$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b402262a-8386-3116-a157-d8fafaaef3a2.roa File: b402262a-8386-3116-a157-d8fafaaef3a2.roa (raw, json) Hash identifier: 602VnkwbjSaR4445cyiYaROGh1dspjRSFmX93tQX3mo= Subject key identifier: 06:58:28:1C:7F:D7:15:74:78:32:90:E5:A6:29:C2:97:92:DC:F4:28 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D7A052C13D318CCB31E792080 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b402262a-8386-3116-a157-d8fafaaef3a2.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 13576 IP address blocks: 209.151.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2c:13:d3:18:cc:b3:1e:79:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=b44d1614-3550-436f-9358-59b48867a6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:b4:38:47:04:d3:26:f9:c8:27:60:28:86: 09:a1:a2:ad:28:45:7b:d8:91:e0:c8:f3:d7:bb:66: fd:8a:5b:e7:03:77:b4:ab:42:9f:16:c4:64:24:41: 47:fb:c0:2e:00:e3:e7:d1:43:4a:7d:b2:fe:78:6a: 3d:62:28:10:36:08:6c:5d:fe:7b:6c:83:3b:6e:bb: 61:64:17:8c:cd:db:01:40:b9:09:ba:d2:c4:50:03: 77:b7:9f:85:1e:01:dd:3e:06:c5:f0:a3:08:97:4a: 65:01:3b:93:2a:6e:11:5a:04:2f:ab:67:b5:1f:24: be:c2:68:32:0f:7a:87:33:8b:76:0b:a1:e7:8c:af: fd:d7:0f:64:18:c3:c0:da:d6:f8:f1:56:9a:f4:90: c9:52:eb:da:bb:75:87:cb:c6:15:bb:dc:7d:0f:50: f5:b7:38:b6:60:f6:e5:15:3f:11:05:2c:fc:56:ca: f2:bc:f5:62:32:05:26:92:41:f4:b7:63:54:d7:de: 05:bd:55:cb:ac:00:e8:02:4e:64:1f:6d:7b:68:cc: 26:6d:2a:be:2d:d1:40:01:bf:2b:a2:0c:fd:a4:73: c8:06:fc:08:76:d6:98:f6:6d:1b:18:9b:01:5c:77: ea:97:3f:08:09:61:2c:ba:22:8d:97:87:53:fb:d0: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:28:1C:7F:D7:15:74:78:32:90:E5:A6:29:C2:97:92:DC:F4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b402262a-8386-3116-a157-d8fafaaef3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b4:31:e9:6c:a3:f8:e6:91:74:93:85:3f:54:93:ac:61:8a: 1e:2e:7c:6e:09:e6:3e:b6:a4:ef:f7:d1:7a:29:25:2f:be:67: 83:14:d8:dc:cb:44:ba:01:53:22:34:85:8b:7e:54:49:aa:dc: 6a:94:a9:7c:81:72:0a:d9:f8:a2:62:f3:22:6f:a8:09:a8:3d: 21:46:57:7b:ff:00:66:f1:ef:56:0a:aa:a3:18:81:20:10:1b: 41:46:7d:e9:68:89:a1:4f:2a:12:fe:25:69:90:80:e5:37:ed: 0e:50:77:47:81:be:45:53:09:41:93:83:f6:ef:53:ca:64:ce: 3a:29:66:30:02:39:db:f8:d4:4f:89:6a:7e:62:0d:cd:ff:06: 07:33:e4:cd:4e:80:85:a1:de:aa:96:77:4d:d1:5b:a9:78:6e: 87:eb:f0:99:08:f1:5d:64:67:2a:d3:09:b3:87:0b:7f:95:66: 7b:ed:03:12:7f:51:3c:56:45:0d:e1:a9:34:54:a7:ed:85:4d: 21:f9:3c:49:89:ff:b7:8a:ae:24:9c:4c:f6:62:f0:53:b8:63: b3:10:71:56:0a:89:7e:af:96:65:d5:6a:85:0c:01:8f:4f:94: a5:63:3a:d6:5b:33:3a:9d:ff:94:88:bc:66:f9:6e:59:99:0e: 7b:c7:aa:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSwT0xjMsx55IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YjQ0ZDE2MTQtMzU1MC00MzZmLTkzNTgtNTliNDg4NjdhNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf+0OEcE0yb5yCdgKIYJoaKtKEV72JHgyPPX u2b9ilvnA3e0q0KfFsRkJEFH+8AuAOPn0UNKfbL+eGo9YigQNghsXf57bIM7brth ZBeMzdsBQLkJutLEUAN3t5+FHgHdPgbF8KMIl0plATuTKm4RWgQvq2e1HyS+wmgy D3qHM4t2C6HnjK/91w9kGMPA2tb48Vaa9JDJUuvau3WHy8YVu9x9D1D1tzi2YPbl FT8RBSz8VsryvPViMgUmkkH0t2NU194FvVXLrADoAk5kH217aMwmbSq+LdFAAb8r ogz9pHPIBvwIdtaY9m0bGJsBXHfqlz8ICWEsuiKNl4dT+9CFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZYKBx/1xV0eDKQ5aYpwpeS3PQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjQwMjI2MmEtODM4Ni0z MTE2LWExNTctZDhmYWZhYWVmM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0ZewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa0Melso/jmkXSThT9Uk6xhih4ufG4J5j62pO/30XopJS++Z4MU2NzL RLoBUyI0hYt+VEmq3GqUqXyBcgrZ+KJi8yJvqAmoPSFGV3v/AGbx71YKqqMYgSAQ G0FGfeloiaFPKhL+JWmQgOU37Q5Qd0eBvkVTCUGTg/bvU8pkzjopZjACOdv41E+J an5iDc3/Bgcz5M1OgIWh3qqWd03RW6l4bofr8JkI8V1kZyrTCbOHC3+VZnvtAxJ/ UTxWRQ3hqTRUp+2FTSH5PEmJ/7eKriScTPZi8FO4Y7MQcVYKiX6vlmXVaoUMAY9P lKVjOtZbMzqd/5SIvGb5blmZDnvHqtA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:41:00 2026 by rpki-client