$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa File: 7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa (raw, json) Hash identifier: PcIaqPPDl723Ofqd2FoTTMNeHf69I4g6n1Q7ZzdADi8= Subject key identifier: 63:9C:D4:EE:E2:D3:F0:FD:89:A8:1A:33:35:E7:51:04:5A:69:1F:FC Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584DE580854AAE019E3A5FE64430 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa Signing time: Wed 20 May 2026 13:00:31 +0000 ROA not before: Wed 20 May 2026 13:00:31 +0000 ROA not after: Tue 18 Aug 2026 13:00:31 +0000 asID: 11233 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:80:85:4a:ae:01:9e:3a:5f:e6:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 20 13:00:31 2026 GMT Not After : Aug 18 13:00:31 2026 GMT Subject: CN=c87d1718-671d-435f-920a-1ab348687821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:d5:1d:1d:83:9e:ac:4f:a6:78:cb:ab:3c: 97:4f:2f:48:1f:f3:ea:d5:7a:30:89:c2:38:46:5e: fc:85:6e:7e:d3:3a:68:68:d4:77:7b:a6:40:c7:fd: 9d:a6:6a:53:d1:96:d5:7f:71:86:91:6b:5e:d1:a9: f4:01:f1:04:10:33:dc:66:41:d8:53:65:8c:3d:df: f9:7e:a9:d8:82:30:5b:e5:c9:21:7b:93:cf:37:04: b3:1c:78:e6:83:24:ea:ac:f4:60:0c:9a:6a:cd:c6: 88:ca:aa:25:7f:c7:2c:46:39:c7:4b:6c:c7:47:ad: f1:82:26:cb:ad:76:11:c1:b5:ae:cf:5c:b3:ce:7f: 58:57:61:ed:02:d1:ea:76:2c:57:e0:31:e4:7c:6c: 73:9a:1e:36:6d:93:0c:7f:4e:5d:b1:8f:46:45:87: f2:8c:1b:9c:ad:38:d3:ff:83:0c:8e:46:d1:1d:1a: a2:9b:7f:5f:53:26:e5:ab:78:2b:1c:a3:13:a3:e9: 94:76:3b:8f:52:e4:4e:f6:e0:9e:6d:0c:dd:93:74: 06:4d:09:8d:e6:61:3c:55:50:cd:83:65:b2:92:65: 2c:57:57:77:18:61:0c:76:8d:3b:d7:55:ff:fe:a3: 8a:70:4e:c1:0c:f3:46:7a:14:89:ae:a5:90:c3:58: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:D4:EE:E2:D3:F0:FD:89:A8:1A:33:35:E7:51:04:5A:69:1F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7d358525-81a2-39e6-a6da-366bb0e4ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7d:b8:23:0c:61:49:a5:14:02:29:07:6f:75:74:6e:3e:d8: 2e:fb:4c:24:ba:85:74:98:42:e3:74:a2:27:74:f3:94:77:2f: 07:e5:8e:5a:25:15:01:4e:5e:3d:25:9b:cb:c7:43:ed:b5:9e: 68:c1:4d:1f:1a:b7:4d:b3:f8:58:28:7e:a6:90:b4:bb:91:d5: b9:7c:23:53:b4:ea:2f:7a:38:c9:bf:77:c4:ab:78:78:bd:c3: 19:bd:bd:cd:9d:a2:ab:fe:51:5b:58:99:f1:77:cc:59:7b:13: b7:12:93:80:07:c0:77:f4:7d:79:0e:bc:6f:e0:a2:a9:af:3a: 8a:16:05:d0:d8:4f:53:d2:02:5e:f9:19:03:a0:9a:63:c3:7a: 4f:3b:06:e8:93:49:49:e2:73:db:c2:70:2d:d3:a2:8b:62:00: 80:4c:f7:da:b5:c7:15:23:03:d9:43:e5:33:82:2e:03:ac:97: cc:7a:ac:3b:06:f2:cf:eb:50:c1:d4:f6:7c:de:b4:94:43:05: cd:84:15:8f:93:e5:34:f8:87:35:39:14:b1:20:de:a0:0e:a7: e7:e6:b0:0c:37:b8:b7:a7:1a:d2:60:91:f0:c1:e9:30:d0:69: f3:7e:e3:67:57:23:95:c4:32:c2:9b:89:a0:33:79:e3:de:6c: 97:02:4c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lgIVKrgGeOl/mRDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk Yzg3ZDE3MTgtNjcxZC00MzVmLTkyMGEtMWFiMzQ4Njg3ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3rVHR2DnqxPpnjLqzyXTy9IH/Pq1XowicI4 Rl78hW5+0zpoaNR3e6ZAx/2dpmpT0ZbVf3GGkWte0an0AfEEEDPcZkHYU2WMPd/5 fqnYgjBb5ckhe5PPNwSzHHjmgyTqrPRgDJpqzcaIyqolf8csRjnHS2zHR63xgibL rXYRwbWuz1yzzn9YV2HtAtHqdixX4DHkfGxzmh42bZMMf05dsY9GRYfyjBucrTjT /4MMjkbRHRqim39fUyblq3grHKMTo+mUdjuPUuRO9uCebQzdk3QGTQmN5mE8VVDN g2WykmUsV1d3GGEMdo0711X//qOKcE7BDPNGehSJrqWQw1gSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOc1O7i0/D9iagaMzXnUQRaaR/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvN2QzNTg1MjUtODFhMi0z OWU2LWE2ZGEtMzY2YmIwZTRiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl9uCMMYUmlFAIpB291dG4+2C77TCS6hXSYQuN0oid085R3Lwfljlol FQFOXj0lm8vHQ+21nmjBTR8at02z+FgofqaQtLuR1bl8I1O06i96OMm/d8SreHi9 wxm9vc2doqv+UVtYmfF3zFl7E7cSk4AHwHf0fXkOvG/goqmvOooWBdDYT1PSAl75 GQOgmmPDek87BuiTSUnic9vCcC3TootiAIBM99q1xxUjA9lD5TOCLgOsl8x6rDsG 8s/rUMHU9nzetJRDBc2EFY+T5TT4hzU5FLEg3qAOp+fmsAw3uLenGtJgkfDB6TDQ afN+42dXI5XEMsKbiaAzeePebJcCTLE= -----END CERTIFICATE-----Generated at Mon Jun 1 22:57:08 2026 by rpki-client