$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa File: ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa (raw, json) Hash identifier: Ccph2a+nKC/LBP1xJl0qih98rTTp2RyAxfz+gb8fGLI= Subject key identifier: 5D:B7:61:D0:C3:3D:FB:1D:DB:5A:88:89:57:90:0F:F5:07:47:81:81 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584D4D5A541139A7CE0B68835440 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7782 IP address blocks: 162.211.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:54:11:39:a7:ce:0b:68:83:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=fd537065-3e83-4d54-92dc-2fb6e79ddc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:4e:df:ca:fb:33:c0:ef:6a:0f:f7:79:82: 96:a8:18:96:36:78:b4:f3:ba:58:21:68:f4:0f:0a: 2a:fa:ef:b9:27:b1:db:bb:3e:a7:f5:18:b7:31:18: 17:d3:92:f0:72:14:02:44:38:ab:38:ab:d0:e4:bc: da:8f:bc:d3:4b:e1:2f:0b:42:85:71:f3:6f:ea:dd: 6c:25:88:cb:7a:49:f4:2c:3f:7d:c2:ec:32:71:5d: 11:04:b3:91:79:33:18:99:42:e9:0d:07:ab:c3:cf: e3:b2:b0:61:26:2f:5a:39:9b:ff:d8:2e:f1:80:70: 4a:c4:14:0f:be:c4:8a:dc:9f:a8:82:f1:cb:62:2a: 36:34:ab:51:70:52:48:a7:56:2c:10:e3:3c:bc:2f: a5:9a:75:69:21:d9:51:ae:88:ea:93:dc:bd:b7:53: e0:3f:ab:20:f8:9e:a9:b4:aa:91:8c:cf:44:8a:b3: f2:57:f4:9e:c6:ff:c0:d2:ef:25:12:e2:55:1b:53: 36:f3:c9:9d:be:5b:52:1b:79:c8:96:e7:58:1d:39: 52:25:bd:87:9e:e2:41:6e:94:26:23:89:c8:e9:1f: 88:75:44:d5:e2:5e:10:ea:4c:eb:0d:89:44:01:ea: ca:d1:b5:35:73:d4:35:95:a0:5e:38:1c:e0:34:fb: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B7:61:D0:C3:3D:FB:1D:DB:5A:88:89:57:90:0F:F5:07:47:81:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.211.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:29:82:7c:f5:24:12:5c:34:de:b8:55:25:d4:89:45:cb:14: 9e:29:95:9e:a8:91:f3:32:24:09:be:29:7f:1d:79:3a:49:fb: b3:0e:d1:b5:d9:0e:15:2b:a4:be:f9:9c:e6:7f:fd:b8:c0:f8: eb:2c:bb:ab:e8:94:c4:23:90:a3:5a:a6:d2:75:b7:a3:73:f4: fc:6e:74:37:50:2d:43:c6:f0:23:1a:d9:e7:77:34:af:31:9f: 03:93:21:c9:6c:a4:b2:d6:1e:a3:04:a4:d3:a6:a7:fd:9a:30: 47:af:cf:b4:c4:0b:ee:22:d1:61:19:e8:af:37:aa:42:e2:76: a0:66:62:7a:47:12:88:4c:09:85:d5:bf:37:cd:df:17:11:c9: b8:07:70:e0:cc:3e:86:d8:3d:43:bc:1a:4d:01:12:ab:87:9e: 1e:4e:02:ec:76:46:32:b4:ef:dc:d2:98:4a:62:4c:ba:49:69: 64:a1:fd:21:af:7c:48:a1:0e:f9:6e:f5:fb:77:dc:e1:ba:44: e5:c1:08:cf:0f:7f:f5:91:46:bd:71:82:f5:73:db:52:60:4b: bd:ec:73:20:7d:b3:a4:55:6e:74:65:1d:4c:44:29:bc:72:a0: 7d:89:22:26:de:68:ec:1f:83:dc:69:c0:5f:f8:52:a0:17:28: b6:b0:b9:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlQROafOC2iDVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmQ1MzcwNjUtM2U4My00ZDU0LTkyZGMtMmZiNmU3OWRkYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6JO38r7M8Dvag/3eYKWqBiWNni087pYIWj0 Dwoq+u+5J7Hbuz6n9Ri3MRgX05LwchQCRDirOKvQ5Lzaj7zTS+EvC0KFcfNv6t1s JYjLekn0LD99wuwycV0RBLOReTMYmULpDQerw8/jsrBhJi9aOZv/2C7xgHBKxBQP vsSK3J+ogvHLYio2NKtRcFJIp1YsEOM8vC+lmnVpIdlRrojqk9y9t1PgP6sg+J6p tKqRjM9EirPyV/Sexv/A0u8lEuJVG1M288mdvltSG3nIludYHTlSJb2HnuJBbpQm I4nI6R+IdUTV4l4Q6kzrDYlEAerK0bU1c9Q1laBeOBzgNPuxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF23YdDDPfsd21qIiVeQD/UHR4GBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYWU1MDhjNjYtMTlmMy0z MjVlLTlhYzktMmZhNzE0ZGM5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADspgnz1JBJcNN64VSXUiUXLFJ4plZ6okfMyJAm+KX8deTpJ+7MO0bXZ DhUrpL75nOZ//bjA+Ossu6volMQjkKNaptJ1t6Nz9PxudDdQLUPG8CMa2ed3NK8x nwOTIclspLLWHqMEpNOmp/2aMEevz7TEC+4i0WEZ6K83qkLidqBmYnpHEohMCYXV vzfN3xcRybgHcODMPobYPUO8Gk0BEquHnh5OAux2RjK079zSmEpiTLpJaWSh/SGv fEihDvlu9ft33OG6ROXBCM8Pf/WRRr1xgvVz21JgS73scyB9s6RVbnRlHUxEKbxy oH2JIibeaOwfg9xpwF/4UqAXKLawubo= -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:50 2026 by rpki-client