$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f326d331-2a96-34b4-8a42-0988136d1703.roa File: f326d331-2a96-34b4-8a42-0988136d1703.roa (raw, json) Hash identifier: lsBQWbkJGD4Q2LFFqlrj7RcXmOlCHr2UYChS/CyyAm4= Subject key identifier: 36:84:DD:80:AB:5F:6D:8F:6D:96:42:66:5A:4D:0D:DD:1C:70:A8:B6 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584DD8F059FEAA4FCBA0346B0280 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f326d331-2a96-34b4-8a42-0988136d1703.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 25645 IP address blocks: 209.42.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:59:fe:aa:4f:cb:a0:34:6b:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=fe4b81bd-b703-4bf9-b1cd-ecdb4e347ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:1d:3c:9d:01:c1:12:5a:0a:52:5d:f3:52: 9e:de:69:b3:b7:98:28:37:fd:dc:b3:7c:8a:93:b3: 8d:f4:73:9d:a5:cc:09:05:a4:be:e4:1f:6a:ba:b3: 7e:1b:ea:de:59:47:01:0d:c3:62:13:9d:5d:5b:c8: 5b:97:7b:96:29:70:2b:38:90:ad:42:86:aa:3d:9a: 79:bd:74:09:bd:82:ac:3c:75:f3:9f:50:b2:11:ef: dc:0b:bd:a8:49:6a:b5:d1:08:38:56:c1:67:88:02: c2:19:b3:e2:92:61:68:c0:3d:83:77:76:fa:aa:cd: 0f:98:a8:2e:c3:c3:91:87:6a:7c:2b:65:d4:6b:ae: 56:22:5c:93:56:71:65:76:8f:28:cc:df:c9:95:c3: c3:dd:70:83:85:71:f8:20:3f:6b:d0:5a:cd:89:f4: 0d:4f:5e:9c:3c:00:91:1a:66:35:af:3e:2a:ae:76: ab:83:3a:73:ec:95:5d:a7:c3:0e:26:ed:2e:0b:b9: cf:cc:b2:e7:62:8b:7b:7d:65:cf:28:6a:72:e2:be: 95:4f:36:17:5f:d8:a7:65:db:c2:4d:d2:16:7f:c5: f7:54:c7:38:35:ef:af:45:51:8d:93:33:e4:4e:dc: 94:0c:c0:32:a7:77:0a:de:cc:62:94:1a:57:ed:79: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:84:DD:80:AB:5F:6D:8F:6D:96:42:66:5A:4D:0D:DD:1C:70:A8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f326d331-2a96-34b4-8a42-0988136d1703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:33:4d:78:43:24:99:67:74:25:cd:92:fb:43:d1:eb:63:a4: f0:06:0d:17:f7:d3:1a:f9:f4:35:a9:dc:0d:b2:92:f8:b6:a8: f8:9f:d6:eb:c2:19:90:d0:fd:b8:8c:25:2d:c3:6e:bb:00:10: 7f:e7:b3:b9:49:d5:ab:d0:9e:69:60:66:5e:31:90:97:da:64: e8:42:11:1f:83:77:18:f9:57:17:66:71:b7:03:32:75:fb:1d: 69:b3:81:b2:33:1f:ad:87:8b:59:e2:33:bb:a1:85:75:40:45: 32:77:71:76:31:6f:2b:79:b6:4f:b2:ea:a8:d8:86:cf:b8:36: 5a:52:f1:fe:45:98:b6:d9:09:35:8a:dc:11:8c:64:e6:76:a9: e0:7e:dc:d7:0c:b6:df:04:ae:a4:ae:57:ff:e8:02:80:9c:59: 36:34:79:1a:cb:52:e8:2a:5b:6a:0a:31:91:45:f5:54:25:c2: 5c:39:d5:2a:06:75:0b:88:10:71:8a:b9:d2:5d:5f:da:24:22: 1a:20:80:c6:19:00:72:71:88:f2:44:fe:01:31:a9:d1:f5:bc: 8d:2b:92:12:db:f4:39:64:ae:b3:86:73:d9:43:13:93:32:fa: 88:a2:db:34:95:77:a0:95:fe:8e:a6:d8:45:75:8f:c6:b0:f6: f1:ff:7d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Fn+qk/LoDRrAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk ZmU0YjgxYmQtYjcwMy00YmY5LWIxY2QtZWNkYjRlMzQ3YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsodPJ0BwRJaClJd81Ke3mmzt5goN/3cs3yK k7ON9HOdpcwJBaS+5B9qurN+G+reWUcBDcNiE51dW8hbl3uWKXArOJCtQoaqPZp5 vXQJvYKsPHXzn1CyEe/cC72oSWq10Qg4VsFniALCGbPikmFowD2Dd3b6qs0PmKgu w8ORh2p8K2XUa65WIlyTVnFldo8ozN/JlcPD3XCDhXH4ID9r0FrNifQNT16cPACR GmY1rz4qrnargzpz7JVdp8MOJu0uC7nPzLLnYot7fWXPKGpy4r6VTzYXX9inZdvC TdIWf8X3VMc4Ne+vRVGNkzPkTtyUDMAyp3cK3sxilBpX7XkGLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaE3YCrX22PbZZCZlpNDd0ccKi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjMyNmQzMzEtMmE5Ni0z NGI0LThhNDItMDk4ODEzNmQxNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkzTXhDJJlndCXNkvtD0etjpPAGDRf30xr59DWp3A2ykvi2qPif1uvC GZDQ/biMJS3DbrsAEH/ns7lJ1avQnmlgZl4xkJfaZOhCER+Ddxj5VxdmcbcDMnX7 HWmzgbIzH62Hi1niM7uhhXVARTJ3cXYxbyt5tk+y6qjYhs+4NlpS8f5FmLbZCTWK 3BGMZOZ2qeB+3NcMtt8ErqSuV//oAoCcWTY0eRrLUugqW2oKMZFF9VQlwlw51SoG dQuIEHGKudJdX9okIhoggMYZAHJxiPJE/gExqdH1vI0rkhLb9DlkrrOGc9lDE5My +oii2zSVd6CV/o6m2EV1j8aw9vH/fVo= -----END CERTIFICATE-----Generated at Wed May 27 17:22:45 2026 by rpki-client