$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: aFDEF+PKosgbvkio73jFKxSxHkM1I+ytDd9k9FBAEMk= Subject key identifier: 20:E6:43:7B:33:FF:2A:D6:94:0E:A4:1C:03:BF:53:7D:AF:A6:16:34 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584D7A052207871FD72251FC7540 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:22:07:87:1f:d7:22:51:fc:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=ca40e670-e67d-4f09-bc67-b7d5a5182430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:c7:c7:e7:ac:1e:9d:7c:8a:c0:63:34:5e: 0d:70:f9:ec:23:7c:cf:86:ef:d5:f6:fd:fb:a3:2d: 94:e4:0e:21:3a:e4:e7:29:f1:70:08:0a:3e:0d:b0: 94:7b:87:ca:7f:36:34:da:48:f6:65:49:f8:2d:79: 7a:e5:4b:f3:31:47:4b:62:1f:94:f1:e4:0b:af:d9: 45:9b:ae:d9:6e:de:06:eb:b2:43:c9:4d:b4:47:7d: ea:c0:b0:93:21:2b:5c:2a:df:b1:b5:7b:94:7b:d9: 42:ea:21:1e:dc:27:b3:21:f3:fe:eb:b5:8b:b0:2a: f7:49:ab:58:30:97:68:28:c7:12:17:ad:ec:87:9a: 29:4d:ac:b9:2e:af:dc:5a:2d:5d:2a:9b:c9:57:64: ce:3f:9a:91:c1:75:4c:a7:22:c4:ef:37:68:74:65: 88:9c:e1:6b:f4:ea:c9:57:2b:86:f6:a6:9a:fc:56: 71:e0:f4:10:3e:50:d2:6d:37:b0:5f:86:77:c6:97: 19:d9:23:ff:99:2c:65:8f:40:f0:ba:20:e7:a3:55: b6:19:67:1c:67:86:07:a0:62:60:f2:92:b1:76:fe: 4f:77:a5:49:7b:b4:75:09:da:60:b9:d5:49:19:b0: d1:44:19:44:52:81:ae:14:69:61:ac:16:00:7a:32: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:43:7B:33:FF:2A:D6:94:0E:A4:1C:03:BF:53:7D:AF:A6:16:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ea:1d:81:a2:6b:ab:54:67:17:58:99:b2:c1:4c:bb:9f:df: e9:47:30:6c:0a:a4:c3:dc:92:df:3b:cc:4f:02:de:1a:03:91: 6a:63:0a:5b:28:8b:05:c0:11:ca:26:3f:0f:63:44:76:f7:d0: 25:97:11:10:51:f5:04:a6:da:85:9d:5d:e1:eb:88:b2:2c:b9: 77:93:f2:d3:53:51:53:26:a0:c5:ce:62:5e:de:92:d2:88:c3: 48:30:7a:d0:90:1a:42:a2:2f:a8:84:a6:6d:e7:ad:15:7c:ae: e8:71:91:92:2c:b4:cf:fa:a2:4b:b4:7a:1e:b9:23:8d:f7:b1: 49:a8:9d:f5:de:50:73:66:e3:0f:0e:21:f6:62:69:44:99:6d: 99:2d:0c:05:72:b2:10:c4:ca:3c:33:a7:7e:e4:37:c5:03:37: a5:56:ed:34:01:3d:f2:7e:e6:85:55:88:5c:99:e1:21:5e:3c: 86:58:ed:6b:e1:69:5e:76:d0:a1:76:11:7c:74:80:d9:68:ac: 09:fd:ef:a3:4c:c7:87:3a:28:62:82:25:0b:7b:90:20:cc:4e: 46:b3:d0:1b:6e:56:9c:fd:ca:8b:f3:92:86:af:fc:16:84:68: a6:2d:31:a2:a4:a2:c0:e0:72:ee:f8:ee:c0:12:6d:5e:44:ca: 8d:6e:1c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSIHhx/XIlH8dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk Y2E0MGU2NzAtZTY3ZC00ZjA5LWJjNjctYjdkNWE1MTgyNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47Hx+esHp18isBjNF4NcPnsI3zPhu/V9v37 oy2U5A4hOuTnKfFwCAo+DbCUe4fKfzY02kj2ZUn4LXl65UvzMUdLYh+U8eQLr9lF m67Zbt4G67JDyU20R33qwLCTIStcKt+xtXuUe9lC6iEe3CezIfP+67WLsCr3SatY MJdoKMcSF63sh5opTay5Lq/cWi1dKpvJV2TOP5qRwXVMpyLE7zdodGWInOFr9OrJ VyuG9qaa/FZx4PQQPlDSbTewX4Z3xpcZ2SP/mSxlj0DwuiDno1W2GWccZ4YHoGJg 8pKxdv5Pd6VJe7R1CdpgudVJGbDRRBlEUoGuFGlhrBYAejLm4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDmQ3sz/yrWlA6kHAO/U32vphY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7qHYGia6tUZxdYmbLBTLuf3+lHMGwKpMPckt87zE8C3hoDkWpjClso iwXAEcomPw9jRHb30CWXERBR9QSm2oWdXeHriLIsuXeT8tNTUVMmoMXOYl7ektKI w0gwetCQGkKiL6iEpm3nrRV8ruhxkZIstM/6oku0eh65I433sUmonfXeUHNm4w8O IfZiaUSZbZktDAVyshDEyjwzp37kN8UDN6VW7TQBPfJ+5oVViFyZ4SFePIZY7Wvh aV520KF2EXx0gNlorAn976NMx4c6KGKCJQt7kCDMTkaz0BtuVpz9yovzkoav/BaE aKYtMaKkosDgcu747sASbV5Eyo1uHEg= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:23 2026 by rpki-client