$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa File: f8375e10-8d1d-3484-aaeb-e58fd215889e.roa (raw, json) Hash identifier: z/ViCRk5Prv2nPvaeZwffcTfW/EetlB5eYsrBxLjsu4= Subject key identifier: B5:F3:1B:4B:18:03:34:4F:2C:6E:FE:64:5D:5E:DB:D1:4B:75:1E:65 Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584D60E4F526555BD0F88867EB00 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30698 IP address blocks: 209.221.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f5:26:55:5b:d0:f8:88:67:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=3592e36e-3633-43ba-97a4-95ed22caf431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b3:15:0d:d7:f6:be:64:7a:70:c2:34:a4:d7: d6:5e:ba:b0:a6:ac:73:eb:3b:da:ee:e8:47:05:af: 29:34:02:b2:76:f1:0b:d6:02:07:73:6e:5e:14:2c: 0b:1e:af:5b:32:18:c8:ce:b3:03:d6:ee:d5:9e:60: cd:55:5a:eb:09:1d:e2:44:4b:85:fa:ba:41:da:bd: 36:7e:81:30:12:d5:e4:95:dd:2c:2e:77:01:85:be: 18:9b:6c:66:04:79:8d:8b:e1:59:de:63:7c:2e:bd: a6:34:57:60:1f:f8:c9:11:1d:48:4e:5a:4e:05:95: fa:de:ba:1d:8a:76:8d:ea:9b:c9:56:11:e1:8b:91: af:d6:d8:e7:a5:38:70:ba:ec:b0:2b:e5:00:04:a7: f9:10:e5:52:f0:81:96:05:0c:8e:23:71:60:3b:2f: 35:c0:b3:b3:61:02:da:80:cf:9b:35:1d:01:c5:53: bc:75:15:6f:7d:11:f2:91:24:d3:55:2b:1c:7e:81: 18:e3:1f:c9:67:d2:7c:1e:7d:8d:21:4c:4a:a9:e0: 3d:57:27:0a:28:99:3c:30:47:77:09:0a:14:6e:a2: f1:27:d1:f0:b9:c9:1e:04:70:c8:5b:eb:46:76:47: a8:ed:71:5c:93:6d:37:5f:82:94:f6:10:e9:96:66: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:1B:4B:18:03:34:4F:2C:6E:FE:64:5D:5E:DB:D1:4B:75:1E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:97:17:54:12:e4:d5:24:db:23:df:84:f0:df:d6:33:e7:4b: 93:41:be:1f:a2:ed:79:a8:16:93:be:6e:98:3d:ec:78:e6:5a: 0f:80:f1:49:af:96:0e:e5:c7:9c:1d:35:37:15:e7:48:8e:07: 5c:60:b6:dc:ff:df:0b:72:a7:c2:0d:a6:75:5d:f9:61:d4:32: e4:c5:35:3e:4f:93:90:6f:4d:f5:16:89:f3:b6:d7:fa:49:f0: d3:27:48:0c:33:43:fa:40:11:03:14:2a:a0:b9:97:68:b1:d3: 9c:18:27:9b:2e:05:c7:d0:16:dd:9d:c0:ee:34:62:c2:86:3f: 3a:6a:57:e9:26:45:e7:f6:07:32:cb:79:e9:5c:6f:40:f2:a7: c6:d6:7f:d9:46:02:dc:1e:46:00:c1:fc:bd:1f:dc:1e:b6:45: 6f:55:c4:c0:1a:5a:3b:ae:31:25:74:25:8c:3e:c1:9a:0c:d3: b8:b8:0e:57:9d:02:26:e6:b8:cc:66:ef:a5:3a:04:9e:d5:2e: 77:a2:ea:5f:d0:f7:32:5c:6a:98:12:1e:41:21:38:80:58:da: 76:41:68:16:53:cc:27:f3:34:d3:1d:28:83:a2:65:b6:5c:34: 63:ca:a5:43:b6:44:6e:4f:04:20:5a:7a:f5:41:48:70:5b:d6: f4:af:29:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PUmVVvQ+Ihn6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MzU5MmUzNmUtMzYzMy00M2JhLTk3YTQtOTVlZDIyY2FmNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7MVDdf2vmR6cMI0pNfWXrqwpqxz6zva7uhH Ba8pNAKydvEL1gIHc25eFCwLHq9bMhjIzrMD1u7VnmDNVVrrCR3iREuF+rpB2r02 foEwEtXkld0sLncBhb4Ym2xmBHmNi+FZ3mN8Lr2mNFdgH/jJER1ITlpOBZX63rod inaN6pvJVhHhi5Gv1tjnpThwuuywK+UABKf5EOVS8IGWBQyOI3FgOy81wLOzYQLa gM+bNR0BxVO8dRVvfRHykSTTVSscfoEY4x/JZ9J8Hn2NIUxKqeA9VycKKJk8MEd3 CQoUbqLxJ9HwuckeBHDIW+tGdkeo7XFck203X4KU9hDplmaLHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXzG0sYAzRPLG7+ZF1e29FLdR5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjgzNzVlMTAtOGQxZC0z NDg0LWFhZWItZTU4ZmQyMTU4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmXF1QS5NUk2yPfhPDf1jPnS5NBvh+i7XmoFpO+bpg97HjmWg+A8Umv lg7lx5wdNTcV50iOB1xgttz/3wtyp8INpnVd+WHUMuTFNT5Pk5BvTfUWifO21/pJ 8NMnSAwzQ/pAEQMUKqC5l2ix05wYJ5suBcfQFt2dwO40YsKGPzpqV+kmRef2BzLL eelcb0Dyp8bWf9lGAtweRgDB/L0f3B62RW9VxMAaWjuuMSV0JYw+wZoM07i4Dled AibmuMxm76U6BJ7VLnei6l/Q9zJcapgSHkEhOIBY2nZBaBZTzCfzNNMdKIOiZbZc NGPKpUO2RG5PBCBaevVBSHBb1vSvKaQ= -----END CERTIFICATE-----Generated at Thu Apr 9 03:42:01 2026 by rpki-client