$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3972bf4-d544-395d-8f96-ae65d1027c28.roa File: b3972bf4-d544-395d-8f96-ae65d1027c28.roa (raw, json) Hash identifier: Rxhc3OqbxPs4/mhd3d1/h8jdEUgh/sWeiKoD/uryNcQ= Subject key identifier: 91:72:9A:DB:B3:01:E6:F8:B7:83:71:96:CD:21:69:54:4D:F9:7E:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D667A565987AC50E376D6CA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3972bf4-d544-395d-8f96-ae65d1027c28.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 209.200.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:56:59:87:ac:50:e3:76:d6:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=a3bd1d7f-4797-4243-bebf-a2b848abca0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:7e:94:7a:9b:b9:f9:8d:1f:45:6f:9b:2a: 46:0c:ff:10:3e:48:b0:dc:66:a5:bf:22:74:94:a7: 03:20:d8:ab:b5:51:40:ee:56:6f:1d:1d:92:a8:59: 18:25:cc:cb:af:e0:73:78:12:51:ea:82:2b:d7:1a: 92:7e:01:c3:58:02:66:2f:90:ac:54:fe:36:75:53: 3d:43:d6:bc:4b:66:e8:06:2d:7c:c0:9a:fc:89:92: a7:4a:9d:a5:40:99:96:e2:63:96:c3:57:90:7f:2b: cf:5d:6d:23:d3:5d:99:3d:2d:8e:51:2c:e1:40:46: f6:9d:93:7f:90:0a:e9:91:72:ce:a1:64:bc:48:ce: d5:61:a0:0e:ee:38:b7:42:05:2d:6f:dc:28:9b:bf: 0f:1a:62:19:c2:0d:ab:5b:bf:66:10:c4:be:d3:4d: 9d:24:91:c5:32:5c:7a:d5:a5:45:6b:5d:e5:24:32: 1b:aa:e8:06:41:54:55:b0:f2:de:4e:d1:10:9b:83: 95:74:8b:49:f8:d7:a0:f0:2e:98:67:c7:f2:46:19: 75:58:3c:be:0e:be:bd:76:fe:14:19:cb:db:98:a5: 33:2b:28:3a:9e:c0:28:24:e3:73:b1:64:67:e3:38: be:f9:c6:d0:15:59:4f:59:90:69:a3:9c:4e:2b:dd: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:72:9A:DB:B3:01:E6:F8:B7:83:71:96:CD:21:69:54:4D:F9:7E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3972bf4-d544-395d-8f96-ae65d1027c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0a:15:9d:8f:32:e0:3d:29:dc:41:9c:8b:2d:4f:77:e3:87: f7:dc:87:1f:24:ca:f2:49:87:48:45:86:f8:3c:09:3a:72:cc: 03:2d:f7:6c:3e:c6:3d:e4:2c:cf:df:7a:f3:69:3b:b6:03:a5: ae:91:64:bd:20:d8:6a:45:a0:5f:be:f7:4f:29:6f:f6:2f:f9: a7:b1:c4:48:2e:21:55:99:43:19:69:1a:de:c1:8e:1a:a8:8a: 91:05:7e:90:ab:a1:10:5a:7f:87:6e:c9:c2:da:fc:7f:08:fa: 13:64:8f:60:98:ae:21:ad:f2:74:3d:78:68:cd:09:82:99:9d: 4b:53:6c:2e:4a:70:a2:72:0c:c4:c5:e2:f3:b9:27:9b:b5:53: 3b:ee:4b:68:ef:76:82:72:64:db:56:bb:cd:88:52:b8:68:76: 46:04:3b:02:f0:ae:ee:b0:eb:f7:ef:d2:e8:d3:e9:07:f3:2a: e2:a7:dc:22:cb:12:72:ee:09:3c:82:77:01:a0:54:4f:41:e5: 5c:93:24:4b:eb:2e:28:de:e8:bb:ad:75:22:3b:f1:26:98:a9: f5:cf:1d:75:30:32:39:a3:b7:9a:07:09:12:b4:00:20:f3:f0: 7e:0b:31:cf:23:95:99:72:a2:eb:c6:54:89:00:9c:b7:ea:8e: 78:15:c8:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melZZh6xQ43bWyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk YTNiZDFkN2YtNDc5Ny00MjQzLWJlYmYtYTJiODQ4YWJjYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4l+lHqbufmNH0VvmypGDP8QPkiw3GalvyJ0 lKcDINirtVFA7lZvHR2SqFkYJczLr+BzeBJR6oIr1xqSfgHDWAJmL5CsVP42dVM9 Q9a8S2boBi18wJr8iZKnSp2lQJmW4mOWw1eQfyvPXW0j012ZPS2OUSzhQEb2nZN/ kArpkXLOoWS8SM7VYaAO7ji3QgUtb9wom78PGmIZwg2rW79mEMS+002dJJHFMlx6 1aVFa13lJDIbqugGQVRVsPLeTtEQm4OVdItJ+Neg8C6YZ8fyRhl1WDy+Dr69dv4U GcvbmKUzKyg6nsAoJONzsWRn4zi++cbQFVlPWZBpo5xOK91eWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFymtuzAeb4t4Nxls0haVRN+X57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjM5NzJiZjQtZDU0NC0z OTVkLThmOTYtYWU2NWQxMDI3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcKFZ2PMuA9KdxBnIstT3fjh/fchx8kyvJJh0hFhvg8CTpyzAMt92w+ xj3kLM/fevNpO7YDpa6RZL0g2GpFoF++908pb/Yv+aexxEguIVWZQxlpGt7Bjhqo ipEFfpCroRBaf4duycLa/H8I+hNkj2CYriGt8nQ9eGjNCYKZnUtTbC5KcKJyDMTF 4vO5J5u1UzvuS2jvdoJyZNtWu82IUrhodkYEOwLwru6w6/fv0ujT6QfzKuKn3CLL EnLuCTyCdwGgVE9B5VyTJEvrLije6LutdSI78SaYqfXPHXUwMjmjt5oHCRK0ACDz 8H4LMc8jlZlyouvGVIkAnLfqjngVyEU= -----END CERTIFICATE-----Generated at Fri Apr 17 03:27:44 2026 by rpki-client