$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: sVC53eHkjhpuQ5wGLunvIe2AgGWgFQnVhnx2RAjUTmk= Subject key identifier: C1:78:5A:40:DF:22:50:5C:C6:02:B3:59:27:22:55:70:3E:90:0D:2E Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DEF45DB337E29CE100F2ABD00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:db:33:7e:29:ce:10:0f:2a:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=92dee5b2-7cd1-4a58-9d41-17d6fe69d121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:56:aa:60:22:8d:4d:06:2b:d7:6b:84:7b: 60:af:cb:e0:79:f7:09:ed:e5:8f:5b:49:65:94:d6: 67:56:28:2d:db:1d:42:a0:e3:b4:f6:5a:cb:73:eb: 80:30:cc:94:a0:85:e6:e8:0f:c3:9b:49:bf:91:df: 4e:ee:55:10:04:f9:cc:36:9e:5e:bc:e9:f5:e0:87: 79:2e:12:84:7f:a2:7f:9f:f5:61:da:93:21:db:35: 2e:41:4c:51:91:2f:4a:e8:c0:2e:f7:e2:50:74:fe: fc:7f:6c:97:fc:f2:9f:9f:b9:b9:f7:e0:7e:64:c6: fd:4d:7e:05:ab:6d:dd:f3:b1:8c:fe:91:cc:a7:74: 47:25:ba:61:f2:fc:1b:60:cf:94:6c:a8:60:77:43: 98:d6:d1:a6:98:74:03:20:94:a5:d4:b4:c0:96:43: 96:f6:4f:45:dd:a4:5d:9a:92:53:6d:51:bf:b1:3b: c3:80:85:6f:94:df:ba:52:da:ac:c2:b3:21:68:78: 86:33:2a:81:83:78:d7:9e:aa:51:c6:b4:84:3b:81: 1c:a6:a4:13:6e:a7:90:f3:29:df:6c:31:ac:b4:a8: ae:d0:14:fa:3c:bf:f7:56:28:0f:3c:37:b1:d3:62: 07:be:1f:58:db:ba:d5:48:25:bb:ab:0d:7d:e5:33: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:78:5A:40:DF:22:50:5C:C6:02:B3:59:27:22:55:70:3E:90:0D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bd:4f:15:25:77:ec:17:df:25:ce:b8:f0:87:d5:d4:02:f0: d2:52:01:57:68:37:42:ea:51:86:22:1e:a8:1b:39:e1:94:6c: c1:df:ef:5f:6a:53:35:79:cf:22:8f:b1:66:cb:16:ba:47:37: 17:25:ee:a0:3b:e0:47:b1:3f:59:95:2b:bc:d5:27:63:2f:25: d9:02:39:e7:90:ea:c1:40:5e:56:b9:f5:93:60:0a:d6:60:86: 97:58:42:96:80:91:07:94:a4:c2:47:42:14:1c:05:5f:51:a1: fa:be:82:9b:6d:1d:f8:d1:d0:dc:92:8c:49:b2:cf:43:03:ec: 04:b1:85:eb:8f:9b:d8:e0:3f:e2:2a:b3:17:07:97:11:f9:6f: 82:4c:75:ed:30:b3:cf:23:9c:be:6e:67:9a:d2:c3:f1:b5:5d: 4e:96:66:b8:e7:2c:fe:fb:3d:f6:11:e1:eb:2f:7c:b6:fd:b3: 4e:72:81:c3:c3:59:c7:39:d0:e7:b9:ed:52:7d:d2:94:11:e0: 69:9f:76:5f:bd:1d:03:db:74:f3:13:c2:f1:76:5b:15:d1:e7: 97:fa:a4:76:b6:53:48:ab:4f:b3:17:67:f1:e6:3d:1a:41:aa: db:4f:b6:ea:6b:16:21:80:4f:62:e3:62:cc:ab:45:6f:13:9d: fe:dc:4e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRdszfinOEA8qvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk OTJkZWU1YjItN2NkMS00YTU4LTlkNDEtMTdkNmZlNjlkMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqelWqmAijU0GK9drhHtgr8vgefcJ7eWPW0ll lNZnVigt2x1CoOO09lrLc+uAMMyUoIXm6A/Dm0m/kd9O7lUQBPnMNp5evOn14Id5 LhKEf6J/n/Vh2pMh2zUuQUxRkS9K6MAu9+JQdP78f2yX/PKfn7m59+B+ZMb9TX4F q23d87GM/pHMp3RHJbph8vwbYM+UbKhgd0OY1tGmmHQDIJSl1LTAlkOW9k9F3aRd mpJTbVG/sTvDgIVvlN+6UtqswrMhaHiGMyqBg3jXnqpRxrSEO4EcpqQTbqeQ8ynf bDGstKiu0BT6PL/3VigPPDex02IHvh9Y27rVSCW7qw195TMLVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF4WkDfIlBcxgKzWSciVXA+kA0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG9TxUld+wX3yXOuPCH1dQC8NJSAVdoN0LqUYYiHqgbOeGUbMHf719q UzV5zyKPsWbLFrpHNxcl7qA74EexP1mVK7zVJ2MvJdkCOeeQ6sFAXla59ZNgCtZg hpdYQpaAkQeUpMJHQhQcBV9Rofq+gpttHfjR0NySjEmyz0MD7ASxheuPm9jgP+Iq sxcHlxH5b4JMde0ws88jnL5uZ5rSw/G1XU6WZrjnLP77PfYR4esvfLb9s05ygcPD Wcc50Oe57VJ90pQR4Gmfdl+9HQPbdPMTwvF2WxXR55f6pHa2U0irT7MXZ/HmPRpB qttPtuprFiGAT2LjYsyrRW8Tnf7cTuU= -----END CERTIFICATE-----Generated at Wed May 27 18:46:08 2026 by rpki-client