$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa File: f6d7603a-e610-3284-b984-ead8840e61a0.roa (raw, json) Hash identifier: cEtfxOrHklrzp+/6bz2vQXQ7IkvduEdzmvSV/VLz4/o= Subject key identifier: 0E:C6:06:EE:D0:8F:8B:29:3C:5B:D6:50:AB:45:68:4C:F2:F9:90:62 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D60E50C21C620DF571A216780 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 1351 IP address blocks: 209.198.99.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0c:21:c6:20:df:57:1a:21:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=3d037ad8-b770-401a-bbc3-81581306542c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:03:c3:29:61:e8:b8:76:f5:9a:60:de:71: 6d:42:86:9f:9b:3f:66:43:46:75:1a:8f:35:86:9f: 08:ac:4c:93:59:af:85:b9:7b:01:84:9a:99:89:69: a5:44:71:bc:f8:72:b8:0c:38:74:bc:64:11:af:00: 06:6f:3b:6c:3a:55:2f:04:53:c8:a3:96:7c:1e:1a: cc:b3:87:34:a5:08:80:17:07:ec:87:94:d6:d7:b4: 2b:ed:a2:8d:f1:4c:51:7f:dc:9b:1b:c8:2b:25:b0: ab:d2:34:2e:65:34:c2:c7:bc:27:96:6a:03:44:c6: ae:5a:1c:5c:6d:56:1e:e3:35:db:a8:81:32:3c:7c: 4f:b5:2f:36:e9:ac:68:42:00:15:be:6c:83:04:d1: 31:91:04:8b:c0:55:ca:bf:85:61:08:a2:55:c9:5a: 8a:ef:1e:16:76:f6:f9:f7:a9:e1:aa:4b:d9:18:e6: b6:1d:ea:c0:4c:e8:0b:be:a2:07:85:d8:d5:a3:0f: e3:a8:2f:6b:6b:c7:41:d2:82:e4:f3:71:71:35:2d: 47:d4:e1:06:18:88:5a:aa:81:d9:ee:bb:7c:9d:13: 29:0d:a6:01:d1:b7:37:1f:ea:71:6e:0f:35:9b:7b: 56:cf:4f:c2:73:2a:ad:f9:ed:b2:5d:de:6c:eb:76: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:06:EE:D0:8F:8B:29:3C:5B:D6:50:AB:45:68:4C:F2:F9:90:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.99.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:78:28:6e:0f:e1:ef:70:cf:4c:f8:68:bf:31:8f:df:95:ed: 60:9f:46:f8:2e:ed:4d:13:92:16:93:34:07:7e:9b:37:d5:bf: e2:03:dd:e8:8f:e6:fe:14:7c:3a:d9:1e:ec:18:37:4e:31:7c: 29:47:ff:68:f5:3e:ba:65:23:4f:43:9d:03:dd:0e:05:81:20: a3:eb:f1:bc:b6:2e:b5:40:ef:9d:2f:97:20:22:a2:86:b9:42: 3b:bd:80:31:78:ae:6d:9f:34:a4:77:a1:21:38:23:bd:a7:88: fb:29:16:ca:a8:db:8d:41:b0:6f:e1:81:8d:9e:fe:25:35:8b: cf:c3:cb:f7:c1:12:65:19:e3:19:06:00:4c:e9:d0:a4:6d:d5: a8:23:17:c3:18:7f:6f:3e:e8:29:c2:a6:e2:b4:de:21:1b:f7: c1:a4:63:d7:27:25:08:fc:3b:7c:22:b7:9a:59:f6:c6:5e:87: ca:d9:e7:3d:af:88:6b:02:dd:88:92:d5:af:03:20:8c:49:e8: 81:99:e3:9b:d9:0d:ba:19:5c:a1:75:1a:93:de:5b:a8:55:2f: e7:e9:ea:b9:2c:c3:0a:bf:5f:52:fd:15:d3:e7:42:31:1c:27: 6d:fd:69:ef:e2:34:23:0e:d9:21:17:bb:7f:c6:70:6b:3b:d4: 87:48:b4:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1g5QwhxiDfVxohZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk M2QwMzdhZDgtYjc3MC00MDFhLWJiYzMtODE1ODEzMDY1NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHoDwylh6Lh29Zpg3nFtQoafmz9mQ0Z1Go81 hp8IrEyTWa+FuXsBhJqZiWmlRHG8+HK4DDh0vGQRrwAGbztsOlUvBFPIo5Z8HhrM s4c0pQiAFwfsh5TW17Qr7aKN8UxRf9ybG8grJbCr0jQuZTTCx7wnlmoDRMauWhxc bVYe4zXbqIEyPHxPtS826axoQgAVvmyDBNExkQSLwFXKv4VhCKJVyVqK7x4Wdvb5 96nhqkvZGOa2HerATOgLvqIHhdjVow/jqC9ra8dB0oLk83FxNS1H1OEGGIhaqoHZ 7rt8nRMpDaYB0bc3H+pxbg81m3tWz0/Ccyqt+e2yXd5s63bbeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA7GBu7Qj4spPFvWUKtFaEzy+ZBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZjZkNzYwM2EtZTYxMC0z Mjg0LWI5ODQtZWFkODg0MGU2MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0cZjQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDHeChuD+HvcM9M+Gi/MY/fle1gn0b4Lu1NE5IWkzQHfps31b/iA93o j+b+FHw62R7sGDdOMXwpR/9o9T66ZSNPQ50D3Q4FgSCj6/G8ti61QO+dL5cgIqKG uUI7vYAxeK5tnzSkd6EhOCO9p4j7KRbKqNuNQbBv4YGNnv4lNYvPw8v3wRJlGeMZ BgBM6dCkbdWoIxfDGH9vPugpwqbitN4hG/fBpGPXJyUI/Dt8IreaWfbGXofK2ec9 r4hrAt2IktWvAyCMSeiBmeOb2Q26GVyhdRqT3luoVS/n6eq5LMMKv19S/RXT50Ix HCdt/Wnv4jQjDtkhF7t/xnBrO9SHSLR+ -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:52 2026 by rpki-client