$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d457298-219e-3e90-89b1-52e86145a151.roa File: 0d457298-219e-3e90-89b1-52e86145a151.roa (raw, json) Hash identifier: JGUgv+ISC/CTJgcXjZ2c+LboI9ESo0Tu1uVAqNkM8EE= Subject key identifier: F8:61:ED:B7:A2:B2:4D:C9:AD:5D:A8:8B:9A:0D:E7:DE:87:CA:9D:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DEDE0A1EE388685D7CA2BE3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d457298-219e-3e90-89b1-52e86145a151.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 32787 IP address blocks: 209.200.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:a1:ee:38:86:85:d7:ca:2b:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=4657f3db-40a9-4170-8010-71b1a7f541fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:70:5b:56:db:1d:91:bd:2c:bf:e8:21:e5: 6b:d0:66:48:50:09:92:56:81:ba:21:14:a1:ec:38: d0:34:92:b7:24:62:84:6a:ef:f7:27:b3:76:43:0c: 7c:93:6a:a3:62:e6:8f:eb:ba:dd:a6:09:6d:4f:91: e9:42:2e:f8:6b:cd:26:ec:e2:1d:06:b4:81:71:57: 76:d9:a2:48:aa:3c:69:dc:dc:ff:fa:89:a0:c1:ff: 11:e0:b5:17:3a:3e:ff:96:1a:e9:af:f6:7f:47:75: 4a:76:c4:64:02:af:c7:ce:e7:33:57:fd:69:52:0d: 57:d1:96:24:56:3c:a5:10:27:d3:4d:02:19:26:2a: 8d:fd:c9:52:05:c8:71:3a:66:27:9d:1e:90:31:dc: 67:aa:5c:93:ad:7d:5d:fd:36:c0:95:2c:cb:24:3e: 0a:7f:5e:57:67:a6:31:9f:ba:e6:b1:07:0b:50:26: 96:f9:60:5c:30:db:24:32:ed:bd:c7:24:05:41:63: db:74:49:3c:66:cf:a1:46:a4:31:bf:11:54:62:6e: c6:aa:04:b9:54:fe:85:17:f6:01:d4:58:be:57:fa: ea:b3:65:1d:92:57:9c:e5:94:ce:42:66:a0:3b:24: 06:90:8f:7f:49:ae:6a:cd:0d:9f:13:b0:f8:1b:7b: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:ED:B7:A2:B2:4D:C9:AD:5D:A8:8B:9A:0D:E7:DE:87:CA:9D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d457298-219e-3e90-89b1-52e86145a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:31:fb:45:f3:a6:b6:66:47:1d:cc:ec:a0:bc:5f:c1:f6:a7: 85:21:e9:6d:af:ed:05:98:31:18:2c:5b:0f:6f:35:ff:ab:9b: 2a:4b:4b:a9:ae:17:1d:8e:3a:19:e7:87:42:4b:b2:a7:1d:af: 90:b0:41:3e:83:5c:c7:be:d4:df:88:0f:3f:7d:34:e0:bc:1e: d6:de:40:47:56:34:87:4d:a1:ea:01:25:8e:03:41:1c:59:6c: 97:6e:eb:ee:40:a5:aa:30:b6:6d:a7:23:3d:67:50:e3:5a:ee: 75:28:3e:76:55:c1:8b:21:87:62:3c:33:e4:da:b4:51:c3:b8: 49:9b:93:4e:54:8a:4e:d8:63:ae:75:86:05:cb:32:62:13:3d: e1:5b:4a:e3:2c:7f:15:78:2a:d2:d3:a7:fb:cb:a9:cc:d3:8f: 37:1c:c9:42:cd:b6:d4:9e:1d:71:d4:23:9e:42:28:9c:1d:fc: f8:78:0b:4a:78:6f:c0:74:88:c6:4b:0f:98:5b:6d:9f:fe:b8: ff:0c:53:d9:38:40:9b:6c:8c:2c:2a:ab:e6:4f:8b:dd:37:31: 91:2b:f9:ca:a1:1b:e8:2a:4f:de:ef:2e:0b:30:eb:8c:6c:46: 31:bc:c8:6d:02:c6:4c:23:fb:65:dc:2b:85:00:aa:5b:0f:f2: 8e:ae:59:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4KHuOIaF18or48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk NDY1N2YzZGItNDBhOS00MTcwLTgwMTAtNzFiMWE3ZjU0MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY9wW1bbHZG9LL/oIeVr0GZIUAmSVoG6IRSh 7DjQNJK3JGKEau/3J7N2Qwx8k2qjYuaP67rdpgltT5HpQi74a80m7OIdBrSBcVd2 2aJIqjxp3Nz/+omgwf8R4LUXOj7/lhrpr/Z/R3VKdsRkAq/HzuczV/1pUg1X0ZYk VjylECfTTQIZJiqN/clSBchxOmYnnR6QMdxnqlyTrX1d/TbAlSzLJD4Kf15XZ6Yx n7rmsQcLUCaW+WBcMNskMu29xyQFQWPbdEk8Zs+hRqQxvxFUYm7GqgS5VP6FF/YB 1Fi+V/rqs2Udklec5ZTOQmagOyQGkI9/Sa5qzQ2fE7D4G3uDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhh7beisk3JrV2oi5oN596Hyp1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQ0NTcyOTgtMjE5ZS0z ZTkwLTg5YjEtNTJlODYxNDVhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAx+0XzprZmRx3M7KC8X8H2p4Uh6W2v7QWYMRgsWw9vNf+rmypLS6mu Fx2OOhnnh0JLsqcdr5CwQT6DXMe+1N+IDz99NOC8HtbeQEdWNIdNoeoBJY4DQRxZ bJdu6+5Apaowtm2nIz1nUONa7nUoPnZVwYshh2I8M+TatFHDuEmbk05Uik7YY651 hgXLMmITPeFbSuMsfxV4KtLTp/vLqczTjzccyULNttSeHXHUI55CKJwd/Ph4C0p4 b8B0iMZLD5hbbZ/+uP8MU9k4QJtsjCwqq+ZPi903MZEr+cqhG+gqT97vLgsw64xs RjG8yG0Cxkwj+2XcK4UAqlsP8o6uWbM= -----END CERTIFICATE-----Generated at Sat Jun 6 09:58:50 2026 by rpki-client