$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/3043846f-d22e-3653-8f07-13ca5a78fd9e.roa File: 3043846f-d22e-3653-8f07-13ca5a78fd9e.roa (raw, json) Hash identifier: egSi3iUaqXccn9qaLlvRX5rfTW2QNKEY6daNAg4u6qk= Subject key identifier: A4:A3:13:01:2D:42:84:35:29:B4:35:CF:C5:86:E8:7F:47:62:A5:08 Certificate issuer: /CN=6f078c90-33bb-4ecc-a4d2-ceab1b8f3317 Certificate serial: 010D0C9F4328584D4CE2A5A9EA6191913390EF00 Authority key identifier: AC:AA:4E:DB:2C:62:4A:3D:4F:AB:F0:43:51:33:61:9E:2B:8B:F6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/3043846f-d22e-3653-8f07-13ca5a78fd9e.roa Signing time: Thu 26 Mar 2026 20:59:41 +0000 ROA not before: Thu 26 Mar 2026 20:59:41 +0000 ROA not after: Wed 24 Jun 2026 20:59:41 +0000 asID: 25676 IP address blocks: 209.50.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:e2:a5:a9:ea:61:91:91:33:90:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f078c90-33bb-4ecc-a4d2-ceab1b8f3317 Validity Not Before: Mar 26 20:59:41 2026 GMT Not After : Jun 24 20:59:41 2026 GMT Subject: CN=23f21acf-a776-47e2-831b-b69a4facf9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:d5:80:b0:61:f5:86:a4:31:8c:2f:9b:ff: 8c:43:ef:58:ce:1c:92:c4:bd:db:68:7e:c5:d2:6e: 53:56:0d:58:86:f6:2e:d8:58:bd:f6:66:6c:3e:f7: 18:4f:78:5a:df:d4:8b:54:27:e3:53:cc:e3:8b:a0: ec:5a:25:4f:25:32:c2:6c:39:23:79:be:4f:a3:6b: a5:5d:53:6e:9b:20:2e:aa:cd:ac:2d:14:f9:6f:30: 8f:4e:e5:e8:cc:31:5a:8a:02:95:bb:a0:7b:38:d7: eb:a4:cd:6a:6d:03:f2:99:d3:17:8c:65:d1:4b:1e: 80:4e:a5:4d:57:df:7c:29:7e:b2:5e:14:3c:03:1d: 50:bd:c8:bb:9a:52:ec:0c:3a:79:f9:e2:e0:48:50: 5b:78:f5:73:ad:a5:dc:23:fb:4b:f9:cb:81:63:87: d7:2b:3c:d7:12:44:0a:1b:c0:d4:8a:52:87:21:23: c4:21:c8:2a:0c:bf:e8:30:0a:95:b6:31:10:1a:8d: 12:f3:46:39:0b:e2:b1:67:25:5a:10:c5:e0:4a:88: 0a:b2:b0:8d:5d:5c:da:1f:13:b4:ed:b6:f5:be:02: 3e:36:b1:fb:38:5a:13:f8:a3:5c:58:cc:1b:81:15: db:43:02:4b:2d:58:cf:02:60:09:28:d9:f4:bf:20: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:13:01:2D:42:84:35:29:B4:35:CF:C5:86:E8:7F:47:62:A5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/3043846f-d22e-3653-8f07-13ca5a78fd9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.crl X509v3 Authority Key Identifier: keyid:AC:AA:4E:DB:2C:62:4A:3D:4F:AB:F0:43:51:33:61:9E:2B:8B:F6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f078c90-33bb-4ecc-a4d2-ceab1b8f3317.cer sbgp-ipAddrBlock: critical IPv4: 209.50.