$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/209dd645-c1bb-3638-8fb4-520d73c13c13.roa File: 209dd645-c1bb-3638-8fb4-520d73c13c13.roa (raw, json) Hash identifier: kIMsfUkQejnVqfiHKljzleEMZF6r8Cp/sEPyBCd62Lo= Subject key identifier: F3:90:1C:E6:CA:41:BF:04:D9:8D:3E:F1:FB:A4:33:C0:12:D9:BE:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D6944FBA1D67E68AD7D26B360 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/209dd645-c1bb-3638-8fb4-520d73c13c13.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 209.200.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:fb:a1:d6:7e:68:ad:7d:26:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=b98da43b-a36b-409b-9dc3-be7a7251aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:25:72:b4:91:3a:24:09:9c:6b:ba:44:d4: 26:54:96:53:9b:80:e8:d5:d3:a9:b1:a8:d2:7e:a0: 21:6c:68:11:10:0d:60:c2:4a:16:ac:ad:70:06:64: 01:8b:30:90:44:64:b6:2d:a3:50:20:9c:d2:b5:86: 5f:c5:0b:0b:a8:78:9f:f2:41:1f:5e:7f:99:35:b3: e8:7a:68:9d:d8:f7:46:94:83:d8:7c:7b:39:59:4d: e1:bc:10:8e:4b:a8:eb:9a:af:28:62:44:8a:ed:d8: 97:80:4a:32:7f:c6:3a:ff:60:80:79:29:80:67:be: 80:a7:50:51:3b:a1:fc:02:85:62:57:50:e5:f9:0e: ca:4f:68:27:ad:56:aa:1f:f4:c8:91:29:af:91:de: 77:2e:02:a6:55:06:43:e5:76:f5:4c:67:dc:d5:63: 03:d9:42:05:e5:db:fb:72:5c:b7:90:72:74:35:cd: d8:5b:8d:f4:5c:5d:a9:ef:85:1b:8b:25:43:30:8b: 12:b2:66:79:7c:06:48:3a:65:d7:fe:dc:e9:82:19: 36:0b:9b:b4:ce:e5:57:8a:0b:2c:bf:89:78:53:55: 82:f9:6d:4d:3e:e7:60:6c:2f:d4:66:44:70:47:5d: 70:7e:6d:1f:70:7a:b2:26:a5:a2:58:9a:b7:d6:02: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:90:1C:E6:CA:41:BF:04:D9:8D:3E:F1:FB:A4:33:C0:12:D9:BE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/209dd645-c1bb-3638-8fb4-520d73c13c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:45:9b:39:b7:36:11:57:2a:2d:d3:4a:66:b1:e2:51:96:11: 8e:f1:df:5b:c8:f0:b2:39:ad:bc:fd:57:7c:1c:a9:8b:8e:41: 17:52:f8:f2:f6:8f:a7:5e:9c:82:4e:b7:43:43:7f:09:bd:34: b8:26:30:68:70:e5:74:19:2c:04:03:de:ac:b9:4f:77:f5:06: b5:02:b9:fc:53:31:03:fe:84:8a:db:b7:9a:5d:60:49:79:5a: 15:00:8a:aa:0e:30:38:d7:2d:89:e6:e7:5f:94:a8:d0:fa:5e: af:04:80:92:7b:66:0c:3e:90:94:5a:c1:bf:e2:bb:0d:eb:c1: 61:dc:8e:55:a9:8d:d4:7d:9c:8d:8f:68:7a:4c:2c:62:b9:ec: 2e:46:d8:32:d3:4c:67:e9:01:32:6b:4a:2f:3c:59:2b:e9:e8: 4b:3e:8e:fe:c2:55:49:01:23:45:a3:3e:17:ce:e8:11:d8:ca: df:d1:fe:06:36:53:18:13:50:59:cf:55:3b:ca:a6:f9:ae:de: ed:2e:e8:27:d3:07:d6:48:21:71:48:01:25:64:82:a8:ca:78: 94:58:7e:1f:9e:57:f6:1b:20:9c:6a:4d:80:5c:ab:4c:21:41: ee:d1:a0:57:2c:7b:f0:c5:4a:8b:38:36:4a:b7:d8:3c:96:50: ab:2a:a6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRPuh1n5orX0ms2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk Yjk4ZGE0M2ItYTM2Yi00MDliLTlkYzMtYmU3YTcyNTFhYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSQlcrSROiQJnGu6RNQmVJZTm4Do1dOpsajS fqAhbGgREA1gwkoWrK1wBmQBizCQRGS2LaNQIJzStYZfxQsLqHif8kEfXn+ZNbPo emid2PdGlIPYfHs5WU3hvBCOS6jrmq8oYkSK7diXgEoyf8Y6/2CAeSmAZ76Ap1BR O6H8AoViV1Dl+Q7KT2gnrVaqH/TIkSmvkd53LgKmVQZD5Xb1TGfc1WMD2UIF5dv7 cly3kHJ0Nc3YW430XF2p74UbiyVDMIsSsmZ5fAZIOmXX/tzpghk2C5u0zuVXigss v4l4U1WC+W1NPudgbC/UZkRwR11wfm0fcHqyJqWiWJq31gKSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOQHObKQb8E2Y0+8fukM8AS2b6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA5ZGQ2NDUtYzFiYi0z NjM4LThmYjQtNTIwZDczYzEzYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhFmzm3NhFXKi3TSmax4lGWEY7x31vI8LI5rbz9V3wcqYuOQRdS+PL2 j6denIJOt0NDfwm9NLgmMGhw5XQZLAQD3qy5T3f1BrUCufxTMQP+hIrbt5pdYEl5 WhUAiqoOMDjXLYnm51+UqND6Xq8EgJJ7Zgw+kJRawb/iuw3rwWHcjlWpjdR9nI2P aHpMLGK57C5G2DLTTGfpATJrSi88WSvp6Es+jv7CVUkBI0WjPhfO6BHYyt/R/gY2 UxgTUFnPVTvKpvmu3u0u6CfTB9ZIIXFIASVkgqjKeJRYfh+eV/YbIJxqTYBcq0wh Qe7RoFcse/DFSos4Nkq32DyWUKsqpmE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:40:45 2026 by rpki-client