$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: O6/72Z2D/7xZo0AaanbJSlziZLdjDoesaDfAHHRQNxU= Subject key identifier: 7D:36:A5:5D:8B:57:8C:75:1F:CD:11:35:D9:BC:3D:4A:52:10:A8:35 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584D4D5A60A440C8111A71D1DD00 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:60:a4:40:c8:11:1a:71:d1:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=8bb2228f-dac8-49a9-b77f-6d64759ece8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:ef:88:30:fd:aa:36:6a:80:e1:a2:01:ad: 5e:5c:fa:34:d8:61:88:17:73:c5:ec:13:c8:1d:2d: d0:b7:70:c1:25:38:d8:1b:8f:ac:c2:ea:a8:4b:53: 5b:c5:61:27:c3:de:70:b7:78:be:53:6c:14:b3:15: b5:f2:e0:c5:e4:8a:e2:85:0e:8c:ea:a5:fa:2d:ec: 15:ba:cd:ee:9b:e2:34:96:a3:69:21:a7:9a:ff:72: 79:db:c3:67:5a:34:88:6a:1f:46:90:7e:38:62:62: 61:5d:fd:7f:06:90:92:d1:6e:12:11:e5:2c:78:ac: 8a:58:9f:ff:11:25:c9:bd:99:53:20:f9:3f:37:2d: 69:e1:45:04:c3:aa:02:fa:9a:c8:7c:e4:0c:9d:67: 77:02:68:d1:d4:24:9a:ba:32:0d:d9:0f:42:20:f7: dc:1f:79:a4:78:cb:27:ce:84:85:d8:9a:98:d7:40: 41:af:5f:d5:91:fd:85:d6:55:89:e9:4b:dd:0d:f6: ec:56:fc:36:17:d0:77:74:22:a9:d3:c9:af:99:00: e2:fd:ad:70:bb:09:c4:a6:55:67:78:f6:52:7e:8b: 80:53:dd:e9:a0:9e:f6:b9:98:58:38:01:0c:fa:19: 91:49:a3:a7:7c:ea:b3:a4:ef:cd:56:fe:0b:0f:36: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:36:A5:5D:8B:57:8C:75:1F:CD:11:35:D9:BC:3D:4A:52:10:A8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a5:47:09:9c:a4:62:9c:43:39:89:60:e9:01:a8:e6:a7:a0: 22:4c:9e:23:79:1b:11:cc:df:a7:84:c6:57:c9:5b:77:56:1a: 10:7e:82:0b:a7:c6:8f:4b:0d:d3:ce:0e:06:1a:24:60:36:23: 48:2b:95:02:4c:4b:a9:8e:80:d6:e6:77:e7:cd:f9:1c:7e:53: f1:01:e7:29:52:1d:e1:9c:15:72:b9:b3:95:72:45:9f:66:dc: 08:5a:74:91:28:72:95:69:ea:58:63:b1:c4:ce:19:92:5c:2c: 3d:f0:dd:b9:00:bf:4b:b8:69:84:5d:c8:fe:00:b8:b5:54:97: 77:07:4b:52:03:a4:c9:d4:9f:28:85:73:bf:13:f6:32:15:74: 42:c8:6a:95:6a:4f:e5:e8:9e:30:f7:c2:28:76:fd:2e:1d:fa: bb:38:e7:1f:14:00:19:07:be:e9:56:a9:42:fc:70:03:19:dd: 36:d5:a2:f8:d6:c2:b0:f3:9b:b1:c6:84:c2:57:d0:f0:b3:80: 0a:ee:18:16:e6:c6:1f:d5:c9:3b:ec:58:d0:0c:4a:69:81:e7: 21:b4:f3:07:d5:ed:1a:24:4a:4c:80:97:8e:f7:a2:f7:1c:51: 9c:ce:6f:f3:35:e1:e5:3a:57:30:f5:73:b4:da:b1:12:da:ef: 56:da:13:51 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1NWmCkQMgRGnHR3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OGJiMjIyOGYtZGFjOC00OWE5LWI3N2YtNmQ2NDc1OWVjZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJbviDD9qjZqgOGiAa1eXPo02GGIF3PF7BPI HS3Qt3DBJTjYG4+swuqoS1NbxWEnw95wt3i+U2wUsxW18uDF5IrihQ6M6qX6LewV us3um+I0lqNpIaea/3J528NnWjSIah9GkH44YmJhXf1/BpCS0W4SEeUseKyKWJ// ESXJvZlTIPk/Ny1p4UUEw6oC+prIfOQMnWd3AmjR1CSaujIN2Q9CIPfcH3mkeMsn zoSF2JqY10BBr1/Vkf2F1lWJ6UvdDfbsVvw2F9B3dCKp08mvmQDi/a1wuwnEplVn ePZSfouAU93poJ72uZhYOAEM+hmRSaOnfOqzpO/NVv4LDzYg7wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFH02pV2LV4x1H80RNdm8PUpSEKg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAh6VHCZykYpxDOYlg6QGo5qegIkyeI3kbEczfp4TGV8lb d1YaEH6CC6fGj0sN084OBhokYDYjSCuVAkxLqY6A1uZ35835HH5T8QHnKVId4ZwV crmzlXJFn2bcCFp0kShylWnqWGOxxM4ZklwsPfDduQC/S7hphF3I/gC4tVSXdwdL UgOkydSfKIVzvxP2MhV0QshqlWpP5eieMPfCKHb9Lh36uzjnHxQAGQe+6VapQvxw AxndNtWi+NbCsPObscaEwlfQ8LOACu4YFubGH9XJO+xY0AxKaYHnIbTzB9XtGiRK TICXjvei9xxRnM5v8zXh5TpXMPVztNqxEtrvVtoTUQ== -----END CERTIFICATE-----Generated at Sat Apr 18 09:13:23 2026 by rpki-client