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5d:eb:45:e7:91:b7:9c:2a:70:01:75:6e:ac:87:a4:53:df: ac:89:48:04:c7:02:3c:bf:eb:d1:9e:58:dd:27:c4:ab:4e:f4: 11:c5:6a:4e:fc:b9:71:b2:d5:40:3f:7c:f4:56:d2:b7:31:66: 7c:f2:62:1c:82:f0:e8:76:cc:13:aa:86:d7:8e:d4:27:6d:d3: cb:7e:25:4b:f6:09:a8:72:21:0f:61:47:f1:92:a1:ff:dc:71: db:5b:eb:e0:cf:b6:00:ba:f5:ea:c4:68:02:bb:f6:74:63:24: 59:22:81:9f:2a:df:4e:83:1e:c0:d0:8b:15:b0:e0:3d:80:c3: 36:ec:d9:93:e4:2e:4c:fc:0e:f7:ac:5e:13:0d:48:25:fa:2e: 59:ff:09:ff:80:2b:42:dd:21:34:4a:75:b6:f9:7c:91:c0:8e: 76:e5:82:fb:c8:ad:0f:64:af:32:6e:bb:b0:68:9f:29:75:1a: 92:f5:b4:07:7b:01:7f:33:27:c8:80:6b:52:81:7d:88:a5:6d: 50:30:d8:d8:fa:7e:21:0c:88:ce:5a:ef:c3:cb:6d:72:3f:3b: 44:3e:a3:d1:6d:10:60:32:43:1c:32:3a:48:bb:b7:45:ee:7c: dc:4d:6a:ed:d7:d8:94:0e:65:5d:c7:75:fa:9d:92:0c:c0:61: 49:3a:0d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1M4qWp6mGRkTOQ7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYwNzhjOTAtMzNiYi00ZWNjLWE0ZDItY2VhYjFiOGYz MzE3MB4XDTI2MDMyNjIwNTk0MVoXDTI2MDYyNDIwNTk0MVowLzEtMCsGA1UEAxMk MjNmMjFhY2YtYTc3Ni00N2UyLTgzMWItYjY5YTRmYWNmOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyPVgLBh9YakMYwvm/+MQ+9YzhySxL3baH7F 0m5TVg1YhvYu2Fi99mZsPvcYT3ha39SLVCfjU8zji6DsWiVPJTLCbDkjeb5Po2ul XVNumyAuqs2sLRT5bzCPTuXozDFaigKVu6B7ONfrpM1qbQPymdMXjGXRSx6ATqVN V998KX6yXhQ8Ax1Qvci7mlLsDDp5+eLgSFBbePVzraXcI/tL+cuBY4fXKzzXEkQK G8DUilKHISPEIcgqDL/oMAqVtjEQGo0S80Y5C+KxZyVaEMXgSogKsrCNXVzaHxO0 7bb1vgI+NrH7OFoT+KNcWMwbgRXbQwJLLVjPAmAJKNn0vyANgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSjEwEtQoQ1KbQ1z8WG6H9HYqUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZjA3 OGM5MC0zM2JiLTRlY2MtYTRkMi1jZWFiMWI4ZjMzMTcvMzA0Mzg0NmYtZDIyZS0z NjUzLThmMDctMTNjYTVhNzhmZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmYwNzhjOTAtMzNiYi00ZWNjLWE0 ZDItY2VhYjFiOGYzMzE3LzZmMDc4YzkwLTMzYmItNGVjYy1hNGQyLWNlYWIxYjhm MzMxNy5jcmwwHwYDVR0jBBgwFoAUrKpO2yxiSj1Pq/BDUTNhniuL9lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZjA3OGM5MC0zM2JiLTRlY2MtYTRkMi1jZWFi MWI4ZjMzMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJld60XnkbecKnABdW6sh6RT36yJSATHAjy/69GeWN0nxKtO9BHFak78 uXGy1UA/fPRW0rcxZnzyYhyC8Oh2zBOqhteO1Cdt08t+JUv2CahyIQ9hR/GSof/c cdtb6+DPtgC69erEaAK79nRjJFkigZ8q306DHsDQixWw4D2Awzbs2ZPkLkz8Dves XhMNSCX6Lln/Cf+AK0LdITRKdbb5fJHAjnblgvvIrQ9krzJuu7Bonyl1GpL1tAd7 AX8zJ8iAa1KBfYilbVAw2Nj6fiEMiM5a78PLbXI/O0Q+o9FtEGAyQxwyOki7t0Xu fNxNau3X2JQOZV3HdfqdkgzAYUk6Da0= -----END CERTIFICATE-----Generated at Mon Apr 13 11:55:59 2026 by rpki-client