$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa File: 56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa (raw, json) Hash identifier: NQjWCg1+Sm0AeCAZMQomZLjseqVKQGPjf6PLPfrflpk= Subject key identifier: 83:6A:9C:48:71:A3:F9:C5:32:C0:05:AC:86:C8:9A:7F:11:82:00:CD Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584DFBD4D2AAD5871E576FE07880 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa Signing time: Thu 28 May 2026 12:58:17 +0000 ROA not before: Thu 28 May 2026 12:58:17 +0000 ROA not after: Wed 26 Aug 2026 12:58:17 +0000 asID: 21669 IP address blocks: 209.212.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d4:d2:aa:d5:87:1e:57:6f:e0:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: May 28 12:58:17 2026 GMT Not After : Aug 26 12:58:17 2026 GMT Subject: CN=bc919ad3-ab4f-464c-90dc-125b72d6cd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:6b:c3:35:a2:6c:05:ad:ea:58:6e:39:da: c5:1a:3e:f2:68:f4:b4:cc:91:88:cc:a5:60:72:e8: e2:c7:a4:5e:52:a0:4d:bc:b2:71:c0:59:73:f6:af: 84:ab:87:3f:46:43:76:7a:d3:f0:27:63:2b:ad:d4: dc:3e:28:6d:ba:0c:c5:02:a3:ee:da:b4:29:b3:0f: 73:6a:b6:b8:fa:89:d1:93:f5:fd:d7:57:0d:3f:54: d3:e3:ab:c4:2e:a5:5f:a0:06:9c:d8:9b:f3:2f:a0: 23:e9:b8:fb:e9:cd:fc:7b:b3:6e:4b:85:a4:6c:69: 6f:f4:a3:0a:d3:30:cb:08:0b:79:f3:91:97:56:2f: 6a:99:db:44:62:89:bd:5b:a6:46:c8:f3:40:92:d4: a6:80:62:59:12:b5:9f:10:89:a6:ad:91:85:3d:1e: 6a:d5:f9:19:14:e2:c5:0c:90:95:1a:6f:9a:70:62: 3a:75:f4:e9:c1:08:e0:da:ed:5e:40:df:19:c2:7d: fd:0e:e8:71:a6:0e:e5:0e:c4:8e:cb:22:3c:92:7b: b2:b7:60:b6:3b:94:e8:fa:66:90:69:b5:87:d4:8d: 80:22:21:52:13:59:03:67:b2:25:3c:a0:24:ce:30: 2c:af:4e:8f:0d:12:d7:cb:8c:6e:c7:42:d6:4e:2e: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:9C:48:71:A3:F9:C5:32:C0:05:AC:86:C8:9A:7F:11:82:00:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ec:d7:c7:61:1b:a6:33:45:66:04:b9:ee:b1:27:b4:ae:5f: 10:07:a8:7c:59:a8:39:b8:b7:1c:dc:a4:c3:8a:91:6f:af:61: d9:61:d5:92:70:62:7c:45:19:a3:6a:94:d4:f2:ac:33:73:b0: 1a:c4:7a:07:2d:19:e6:d3:0d:cd:7c:42:27:04:3c:ea:21:f8: 51:79:b3:95:c9:24:f2:2c:3c:b4:d3:34:91:5f:96:0f:80:8d: 37:7b:c8:e3:b2:65:06:50:23:49:4b:03:e6:f3:5e:e3:8f:33: 0d:07:5c:2e:dd:dd:2e:0c:ae:6b:e0:b4:e7:a9:0d:fc:3e:dc: 9f:e9:bd:ff:4b:26:36:3b:b4:95:dd:ed:74:7c:6f:35:6d:13: 80:d1:48:10:6a:42:35:da:bf:17:9f:05:8f:53:b0:5a:88:4b: 57:b5:83:f5:1c:1d:0b:07:93:5f:fd:0c:5f:77:a8:18:90:34: 99:e1:ed:21:e1:fb:1a:ec:c3:34:22:65:d6:1e:b1:f3:41:f4: c6:1a:e2:bd:9e:51:9a:af:d4:28:fc:02:1f:fd:07:d0:98:56: 19:98:54:77:46:46:18:db:93:d5:77:b8:e7:a1:60:bb:be:d2: 38:14:07:47:3b:bf:13:2b:65:5c:e8:f1:b5:34:f4:04:dd:40: ca:ce:02:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371NKq1YceV2/geIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDUyODEyNTgxN1oXDTI2MDgyNjEyNTgxN1owLzEtMCsGA1UEAxMk YmM5MTlhZDMtYWI0Zi00NjRjLTkwZGMtMTI1YjcyZDZjZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq9rwzWibAWt6lhuOdrFGj7yaPS0zJGIzKVg cujix6ReUqBNvLJxwFlz9q+Eq4c/RkN2etPwJ2MrrdTcPihtugzFAqPu2rQpsw9z ara4+onRk/X911cNP1TT46vELqVfoAac2JvzL6Aj6bj76c38e7NuS4WkbGlv9KMK 0zDLCAt585GXVi9qmdtEYom9W6ZGyPNAktSmgGJZErWfEImmrZGFPR5q1fkZFOLF DJCVGm+acGI6dfTpwQjg2u1eQN8Zwn39Duhxpg7lDsSOyyI8knuyt2C2O5To+maQ abWH1I2AIiFSE1kDZ7IlPKAkzjAsr06PDRLXy4xux0LWTi526QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINqnEhxo/nFMsAFrIbImn8RggDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvNTZhYjM1YTctYmZhMS0z NmE5LTk1NTUtMjFiOTdiMmJmODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7s18dhG6YzRWYEue6xJ7SuXxAHqHxZqDm4txzcpMOKkW+vYdlh1ZJw YnxFGaNqlNTyrDNzsBrEegctGebTDc18QicEPOoh+FF5s5XJJPIsPLTTNJFflg+A jTd7yOOyZQZQI0lLA+bzXuOPMw0HXC7d3S4MrmvgtOepDfw+3J/pvf9LJjY7tJXd 7XR8bzVtE4DRSBBqQjXavxefBY9TsFqIS1e1g/UcHQsHk1/9DF93qBiQNJnh7SHh +xrswzQiZdYesfNB9MYa4r2eUZqv1Cj8Ah/9B9CYVhmYVHdGRhjbk9V3uOehYLu+ 0jgUB0c7vxMrZVzo8bU09ATdQMrOAvM= -----END CERTIFICATE-----Generated at Mon Jun 1 22:00:05 2026 by rpki-client