80 Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 16509 IP address blocks: 209.209.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:45:50:b0:69:d5:60:14:14:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=5c361e7c-74f6-4e80-90a7-a15a4a5c0f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:ce:af:6c:a4:9a:34:83:e3:60:a2:db:24: 2a:91:57:1d:de:98:e0:c4:87:2e:2e:06:63:92:46: 41:ba:f5:9d:a5:81:43:0c:43:39:ee:f0:17:d3:e4: 02:0d:a5:35:36:ad:c9:7f:8c:36:a5:49:cb:99:a3: 5e:6a:fb:62:54:72:f5:34:e0:ee:a5:79:e4:54:04: 97:86:00:e6:29:17:d1:c1:b3:70:e2:21:73:ce:96: 63:15:3c:af:54:40:06:24:78:0e:a7:6a:a3:73:43: 96:de:57:f7:20:ab:35:8e:ab:70:83:77:f3:82:48: 3f:60:bf:83:49:1e:03:6e:44:14:4d:33:d6:5d:78: cd:46:2f:f5:6c:cd:e5:b9:a6:7c:dc:c8:96:64:cb: 44:bb:e8:c5:7c:84:45:78:3e:a8:0c:77:ab:01:ff: 9a:49:eb:19:e6:91:0e:4b:35:84:76:c7:64:60:32: e8:7f:8d:02:cc:81:b4:e9:da:81:a4:4b:12:5e:59: 6d:c4:cb:d0:a6:de:32:05:ac:00:7f:9b:5e:ba:38: 5d:81:3f:2b:19:90:78:52:be:20:43:59:cc:a3:e3: 1b:69:f7:cf:72:b0:75:7c:f5:4d:0e:6b:72:3b:fd: d1:39:1a:dd:03:0b:9f:08:c5:48:bb:13:7d:a0:34: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A0:F4:EB:5D:7F:9D:C2:70:87:0C:5F:36:4B:5B:DB:F8:60:84:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl X509v3 Authority Key Identifier: keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer sbgp-ipAddrBlock: critical IPv4: 209.209.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1a:f9:c9:7c:5a:96:cd:c1:e4:7c:95:6d:d1:4c:cd:08:91: a3:99:3a:9f:2e:e6:ae:17:af:91:69:c2:be:ef:03:57:1f:ff: 45:4a:81:61:72:39:07:44:06:76:56:ab:32:d2:1e:86:27:59: 63:1b:fc:f1:8e:e9:9f:74:f6:9b:94:d8:8e:e7:2f:ef:72:07: e9:d7:c0:86:66:d3:87:3a:70:8f:1d:46:75:fc:b3:04:e7:8e: 89:b0:b3:ce:0d:80:e7:f4:94:d4:72:4e:af:2e:16:06:b9:40: 35:47:7d:d0:b7:e7:33:0c:b1:d5:e8:22:ec:f2:2e:a0:6f:c5: 76:8a:08:73:74:01:35:76:b8:de:b4:53:e2:1b:74:81:0e:d5: 5b:4e:44:31:b6:f8:79:63:3c:80:7e:d7:71:30:18:17:5f:78: 57:cc:2f:da:b5:7b:0e:51:8e:c3:02:1b:0f:5b:53:9e:ad:bd: 1d:05:98:eb:9e:2a:38:5b:03:9c:b1:17:d6:4c:58:4e:91:74: 4b:ae:25:0d:88:dc:ee:1d:eb:5e:af:62:72:db:b3:37:fb:2b: b8:9c:ea:f3:1e:32:89:89:53:1d:5a:23:8c:b5:8b:9b:bc:97: 37:cf:53:98:51:1c:b0:0c:f8:5b:b0:ab:1b:c1:d4:86:7a:df: 79:69:c5:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0VQsGnVYBQUvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2NDAyNTctNzk0Ny00M2MxLTk5N2EtMGFmNThhNDY1 YmRjMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NWMzNjFlN2MtNzRmNi00ZTgwLTkwYTctYTE1YTRhNWMwZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ/Or2ykmjSD42Ci2yQqkVcd3pjgxIcuLgZj kkZBuvWdpYFDDEM57vAX0+QCDaU1Nq3Jf4w2pUnLmaNeavtiVHL1NODupXnkVASX hgDmKRfRwbNw4iFzzpZjFTyvVEAGJHgOp2qjc0OW3lf3IKs1jqtwg3fzgkg/YL+D SR4DbkQUTTPWXXjNRi/1bM3luaZ83MiWZMtEu+jFfIRFeD6oDHerAf+aSesZ5pEO SzWEdsdkYDLof40CzIG06dqBpEsSXlltxMvQpt4yBawAf5teujhdgT8rGZB4Ur4g Q1nMo+MbaffPcrB1fPVNDmtyO/3RORrdAwufCMVIuxN9oDQOVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyg9Otdf53CcIcMXzZLW9v4YIRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0 MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1OGE0NjViZGMvNjMyNjc1NGYtZmIyZS0z YzhmLWI0MzAtZjBlOGI0MTA3OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI2NDAyNTctNzk0Ny00M2MxLTk5 N2EtMGFmNThhNDY1YmRjLzViNjQwMjU3LTc5NDctNDNjMS05OTdhLTBhZjU4YTQ2 NWJkYy5jcmwwHwYDVR0jBBgwFoAU5TA8mq0PRPce48E8LRscUfUcNMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjY0MDI1Ny03OTQ3LTQzYzEtOTk3YS0wYWY1 OGE0NjViZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0a+cl8WpbNweR8lW3RTM0IkaOZOp8u5q4Xr5Fpwr7vA1cf/0VKgWFy OQdEBnZWqzLSHoYnWWMb/PGO6Z909puU2I7nL+9yB+nXwIZm04c6cI8dRnX8swTn jomws84NgOf0lNRyTq8uFga5QDVHfdC35zMMsdXoIuzyLqBvxXaKCHN0ATV2uN60 U+IbdIEO1VtORDG2+HljPIB+13EwGBdfeFfML9q1ew5RjsMCGw9bU56tvR0FmOue KjhbA5yxF9ZMWE6RdEuuJQ2I3O4d616vYnLbszf7K7ic6vMeMomJUx1aI4y1i5u8 lzfPU5hRHLAM+FuwqxvB1IZ633lpxSc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:35:59 2026 by rpki-client