$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/8976f157-796d-3aeb-8e69-b4ee8f6c6477.roa File: 8976f157-796d-3aeb-8e69-b4ee8f6c6477.roa (raw, json) Hash identifier: X8HE/J3yHznzJnq5zAHcO1cdHeVKuPs4Ep5cUoDcr9Q= Subject key identifier: 61:24:67:2A:FA:24:F4:F1:B2:D8:C5:D5:F7:D8:92:31:F5:94:C2:BD Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584DF67B856C71F5D475E87E1A80 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/8976f157-796d-3aeb-8e69-b4ee8f6c6477.roa Signing time: Tue 26 May 2026 14:59:19 +0000 ROA not before: Tue 26 May 2026 14:59:19 +0000 ROA not after: Mon 24 Aug 2026 14:59:19 +0000 asID: 21669 IP address blocks: 209.212.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:7b:85:6c:71:f5:d4:75:e8:7e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: May 26 14:59:19 2026 GMT Not After : Aug 24 14:59:19 2026 GMT Subject: CN=d27fb2b7-ece9-4c1a-81fc-12b94d68fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:b7:58:cb:95:e4:bc:5a:f2:b0:c4:28:ce: 31:66:31:bc:08:c1:b5:86:45:e2:c9:7e:84:1b:c5: fd:b4:65:48:06:26:45:30:26:57:12:29:bf:69:e3: cc:c6:7d:40:93:9d:ed:ee:e9:5e:b7:ef:e2:e9:76: ad:fc:43:c3:38:65:aa:af:48:14:56:d0:32:b0:48: 9a:a4:65:40:94:2f:30:3c:4e:3b:8e:c4:23:35:5b: 1e:68:aa:29:f0:ee:4a:01:7b:79:2a:e3:a4:47:ec: cb:a4:7b:69:de:2d:e3:99:66:45:ff:7b:76:62:72: c2:11:d2:6f:56:a0:84:5f:41:da:c1:5c:c5:a9:28: 32:6a:5e:85:d1:f5:6e:35:77:1f:09:d2:6c:d1:9d: eb:bf:a7:8d:57:8b:8f:15:2a:28:15:49:be:bf:b9: 05:86:6c:c5:2a:13:69:5a:39:9f:91:67:46:db:7b: bd:11:5c:0b:2b:c8:83:ce:1d:32:43:6a:fb:88:07: 4d:05:88:7c:06:6c:34:22:6c:8d:5b:5b:23:d5:29: 65:e9:d2:f2:a4:b5:b0:7e:f1:66:bf:37:0b:f4:2c: 86:f5:5a:e5:9d:d5:08:5d:f0:69:1a:e2:94:ac:a9: e1:d6:ca:b4:96:54:66:00:1f:d5:fd:0d:4b:a0:33: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:67:2A:FA:24:F4:F1:B2:D8:C5:D5:F7:D8:92:31:F5:94:C2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/8976f157-796d-3aeb-8e69-b4ee8f6c6477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:36:1d:ec:84:6e:bb:0e:38:fa:8e:a3:1f:7c:f5:a6:37:3e: b1:01:a0:69:84:13:8e:91:2d:1c:59:07:01:b6:2e:a1:bc:dc: c5:00:16:7c:e9:c6:d5:25:28:2b:65:68:d1:da:e7:bd:91:eb: 84:38:f6:45:34:1a:30:95:2f:55:de:14:17:20:6c:3d:b0:90: 61:c1:2f:d1:21:e3:de:15:0f:60:60:10:1f:46:f6:69:47:98: 96:2a:63:48:95:2e:dc:5e:04:bf:0c:31:fd:03:66:8d:39:51: 67:59:2c:65:de:cd:33:18:f8:d6:db:27:1b:bc:7f:92:f0:a0: 78:52:7d:9e:da:0b:ab:93:6a:2e:f1:19:93:ac:30:74:3c:4c: 11:22:a8:d2:98:96:bb:fb:36:de:d2:c7:fb:85:fa:e8:60:80: a1:4e:23:63:82:53:18:25:d2:4e:e2:ee:97:61:43:3c:e6:e1: a1:fa:d7:66:a6:44:f5:bb:eb:09:e6:87:17:ab:f1:2b:33:21: 62:2c:c3:d1:3c:82:c0:79:b5:5f:b4:31:8a:89:99:72:ac:ec: 8c:7f:5d:8f:99:94:9a:7c:82:93:ab:ac:36:d2:d0:1b:2c:e7: eb:44:9a:16:93:9e:32:92:37:77:7e:3b:22:39:b1:bf:19:b7: ec:58:0e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32e4VscfXUdeh+GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDUyNjE0NTkxOVoXDTI2MDgyNDE0NTkxOVowLzEtMCsGA1UEAxMk ZDI3ZmIyYjctZWNlOS00YzFhLTgxZmMtMTJiOTRkNjhmYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquy3WMuV5Lxa8rDEKM4xZjG8CMG1hkXiyX6E G8X9tGVIBiZFMCZXEim/aePMxn1Ak53t7ulet+/i6Xat/EPDOGWqr0gUVtAysEia pGVAlC8wPE47jsQjNVseaKop8O5KAXt5KuOkR+zLpHtp3i3jmWZF/3t2YnLCEdJv VqCEX0HawVzFqSgyal6F0fVuNXcfCdJs0Z3rv6eNV4uPFSooFUm+v7kFhmzFKhNp WjmfkWdG23u9EVwLK8iDzh0yQ2r7iAdNBYh8Bmw0ImyNW1sj1Sll6dLypLWwfvFm vzcL9CyG9VrlndUIXfBpGuKUrKnh1sq0llRmAB/V/Q1LoDPaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEkZyr6JPTxstjF1ffYkjH1lMK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvODk3NmYxNTctNzk2ZC0z YWViLThlNjktYjRlZThmNmM2NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk2HeyEbrsOOPqOox989aY3PrEBoGmEE46RLRxZBwG2LqG83MUAFnzp xtUlKCtlaNHa572R64Q49kU0GjCVL1XeFBcgbD2wkGHBL9Eh494VD2BgEB9G9mlH mJYqY0iVLtxeBL8MMf0DZo05UWdZLGXezTMY+NbbJxu8f5LwoHhSfZ7aC6uTai7x GZOsMHQ8TBEiqNKYlrv7Nt7Sx/uF+uhggKFOI2OCUxgl0k7i7pdhQzzm4aH612am RPW76wnmhxer8SszIWIsw9E8gsB5tV+0MYqJmXKs7Ix/XY+ZlJp8gpOrrDbS0Bss 5+tEmhaTnjKSN3d+OyI5sb8Zt+xYDiI= -----END CERTIFICATE-----Generated at Mon Jun 1 21:59:54 2026 by rpki-client