$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/439afd4a-8fae-34e5-b4cc-c89e3f56ab10.roa File: 439afd4a-8fae-34e5-b4cc-c89e3f56ab10.roa (raw, json) Hash identifier: UCEVPdn3Hk0dib8VEolelXmZ8aSAeM/Y6MMeS0bwP0E= Subject key identifier: 1A:24:89:03:8B:CA:C6:2D:F7:F3:A4:CA:E8:53:C6:6E:8E:AE:AE:88 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584D8688C49D7EFA50F83875E600 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/439afd4a-8fae-34e5-b4cc-c89e3f56ab10.roa Signing time: Thu 16 Apr 2026 12:35:28 +0000 ROA not before: Thu 16 Apr 2026 12:35:28 +0000 ROA not after: Wed 15 Jul 2026 12:35:28 +0000 asID: 21669 IP address blocks: 209.212.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:88:c4:9d:7e:fa:50:f8:38:75:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Apr 16 12:35:28 2026 GMT Not After : Jul 15 12:35:28 2026 GMT Subject: CN=f3f60ba7-72b5-486d-80ab-d94abfacf874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:66:52:bf:ea:71:84:28:2b:a1:5f:6e:75: 99:ad:6d:f1:93:f3:1e:e1:4d:d9:98:2f:9c:27:a7: ea:04:4a:36:d7:a8:3b:d0:c6:ad:b1:85:cc:e0:68: ef:30:d3:1b:26:49:d3:a1:36:f4:34:0b:b9:3a:b9: 83:35:ca:3f:44:24:67:19:f6:91:36:1d:c5:21:1b: d5:3e:d8:75:2d:04:90:11:04:65:b3:f2:6b:96:e3: c6:5d:da:8e:c7:19:ef:4d:a9:ae:53:be:f7:36:1c: 7e:40:4d:b8:ad:1c:79:29:a1:e2:54:8f:78:74:33: 66:03:11:02:fc:19:de:c2:44:06:75:96:3a:f4:a4: 96:5c:00:48:91:28:76:7c:36:98:81:b0:a0:60:81: 86:90:9b:99:3a:46:72:99:cf:66:47:dc:7d:07:52: 0c:a9:60:3f:a7:5c:6c:05:5e:60:bd:f8:dd:60:df: 4e:ea:1d:03:df:1e:62:a5:54:83:a1:4e:88:1c:20: 22:8f:5e:1d:39:86:ac:c7:d0:f4:2d:f8:c6:e8:50: 89:09:82:7e:dd:4c:bd:3d:10:8a:ed:10:53:67:cb: 43:03:43:85:74:80:5b:1b:9d:2f:07:c5:0b:f4:e2: 2c:6a:4e:15:62:8e:b6:7d:a2:cc:45:cd:1c:57:34: b1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:89:03:8B:CA:C6:2D:F7:F3:A4:CA:E8:53:C6:6E:8E:AE:AE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/439afd4a-8fae-34e5-b4cc-c89e3f56ab10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b2:e0:e3:55:d4:2b:69:01:3d:60:bc:fd:c7:3b:78:af:53: 04:ab:17:26:af:ea:f1:52:ca:80:43:d9:7a:60:5c:c8:bf:cb: bf:15:9d:6a:14:96:c3:02:b7:be:f7:5c:71:7d:9f:ad:0b:c4: 9d:c3:07:d4:4c:ed:00:8d:2b:41:06:59:7b:67:81:45:97:96: b2:41:47:0e:4c:1f:52:c8:59:aa:32:ec:17:8f:15:2c:3c:fe: d0:ae:75:50:14:37:98:7c:72:7d:7c:57:19:ec:0d:ef:b3:dc: 54:56:d2:e7:ea:a7:36:76:c3:51:b5:97:88:20:ce:9d:7a:fb: ce:02:7a:44:9d:9b:14:97:70:c1:ba:f3:b8:5f:28:12:ef:ff: ce:e4:d8:76:4f:52:e1:d8:10:07:a5:40:d3:3b:7a:ef:b3:6f: d0:20:40:c1:42:6b:f1:27:69:b3:1c:20:58:6d:0d:f9:44:54: 56:07:62:bc:1c:64:b4:7d:82:9f:ae:19:5d:41:5b:1f:b8:3e: 1b:fa:a2:45:a9:36:9f:37:78:9e:36:46:1a:52:11:00:22:a5: de:a3:17:9f:9b:ad:78:9a:d9:46:67:f9:9c:5b:98:cb:63:de: df:a6:32:3a:b7:4b:53:21:03:f6:33:0c:3f:f1:4b:d0:96:9d: b2:9f:01:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GiMSdfvpQ+Dh15gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDQxNjEyMzUyOFoXDTI2MDcxNTEyMzUyOFowLzEtMCsGA1UEAxMk ZjNmNjBiYTctNzJiNS00ODZkLTgwYWItZDk0YWJmYWNmODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0RmUr/qcYQoK6FfbnWZrW3xk/Me4U3ZmC+c J6fqBEo216g70MatsYXM4GjvMNMbJknToTb0NAu5OrmDNco/RCRnGfaRNh3FIRvV Pth1LQSQEQRls/JrluPGXdqOxxnvTamuU773Nhx+QE24rRx5KaHiVI94dDNmAxEC /BnewkQGdZY69KSWXABIkSh2fDaYgbCgYIGGkJuZOkZymc9mR9x9B1IMqWA/p1xs BV5gvfjdYN9O6h0D3x5ipVSDoU6IHCAij14dOYasx9D0LfjG6FCJCYJ+3Uy9PRCK 7RBTZ8tDA0OFdIBbG50vB8UL9OIsak4VYo62faLMRc0cVzSxiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBokiQOLysYt9/OkyuhTxm6Orq6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvNDM5YWZkNGEtOGZhZS0z NGU1LWI0Y2MtYzg5ZTNmNTZhYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKy4ONV1CtpAT1gvP3HO3ivUwSrFyav6vFSyoBD2XpgXMi/y78VnWoU lsMCt773XHF9n60LxJ3DB9RM7QCNK0EGWXtngUWXlrJBRw5MH1LIWaoy7BePFSw8 /tCudVAUN5h8cn18VxnsDe+z3FRW0ufqpzZ2w1G1l4ggzp16+84CekSdmxSXcMG6 87hfKBLv/87k2HZPUuHYEAelQNM7eu+zb9AgQMFCa/EnabMcIFhtDflEVFYHYrwc ZLR9gp+uGV1BWx+4Phv6okWpNp83eJ42RhpSEQAipd6jF5+brXia2UZn+ZxbmMtj 3t+mMjq3S1MhA/YzDD/xS9CWnbKfAUo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:42:50 2026 by rpki-client