$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa File: c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa (raw, json) Hash identifier: 9c09o7yZv3hn/oGsA/fd8+9xnE7GCts+V7dE79qXMDo= Subject key identifier: 64:83:86:5A:5E:B5:E3:52:1D:7A:5C:4B:BE:BA:4E:BE:DA:BD:AF:76 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584E04360498D7140B6377ECF940 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 11404 IP address blocks: 209.237.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:04:98:d7:14:0b:63:77:ec:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=aef525c5-d3ba-499d-93e5-da069e79189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:ab:d5:de:4f:f7:5b:5d:1f:15:b8:32:09: 9a:0b:e4:8d:65:63:60:7b:ee:9f:00:76:04:9b:c5: f6:ad:31:b9:8d:96:d8:34:b7:2a:f7:43:2b:52:b3: 33:61:8a:84:fb:51:a8:e0:43:d9:e7:63:68:68:b2: 96:f6:dd:08:fd:8a:24:05:7d:21:5e:f9:5b:42:fe: 13:e4:e5:5a:31:58:2a:73:72:32:6a:16:a9:81:44: ee:18:cb:8b:dd:56:b8:82:e8:c5:04:1d:24:fe:4b: 2c:3e:8a:c0:4d:b8:f5:c4:a1:44:9f:a7:72:39:c7: 1d:a8:4a:c9:64:3d:43:0e:f9:b8:40:66:3e:9d:9b: 3a:8f:56:a8:8a:a5:2d:2e:0b:01:a0:07:20:e9:1d: fe:52:fb:2d:b2:60:97:b2:fd:34:c3:2c:77:6f:ae: df:52:5f:d7:bb:75:7e:f5:fd:8d:0e:fc:e9:5d:22: 8d:4e:cf:a2:51:55:91:0a:b1:e5:fa:14:57:cf:74: 80:c9:ea:f8:97:55:4c:10:97:03:3b:b5:90:19:0d: b4:6e:4f:f6:91:4d:62:0b:7e:24:d0:5d:35:cf:6a: f6:41:c5:77:8d:05:17:93:11:c7:88:f2:fb:85:65: f6:25:36:7a:0e:07:e2:b6:45:bb:be:d0:bb:64:7e: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:83:86:5A:5E:B5:E3:52:1D:7A:5C:4B:BE:BA:4E:BE:DA:BD:AF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c4feb46e-9dc7-3cbb-a4a7-a1715ca6b341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d5:80:fa:01:75:77:fe:a6:50:52:c7:45:74:b3:ba:22:d7: a6:a3:11:e0:70:8e:fc:ad:95:c0:1a:12:04:4b:ed:ac:4d:30: 67:13:13:35:f9:21:cd:f7:06:58:0d:9e:f7:ee:35:1f:53:b0: d7:a4:47:06:bb:22:eb:a1:2a:50:e2:3d:3b:ca:cc:2b:1d:d9: e9:ef:6d:54:a6:86:0a:77:9e:34:9b:d5:b1:ad:db:2c:15:c5: 7e:81:d5:a5:e4:06:12:0c:cf:eb:ba:80:b4:7c:c3:6a:a7:75: 46:93:b2:d9:f6:8a:28:1f:ff:f9:36:38:39:3e:4b:69:20:4d: d4:a1:cf:ac:52:9c:0f:5e:b8:a6:8e:14:ef:93:e7:56:f8:ae: 0c:ec:57:99:cc:3e:5a:7c:2e:ac:bc:3f:71:2d:d6:2d:3e:48: 4b:a5:c8:72:8c:b8:db:81:5a:39:9d:1b:4a:cf:20:27:e8:e0: 4a:80:72:88:d4:8e:be:e1:90:cb:44:6f:3c:1b:c0:bc:11:af: 3f:a6:e5:5d:f8:df:30:4d:bd:af:0c:fd:45:a3:ae:e5:d9:18: 34:34:d0:d2:04:e6:c2:eb:60:69:1a:02:49:fb:6e:18:7e:a3: 9b:6c:4a:ce:53:41:eb:55:11:ef:fa:cb:07:e9:91:2b:61:6d: af:f3:03:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgSY1xQLY3fs+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YWVmNTI1YzUtZDNiYS00OTlkLTkzZTUtZGEwNjllNzkxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGWr1d5P91tdHxW4MgmaC+SNZWNge+6fAHYE m8X2rTG5jZbYNLcq90MrUrMzYYqE+1Go4EPZ52NoaLKW9t0I/YokBX0hXvlbQv4T 5OVaMVgqc3IyahapgUTuGMuL3Va4gujFBB0k/kssPorATbj1xKFEn6dyOccdqErJ ZD1DDvm4QGY+nZs6j1aoiqUtLgsBoAcg6R3+UvstsmCXsv00wyx3b67fUl/Xu3V+ 9f2NDvzpXSKNTs+iUVWRCrHl+hRXz3SAyer4l1VMEJcDO7WQGQ20bk/2kU1iC34k 0F01z2r2QcV3jQUXkxHHiPL7hWX2JTZ6DgfitkW7vtC7ZH7y+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSDhlpeteNSHXpcS766Tr7ava92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYzRmZWI0NmUtOWRjNy0z Y2JiLWE0YTctYTE3MTVjYTZiMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzVgPoBdXf+plBSx0V0s7oi16ajEeBwjvytlcAaEgRL7axNMGcTEzX5 Ic33BlgNnvfuNR9TsNekRwa7IuuhKlDiPTvKzCsd2envbVSmhgp3njSb1bGt2ywV xX6B1aXkBhIMz+u6gLR8w2qndUaTstn2iigf//k2ODk+S2kgTdShz6xSnA9euKaO FO+T51b4rgzsV5nMPlp8Lqy8P3Et1i0+SEulyHKMuNuBWjmdG0rPICfo4EqAcojU jr7hkMtEbzwbwLwRrz+m5V343zBNva8M/UWjruXZGDQ00NIE5sLrYGkaAkn7bhh+ o5tsSs5TQetVEe/6ywfpkSthba/zA3M= -----END CERTIFICATE-----Generated at Mon Jun 1 22:57:15 2026 by rpki-client