$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa File: f984a998-f709-386e-9a12-6db49c1c894c.roa (raw, json) Hash identifier: JPrl2yev5WC+ew7BVER2QJLfKy+Cb3sETFOsNhYDppk= Subject key identifier: EE:84:61:7A:83:03:80:5D:F6:1A:AD:D5:70:F3:14:50:5F:DD:F5:B1 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584D7A051CA23D80A8C9B2C2C340 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 394398 IP address blocks: 209.124.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1c:a2:3d:80:a8:c9:b2:c2:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=9d502ef7-24ce-45e4-89c3-54b547c8f8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:91:be:63:6f:59:5f:fa:0d:09:23:73:88: 75:9a:17:dc:e7:02:98:a5:80:55:6b:86:86:45:dc: 36:4c:d2:ed:a3:42:c8:f7:bb:63:76:07:c6:e9:0c: 2a:c7:db:5d:85:36:31:be:3b:04:e0:b7:8a:04:20: cb:7d:bf:1a:33:36:45:92:58:c7:a6:b6:f3:8d:89: aa:3a:11:a1:bc:cd:80:9b:6f:e7:ef:90:c1:d8:c9: 91:35:fe:44:14:fa:94:79:62:a6:89:68:f8:77:1a: 24:57:e7:eb:b3:ab:d0:a3:d7:9b:8d:14:7f:b5:7f: 4a:c9:bf:a0:ab:68:5c:e8:24:a5:f4:f7:a7:08:9f: 00:32:eb:49:d4:3a:3b:25:4c:b3:5f:4b:55:a0:be: 19:26:93:75:4d:b8:b4:f0:7a:ff:7e:74:b5:15:8c: b6:87:4c:76:0e:fa:89:77:7c:c9:41:69:c4:fa:6c: 63:c2:ed:ee:6e:f4:9c:f0:28:b3:3b:2c:f0:10:a6: e4:28:a2:b9:90:75:99:21:a6:40:c3:f3:88:be:8d: b0:7d:4c:b0:a7:cd:af:96:86:1f:5a:45:54:25:44: ce:f7:ea:43:a2:da:f8:b9:32:1c:2e:74:70:6c:1f: 29:67:10:81:c8:09:48:ee:ee:2e:ab:54:d8:0e:1a: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:84:61:7A:83:03:80:5D:F6:1A:AD:D5:70:F3:14:50:5F:DD:F5:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:63:01:95:41:31:1b:45:b0:47:11:04:3e:c3:a7:08:b8:21: fb:b4:98:22:c8:1f:be:04:c2:cb:7b:19:32:70:a3:63:30:61: b6:22:29:9f:33:0c:d2:35:93:f8:96:41:46:d2:88:c4:30:49: f7:1c:b2:84:3d:18:9d:16:7d:6b:71:97:76:79:03:ef:01:f2: 58:28:2e:01:9a:73:2b:79:5d:3f:47:6d:16:7f:ff:7e:85:85: 15:18:22:43:31:71:1f:5b:76:f6:cf:9c:7c:7d:88:79:91:a4: b5:5e:71:a8:ec:a1:1a:55:16:10:fd:40:67:b0:90:16:a2:ed: 09:3a:5f:49:91:55:81:b8:90:a3:eb:74:22:8c:29:73:22:31: 4d:c8:59:e6:9a:c3:6c:d0:9b:c9:75:29:e5:ff:38:da:9e:f5: 25:b2:b8:f1:ac:da:30:9d:53:fb:23:b3:7b:9b:28:8f:2d:12: d4:62:63:24:42:9f:c4:d1:b9:90:c5:9c:70:e6:1d:77:dd:b3: e9:7a:91:fa:bb:4c:ae:85:fb:11:5c:61:7c:16:50:cb:a5:c0: 46:3e:53:0e:d0:b0:86:b0:a6:0a:de:88:ea:f2:03:f7:a9:dd: 5d:2a:b6:48:02:bb:fb:a2:a8:61:ff:83:e3:24:f1:88:f0:d1: 4d:9f:fc:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRyiPYCoybLCw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OWQ1MDJlZjctMjRjZS00NWU0LTg5YzMtNTRiNTQ3YzhmOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKRvmNvWV/6DQkjc4h1mhfc5wKYpYBVa4aG Rdw2TNLto0LI97tjdgfG6Qwqx9tdhTYxvjsE4LeKBCDLfb8aMzZFkljHprbzjYmq OhGhvM2Am2/n75DB2MmRNf5EFPqUeWKmiWj4dxokV+frs6vQo9ebjRR/tX9Kyb+g q2hc6CSl9PenCJ8AMutJ1Do7JUyzX0tVoL4ZJpN1Tbi08Hr/fnS1FYy2h0x2DvqJ d3zJQWnE+mxjwu3ubvSc8CizOyzwEKbkKKK5kHWZIaZAw/OIvo2wfUywp82vloYf WkVUJUTO9+pDotr4uTIcLnRwbB8pZxCByAlI7u4uq1TYDhoO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6EYXqDA4Bd9hqt1XDzFFBf3fWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZjk4NGE5OTgtZjcwOS0z ODZlLTlhMTItNmRiNDljMWM4OTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZjAZVBMRtFsEcRBD7Dpwi4Ifu0mCLIH74Ewst7GTJwo2MwYbYiKZ8z DNI1k/iWQUbSiMQwSfccsoQ9GJ0WfWtxl3Z5A+8B8lgoLgGacyt5XT9HbRZ//36F hRUYIkMxcR9bdvbPnHx9iHmRpLVecajsoRpVFhD9QGewkBai7Qk6X0mRVYG4kKPr dCKMKXMiMU3IWeaaw2zQm8l1KeX/ONqe9SWyuPGs2jCdU/sjs3ubKI8tEtRiYyRC n8TRuZDFnHDmHXfds+l6kfq7TK6F+xFcYXwWUMulwEY+Uw7QsIawpgreiOryA/ep 3V0qtkgCu/uiqGH/g+Mk8Yjw0U2f/MI= -----END CERTIFICATE-----Generated at Sat Apr 18 03:26:48 2026 by rpki-client