$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa File: 0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa (raw, json) Hash identifier: 42KTc8Jkig4mRilNnjV3dsNsWsGeEF9Ab8txWyMsA8w= Subject key identifier: AF:2A:EA:80:D6:67:B1:6E:2F:76:80:B9:3D:13:58:EE:02:7B:3C:75 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D59EA73243D9FA58943A4C840 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 25899 IP address blocks: 209.237.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:73:24:3d:9f:a5:89:43:a4:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=452919c9-a8ec-47df-9ed2-c6cf9c8ea0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:4b:7f:fd:08:38:cb:54:b4:f5:04:98:0a: 40:e2:b0:91:d6:11:03:0e:2f:da:22:0f:49:3a:67: c7:ad:62:60:5b:6b:a1:bc:bb:de:fb:74:39:74:8f: 63:cf:bd:d2:88:e9:6e:20:ee:10:c1:b8:ce:cb:72: 2b:9b:b1:f5:9b:b4:3a:d5:d1:d1:a6:12:4f:f4:44: 66:4f:65:36:c7:96:ab:37:3a:7e:36:b9:5c:ff:d4: 46:b6:5d:96:eb:5c:3e:76:46:68:a2:a5:28:3d:c5: e1:4b:00:83:13:eb:db:e5:5b:e9:53:00:d8:f1:ed: 31:ec:b1:11:9b:53:84:8a:aa:ba:28:81:af:1e:61: 81:9c:ae:d3:da:06:f6:1a:d6:a8:91:a7:72:70:4d: 7f:94:61:47:56:53:99:11:a7:5c:67:33:e5:d4:b6: 73:59:42:7e:76:1b:01:9f:aa:92:02:46:63:e4:6e: 04:7d:55:64:0c:d1:57:8b:e4:6a:9c:bd:7f:b2:86: 42:2b:9d:aa:e5:2c:46:98:fc:8b:b1:98:05:61:7a: a9:20:db:37:be:0e:e4:fe:fb:be:af:09:18:ce:94: ae:6c:32:e0:b4:1a:86:41:77:6b:20:f6:0f:7d:d1: fb:1c:e0:1e:df:40:0e:0b:53:40:28:7c:77:86:67: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:EA:80:D6:67:B1:6E:2F:76:80:B9:3D:13:58:EE:02:7B:3C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:64:1c:bc:5b:f6:5c:19:99:bb:5d:b0:10:9a:61:f1:c7:44: 22:7a:4d:71:1b:94:e9:de:6a:9a:c5:ac:a3:fd:96:01:65:7d: b7:27:46:2e:78:e1:bb:17:b1:79:94:c0:48:29:d5:cb:56:0e: b0:4d:e4:e7:91:96:d8:28:6a:f9:18:f7:06:0f:15:c7:68:6c: e3:7e:ee:c7:dd:4e:72:b3:8a:08:e4:ce:da:19:9b:da:4f:e8: 38:48:68:9e:64:99:05:61:1d:7e:6c:6e:cb:69:aa:78:f0:f9: 05:a8:9b:e6:2c:7f:a5:a1:fa:6b:22:30:1d:91:52:56:00:95: 16:83:28:09:4a:02:4c:34:59:aa:ba:1a:7c:32:dc:6d:54:92: b4:e4:c9:c1:d4:9b:1e:ff:e9:51:63:86:1f:e9:b5:a6:d1:81: ed:97:87:ca:6d:de:fd:7a:d7:ae:3d:84:58:a1:39:6c:6a:3b: 19:97:0d:2a:71:60:84:31:fc:45:c2:e0:2e:12:08:aa:9a:48: 24:14:58:e9:2d:09:d7:c2:63:f0:3e:43:1e:f2:ca:32:32:61: db:74:61:61:4c:b7:9d:79:a9:6a:c3:82:dd:fd:15:59:1b:13: 34:7c:e3:60:87:a3:c7:92:d8:20:2b:c4:ec:e8:17:82:ab:3c: 76:ce:d0:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nMkPZ+liUOkyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NDUyOTE5YzktYThlYy00N2RmLTllZDItYzZjZjljOGVhMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFtLf/0IOMtUtPUEmApA4rCR1hEDDi/aIg9J OmfHrWJgW2uhvLve+3Q5dI9jz73SiOluIO4QwbjOy3Irm7H1m7Q61dHRphJP9ERm T2U2x5arNzp+Nrlc/9RGtl2W61w+dkZooqUoPcXhSwCDE+vb5VvpUwDY8e0x7LER m1OEiqq6KIGvHmGBnK7T2gb2GtaokadycE1/lGFHVlOZEadcZzPl1LZzWUJ+dhsB n6qSAkZj5G4EfVVkDNFXi+RqnL1/soZCK52q5SxGmPyLsZgFYXqpINs3vg7k/vu+ rwkYzpSubDLgtBqGQXdrIPYPfdH7HOAe30AOC1NAKHx3hmem6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8q6oDWZ7FuL3aAuT0TWO4Cezx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGFiYWQzNTktMmQ2OS0z NGJkLTlkOGMtYWM4MTAwZDVjZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpkHLxb9lwZmbtdsBCaYfHHRCJ6TXEblOneaprFrKP9lgFlfbcnRi54 4bsXsXmUwEgp1ctWDrBN5OeRltgoavkY9wYPFcdobON+7sfdTnKzigjkztoZm9pP 6DhIaJ5kmQVhHX5sbstpqnjw+QWom+Ysf6Wh+msiMB2RUlYAlRaDKAlKAkw0Waq6 Gnwy3G1UkrTkycHUmx7/6VFjhh/ptabRge2Xh8pt3v161649hFihOWxqOxmXDSpx YIQx/EXC4C4SCKqaSCQUWOktCdfCY/A+Qx7yyjIyYdt0YWFMt515qWrDgt39FVkb EzR842CHo8eS2CArxOzoF4KrPHbO0Mo= -----END CERTIFICATE-----Generated at Mon Apr 13 17:51:20 2026 by rpki-client