$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: FeXEKq9bUD6UUMHkkVqkmGPJJ7nz1hoZfwaehktV5/c= Subject key identifier: 51:38:9F:4E:70:79:53:35:F3:AF:F3:D2:0A:24:0B:5A:05:A5:32:49 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6AAA77F322D77E5C81B34980 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:77:f3:22:d7:7e:5c:81:b3:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=79374571-71ed-4dd2-a4c1-66c6f947ed15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:d3:8e:4b:dd:de:84:8a:d5:c8:a5:f0:d6: bd:4e:2d:22:95:03:be:c9:fb:6d:22:26:25:29:cc: 6b:b2:51:df:5e:a8:de:4f:d8:d0:de:a5:fa:c3:7e: be:a6:26:62:48:a1:e1:04:f5:d1:7f:70:44:19:37: ea:be:c2:9f:a2:81:8d:13:67:09:1c:57:a8:a5:23: 63:f4:10:5a:e0:d4:f2:be:80:91:2b:17:b5:74:9b: 0b:78:18:9b:07:61:86:c6:e9:2f:38:ec:8a:f8:d5: 05:9d:90:72:fe:7d:1c:32:d9:d6:6e:33:30:da:24: 78:ac:eb:53:4d:22:d2:5f:ea:82:51:07:5a:a1:e8: 1f:8f:24:de:23:90:04:10:77:6b:97:9a:90:fe:a4: 1c:5f:b7:3f:d5:ef:10:28:93:85:d1:f3:91:1e:5f: 45:4b:11:26:6b:34:e1:94:82:f5:db:aa:04:0f:56: 1c:06:ec:21:d3:ec:c4:4b:7e:0f:c2:a4:50:95:7b: 4d:dd:0f:a2:d9:19:25:e1:fa:41:32:d2:fe:3c:af: a5:6b:1e:9d:4b:e6:de:68:80:89:29:88:fa:11:8e: 80:a2:04:3f:79:33:0e:8c:2f:ed:80:e9:e9:7e:84: 06:1c:ae:f2:01:06:b4:89:50:2b:3d:a9:7f:a8:47: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:9F:4E:70:79:53:35:F3:AF:F3:D2:0A:24:0B:5A:05:A5:32:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9c:26:1d:c5:b2:97:57:0c:a7:af:ae:d6:90:ea:7b:05:95: 3f:0d:1a:57:d1:82:ed:80:0b:31:84:e9:27:8f:fc:9d:13:66: 02:b2:3b:88:33:0b:2d:5c:0f:c8:c0:ce:54:ca:6b:9b:15:13: 1c:bd:2b:12:b5:b4:f2:2a:bd:d7:99:80:0c:fd:1f:54:7f:84: 83:01:58:28:e5:99:d4:d2:0c:51:ec:f2:1c:7e:3a:e5:c1:8b: 88:52:5a:e0:cd:16:31:10:31:a9:7d:f8:0c:43:8e:c1:f0:6d: 90:7d:7c:24:a5:60:ba:7e:4b:29:c6:ef:e7:a3:26:e9:82:49: 48:d3:2d:c0:38:31:54:0f:85:6f:69:b4:60:ae:b6:6d:ef:e1: ee:41:69:3b:e6:91:59:96:f0:65:a9:0e:93:44:10:09:aa:43: 59:0d:b6:cf:ef:f4:cd:93:4c:d7:41:bb:cd:e9:23:82:b3:26: 49:d2:1b:f7:c1:21:fc:46:96:42:5d:5b:23:22:3b:90:ec:c5: 4d:87:a6:06:65:aa:8f:cd:aa:b9:93:0c:fc:9a:eb:11:c1:ea: 25:0b:9b:16:43:d0:ed:f7:01:f8:86:50:b7:11:9e:b8:4a:1e: 24:a2:73:90:f1:e4:50:13:d0:12:30:db:f5:d7:5c:16:2f:8a: d8:81:0b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnfzItd+XIGzSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NzkzNzQ1NzEtNzFlZC00ZGQyLWE0YzEtNjZjNmY5NDdlZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjTTjkvd3oSK1cil8Na9Ti0ilQO+yfttIiYl KcxrslHfXqjeT9jQ3qX6w36+piZiSKHhBPXRf3BEGTfqvsKfooGNE2cJHFeopSNj 9BBa4NTyvoCRKxe1dJsLeBibB2GGxukvOOyK+NUFnZBy/n0cMtnWbjMw2iR4rOtT TSLSX+qCUQdaoegfjyTeI5AEEHdrl5qQ/qQcX7c/1e8QKJOF0fORHl9FSxEmazTh lIL126oED1YcBuwh0+zES34PwqRQlXtN3Q+i2Rkl4fpBMtL+PK+lax6dS+beaICJ KYj6EY6AogQ/eTMOjC/tgOnpfoQGHK7yAQa0iVArPal/qEebIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE4n05weVM186/z0gokC1oFpTJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKcJh3FspdXDKevrtaQ6nsFlT8NGlfRgu2ACzGE6SeP/J0TZgKyO4gz Cy1cD8jAzlTKa5sVExy9KxK1tPIqvdeZgAz9H1R/hIMBWCjlmdTSDFHs8hx+OuXB i4hSWuDNFjEQMal9+AxDjsHwbZB9fCSlYLp+SynG7+ejJumCSUjTLcA4MVQPhW9p tGCutm3v4e5BaTvmkVmW8GWpDpNEEAmqQ1kNts/v9M2TTNdBu83pI4KzJknSG/fB IfxGlkJdWyMiO5DsxU2HpgZlqo/NqrmTDPya6xHB6iULmxZD0O33AfiGULcRnrhK HiSic5Dx5FAT0BIw2/XXXBYvitiBC6c= -----END CERTIFICATE-----Generated at Fri Apr 17 23:00:42 2026 by rpki-client