$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: 3c+rLlC+ITPXPJnI2oJ3bvG8ntOzf6iGToV1xIB2EnM= Subject key identifier: 61:B7:C6:4B:B3:04:35:1E:95:82:8A:27:9F:70:D8:E3:8A:9B:1B:CE Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584DEDE098311613D965FEF6C0A0 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:98:31:16:13:d9:65:fe:f6:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=7dbc80cf-31ce-40e0-9fd2-fe77d550f50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:ba:e1:bc:b8:f5:91:a7:e0:a4:89:f0:67: b8:79:ab:da:60:55:aa:78:20:4b:5f:6a:12:bb:c1: 9c:48:49:04:e9:e6:9c:1c:1f:c1:58:63:c8:1f:98: 87:65:63:f8:c2:bc:13:72:88:62:d0:8c:af:1e:98: aa:8d:c9:a7:4f:60:99:cb:6e:25:d3:e1:6c:e3:82: 6c:20:32:a3:31:5f:96:2b:7d:a7:a5:3a:8d:d6:34: 92:15:a4:47:47:6b:fb:5f:4b:91:ec:03:12:9a:3b: de:3d:fa:2e:f1:b7:78:af:ff:58:76:5b:79:11:e8: ff:b3:9a:ab:af:49:31:53:27:80:4c:1a:67:fc:41: 10:5a:1a:77:5e:32:9d:28:9b:2d:10:21:8f:c2:dc: 07:28:6b:8f:b2:25:34:47:1f:84:f0:4e:4b:3d:01: 3d:ab:04:bb:c4:c0:b7:38:33:18:3a:63:a6:ff:5a: 04:6c:f2:14:49:36:1b:64:30:64:09:bf:82:1f:7a: 4c:81:99:37:d9:e6:a2:64:25:bd:bc:08:ff:7b:74: 7e:e3:5c:cd:71:a7:87:6a:41:86:06:86:cc:5d:34: 72:89:8c:d7:6f:59:ec:3c:a1:2f:ac:d6:10:d6:f4: c5:47:ec:e6:d7:79:3d:93:37:91:df:64:ac:87:60: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B7:C6:4B:B3:04:35:1E:95:82:8A:27:9F:70:D8:E3:8A:9B:1B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e3:c9:8c:f9:8f:48:84:51:79:1f:49:c7:6e:eb:b8:fe:03: 3b:a6:95:04:95:61:eb:db:f7:6f:31:6f:91:4c:96:bc:88:74: 27:f7:a3:62:07:6f:07:95:4d:69:12:d0:48:e6:8f:98:be:16: 8a:b7:5a:87:dd:06:34:37:57:24:eb:5b:95:12:fa:9c:60:e2: 06:65:3c:98:ce:78:26:34:71:83:d7:c5:2f:96:a4:54:f1:02: 92:7d:9d:e5:ad:cb:d0:14:af:a3:21:bb:df:e0:44:a2:c5:6f: 74:73:8e:d7:06:d0:95:73:3e:a7:f5:85:a1:05:da:7a:eb:1a: de:31:92:09:61:50:c0:32:af:f1:9e:52:76:a0:a8:96:1f:a8: 32:17:44:9b:12:ba:e8:4e:f1:3d:50:7a:0e:be:fd:af:30:d6: 2e:38:b7:60:be:c6:f7:c2:89:a6:fd:a6:a6:f9:1c:e9:4a:e9: 13:9d:75:22:c5:c8:ba:e7:41:e8:d1:74:de:47:5e:de:0a:60: c5:53:55:ac:74:fb:72:a6:32:f4:41:71:78:00:09:d4:6e:72: f2:60:4e:7c:f1:51:c8:9c:d6:46:9c:95:38:c3:c0:91:6e:e3: 29:ea:04:92:a1:02:3a:83:b1:3f:71:f9:fe:07:2a:5d:a1:46: f0:46:13:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JgxFhPZZf72wKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk N2RiYzgwY2YtMzFjZS00MGUwLTlmZDItZmU3N2Q1NTBmNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7i64by49ZGn4KSJ8Ge4eavaYFWqeCBLX2oS u8GcSEkE6eacHB/BWGPIH5iHZWP4wrwTcohi0IyvHpiqjcmnT2CZy24l0+Fs44Js IDKjMV+WK32npTqN1jSSFaRHR2v7X0uR7AMSmjvePfou8bd4r/9Ydlt5Eej/s5qr r0kxUyeATBpn/EEQWhp3XjKdKJstECGPwtwHKGuPsiU0Rx+E8E5LPQE9qwS7xMC3 ODMYOmOm/1oEbPIUSTYbZDBkCb+CH3pMgZk32eaiZCW9vAj/e3R+41zNcaeHakGG BobMXTRyiYzXb1nsPKEvrNYQ1vTFR+zm13k9kzeR32Ssh2DqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG3xkuzBDUelYKKJ59w2OOKmxvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvjyYz5j0iEUXkfScdu67j+AzumlQSVYevb928xb5FMlryIdCf3o2IH bweVTWkS0Ejmj5i+Foq3WofdBjQ3VyTrW5US+pxg4gZlPJjOeCY0cYPXxS+WpFTx ApJ9neWty9AUr6Mhu9/gRKLFb3RzjtcG0JVzPqf1haEF2nrrGt4xkglhUMAyr/Ge UnagqJYfqDIXRJsSuuhO8T1Qeg6+/a8w1i44t2C+xvfCiab9pqb5HOlK6ROddSLF yLrnQejRdN5HXt4KYMVTVax0+3KmMvRBcXgACdRucvJgTnzxUcic1kaclTjDwJFu 4ynqBJKhAjqDsT9x+f4HKl2hRvBGE/o= -----END CERTIFICATE-----Generated at Fri Jun 12 12:43:14 2026 by rpki-client