$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/de21d9d6-48d3-3010-86d0-fb2b7c872bbe.roa File: de21d9d6-48d3-3010-86d0-fb2b7c872bbe.roa (raw, json) Hash identifier: Zkizcw0EdDg3a9RXfScR6fqQhXgI4A2FONB3RlXntyE= Subject key identifier: FF:55:FF:68:2F:8C:C1:07:26:9D:33:BA:CB:6A:C8:CA:DB:B0:B0:E0 Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F4328584D144759D22B46BD1F44958B80 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/de21d9d6-48d3-3010-86d0-fb2b7c872bbe.roa Signing time: Fri 06 Mar 2026 14:21:30 +0000 ROA not before: Fri 06 Mar 2026 14:21:30 +0000 ROA not after: Thu 04 Jun 2026 13:21:30 +0000 asID: 20283 IP address blocks: 209.99.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:47:59:d2:2b:46:bd:1f:44:95:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: Mar 6 14:21:30 2026 GMT Not After : Jun 4 13:21:30 2026 GMT Subject: CN=aa9dde27-7011-4c84-9dbd-4a6346cfe410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:46:11:2f:c1:8b:28:54:d2:27:11:88:aa: 22:ac:16:e1:d4:d8:47:8c:34:ed:f2:69:ec:0a:e1: b5:85:89:9f:76:fb:39:7b:42:ab:db:81:b4:e4:a8: a1:ef:cf:6f:19:1a:0c:80:7c:8c:37:07:18:cc:c9: 24:79:18:af:70:01:91:85:81:d4:78:0f:4d:74:96: 81:22:c6:d1:cd:db:43:c6:5a:49:b3:78:43:4a:68: da:2e:3e:2b:ae:c1:1b:ff:d5:22:80:29:46:8d:4e: 8a:2e:cd:2b:96:58:f3:7e:75:27:29:cb:3e:51:73: b8:03:14:2f:93:00:de:53:37:b7:22:aa:64:d2:34: 86:f3:9c:74:84:62:b4:21:48:c4:71:e2:67:21:94: 77:11:ff:c7:0b:97:be:f1:5e:e8:5d:6a:99:06:96: c5:27:9a:a8:6e:3c:14:7a:c3:7f:54:13:98:04:ce: af:73:6f:eb:00:8f:bd:07:e1:74:02:81:c0:0a:5b: d1:06:f3:a4:b6:04:1c:47:dd:ba:73:cd:73:19:4a: 3a:38:ea:61:e1:3a:a5:8a:08:1f:9a:59:b1:c8:e8: ed:e1:8f:b9:d5:d5:6a:32:80:7e:92:54:f7:e3:98: 2c:23:f1:50:d3:f6:a1:95:57:de:56:d4:f3:d7:81: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:FF:68:2F:8C:C1:07:26:9D:33:BA:CB:6A:C8:CA:DB:B0:B0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/de21d9d6-48d3-3010-86d0-fb2b7c872bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 209.99.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:76:d2:23:fb:cc:94:32:43:22:71:ca:d5:17:74:f9:40:ca: 39:69:35:74:2d:47:f3:e7:61:0f:3f:e7:c5:ec:69:5c:f6:be: 6c:d4:e1:63:d1:7c:c9:ee:d6:78:d3:91:c9:05:1a:fd:49:47: d5:06:b2:ec:a8:0c:20:66:da:d4:8b:9c:5f:a6:79:70:a6:e4: da:9d:77:b6:2e:d7:7d:10:71:c7:5e:03:2e:71:da:40:b5:01: 44:0b:da:07:9b:71:a7:a3:0c:9a:ad:f1:36:ec:45:01:7c:2f: 7a:f6:bc:af:07:3a:d5:c4:f0:01:67:74:02:ce:3e:a1:97:1c: 48:f5:68:3e:c1:24:7a:78:b7:22:73:11:c3:f9:fe:1d:0a:d2: 82:6a:46:ba:fc:6f:b1:49:2f:cb:5e:c5:49:0b:f6:1e:fc:44: c4:2c:81:a4:d4:9e:3b:2d:fe:cc:d3:a3:67:b0:02:58:19:28: 3e:f0:bb:99:10:5b:d6:ea:24:20:c2:94:94:b7:97:aa:20:25: b3:02:d8:81:4e:4d:fd:a7:cd:d0:2b:15:e0:d9:97:ff:3f:1c: ad:67:92:d4:d1:52:ca:0b:9f:6d:3c:ea:bb:33:23:27:eb:48: 66:6e:3e:a4:9d:d6:a2:12:9d:f2:38:a0:8a:29:c6:7e:4b:84: 9f:01:bf:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UR1nSK0a9H0SVi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI2MDMwNjE0MjEzMFoXDTI2MDYwNDEzMjEzMFowLzEtMCsGA1UEAxMk YWE5ZGRlMjctNzAxMS00Yzg0LTlkYmQtNGE2MzQ2Y2ZlNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk1GES/BiyhU0icRiKoirBbh1NhHjDTt8mns CuG1hYmfdvs5e0Kr24G05Kih789vGRoMgHyMNwcYzMkkeRivcAGRhYHUeA9NdJaB IsbRzdtDxlpJs3hDSmjaLj4rrsEb/9UigClGjU6KLs0rlljzfnUnKcs+UXO4AxQv kwDeUze3Iqpk0jSG85x0hGK0IUjEceJnIZR3Ef/HC5e+8V7oXWqZBpbFJ5qobjwU esN/VBOYBM6vc2/rAI+9B+F0AoHAClvRBvOktgQcR926c81zGUo6OOph4Tqliggf mlmxyOjt4Y+51dVqMoB+klT345gsI/FQ0/ahlVfeVtTz14F1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9V/2gvjMEHJp0zustqyMrbsLDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvZGUyMWQ5ZDYtNDhkMy0z MDEwLTg2ZDAtZmIyYjdjODcyYmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0WOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF20iP7zJQyQyJxytUXdPlAyjlpNXQtR/PnYQ8/58XsaVz2vmzU4WPR fMnu1njTkckFGv1JR9UGsuyoDCBm2tSLnF+meXCm5Nqdd7Yu130QccdeAy5x2kC1 AUQL2gebcaejDJqt8TbsRQF8L3r2vK8HOtXE8AFndALOPqGXHEj1aD7BJHp4tyJz EcP5/h0K0oJqRrr8b7FJL8texUkL9h78RMQsgaTUnjst/szTo2ewAlgZKD7wu5kQ W9bqJCDClJS3l6ogJbMC2IFOTf2nzdArFeDZl/8/HK1nktTRUsoLn2086rszIyfr SGZuPqSd1qISnfI4oIopxn5LhJ8Bv2U= -----END CERTIFICATE-----Generated at Sun Mar 22 12:31:39 2026 by rpki-client