$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa File: 650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa (raw, json) Hash identifier: QKrZtkUQd5QETp7HNDnKvnUP8XLb78I6a+PWZJuSLb4= Subject key identifier: C5:46:29:EA:DC:54:55:C0:82:F6:F0:DC:95:E2:BB:0D:33:1B:D3:D5 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584D6AAA749B22C54B6F6E237180 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 209.169.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:74:9b:22:c5:4b:6f:6e:23:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=9b101488-27e5-41a8-84b2-bce1bd37efd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:20:fe:15:4a:b5:fa:19:69:55:8d:e2:f6: e5:ff:df:33:72:68:73:62:64:47:83:20:e4:a6:75: 58:46:2c:bd:c5:d5:1a:79:e6:15:a4:73:fe:51:61: 75:76:44:3f:2f:b5:44:ad:b7:66:45:a1:90:91:57: b2:ca:8e:8d:ca:72:3f:3c:fb:7e:78:e1:fc:6c:cc: 30:02:9d:3f:68:52:a0:76:83:fc:1a:37:2a:45:7d: b6:06:ea:c6:48:2e:08:72:f7:48:56:b3:e2:81:77: 5c:ac:a9:56:be:0a:08:92:d9:85:36:63:0d:df:3c: 0c:01:db:0c:3e:37:44:85:7e:35:ab:82:fa:a3:ed: 7f:1c:40:0c:a8:35:b0:19:08:1e:8b:4d:54:ff:d8: 0f:86:dd:89:e7:e1:4f:86:cc:53:1f:83:0a:f7:fc: 9c:99:db:21:6e:96:ad:3c:f8:90:3b:fc:e1:b4:90: 8a:b1:df:e4:cf:dd:d3:d5:36:4a:16:84:cb:4b:d7: 1e:50:bc:cd:05:f3:3f:a0:18:93:1c:71:2a:48:a5: 22:de:23:62:a8:57:a6:b3:25:eb:c2:b3:d1:be:80: 02:5f:a8:e8:b8:32:4c:56:9d:86:73:6c:e1:7b:66: a3:e4:9c:5b:f8:77:03:8f:75:8a:a5:64:f2:f4:5c: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:46:29:EA:DC:54:55:C0:82:F6:F0:DC:95:E2:BB:0D:33:1B:D3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e3:2d:b2:e1:cc:10:69:31:18:92:91:47:ca:25:e8:be:2f: 2d:c0:59:7f:37:05:eb:3b:e6:60:15:cf:fd:bb:2a:c9:37:a6: 72:fc:38:4c:11:52:9f:9e:b2:68:7e:22:98:db:fb:c4:8f:68: 99:79:2a:18:34:b2:05:08:20:f3:ad:37:65:87:b8:c5:40:34: 61:7d:73:06:d8:a6:3c:e8:2b:f5:55:0c:a9:4e:52:d1:f6:98: 6a:16:af:5a:19:bd:eb:4b:ab:8c:d9:95:c7:b7:6e:27:1b:5b: da:d6:0d:b0:06:41:b3:3b:c7:ac:34:bc:31:f6:b8:e7:66:91: 16:ed:29:f7:09:ff:d3:64:d3:a2:30:3c:ee:72:c6:f0:3c:d2: fe:39:d3:60:3d:a4:eb:62:ed:e7:1e:b9:9b:dd:6c:bd:cd:06: 8f:e3:d8:90:b2:47:7f:11:4d:29:25:08:61:b3:82:25:59:54: e7:20:7e:7e:23:25:38:4c:e0:e3:a2:5a:3f:c0:b9:af:6b:3b: a7:aa:5b:38:47:85:bb:07:c3:98:45:76:03:9f:bb:55:f3:c0: 48:76:a3:d4:79:d2:a3:dd:65:41:9e:f3:ac:0a:f0:30:07:43: 9f:2f:07:45:22:d7:71:7d:a8:96:4d:3a:75:59:7a:b5:e0:a3: 43:32:16:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnSbIsVLb24jcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OWIxMDE0ODgtMjdlNS00MWE4LTg0YjItYmNlMWJkMzdlZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpkg/hVKtfoZaVWN4vbl/98zcmhzYmRHgyDk pnVYRiy9xdUaeeYVpHP+UWF1dkQ/L7VErbdmRaGQkVeyyo6NynI/PPt+eOH8bMww Ap0/aFKgdoP8GjcqRX22BurGSC4IcvdIVrPigXdcrKlWvgoIktmFNmMN3zwMAdsM PjdEhX41q4L6o+1/HEAMqDWwGQgei01U/9gPht2J5+FPhsxTH4MK9/ycmdshbpat PPiQO/zhtJCKsd/kz93T1TZKFoTLS9ceULzNBfM/oBiTHHEqSKUi3iNiqFemsyXr wrPRvoACX6jouDJMVp2Gc2zhe2aj5Jxb+HcDj3WKpWTy9Fxw/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVGKercVFXAgvbw3JXiuw0zG9PVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNjUwNDk0ZjktN2Q4OS0z YWQyLWI2ZjQtZmM3YzdjZTQ0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ankMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITjLbLhzBBpMRiSkUfKJei+Ly3AWX83Bes75mAVz/27Ksk3pnL8OEwR Up+esmh+Ipjb+8SPaJl5Khg0sgUIIPOtN2WHuMVANGF9cwbYpjzoK/VVDKlOUtH2 mGoWr1oZvetLq4zZlce3bicbW9rWDbAGQbM7x6w0vDH2uOdmkRbtKfcJ/9Nk06Iw PO5yxvA80v4502A9pOti7eceuZvdbL3NBo/j2JCyR38RTSklCGGzgiVZVOcgfn4j JThM4OOiWj/Aua9rO6eqWzhHhbsHw5hFdgOfu1XzwEh2o9R50qPdZUGe86wK8DAH Q58vB0Ui13F9qJZNOnVZerXgo0MyFpc= -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:17 2026 by rpki-client