$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa File: 21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa (raw, json) Hash identifier: nNmLjLHn/SirkvesR1S4p6PSzhGyiM8oo7OOl0wj+sY= Subject key identifier: 1B:8B:35:CF:77:EB:56:49:B9:4B:0F:5B:E0:A3:F2:AF:F0:F0:B6:FB Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584D4A8FB339B2FCD91340AAF100 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 62240 IP address blocks: 209.107.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b3:39:b2:fc:d9:13:40:aa:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=313c6a1b-d406-4dff-ba42-c50c737a9b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:ec:4e:16:66:f5:63:99:bc:1d:42:80:41: 70:8d:c6:cb:78:cc:6c:38:d7:78:f8:76:ff:7f:bd: e1:93:d0:f8:0e:66:70:2d:e7:75:e2:97:b0:56:63: a2:a6:c4:d6:d1:ed:86:26:1b:ee:f5:56:56:47:53: ac:f3:ae:a8:65:87:21:85:86:5b:7a:6b:ca:85:ea: d7:8f:e9:1f:14:43:0e:16:81:63:8e:d8:8c:8a:eb: 6a:e3:33:df:ca:27:2d:d5:3c:7d:04:13:fe:7f:f9: c1:da:22:63:43:c1:f1:e9:09:7d:08:e4:3e:e2:c3: 73:d1:86:ab:af:4d:82:ee:af:8a:b7:1a:b6:9b:d0: 3c:12:5e:d2:70:2b:ea:71:b7:c7:ba:05:e3:e8:62: 45:dc:bc:a5:dc:6b:7e:39:43:65:c6:63:34:00:68: 9e:37:46:28:cf:2a:1a:62:f0:a3:f6:fd:6e:9a:4b: 92:c3:32:8e:20:93:f1:7e:8b:3e:ed:e2:2b:eb:96: 04:d8:ca:ea:8c:98:34:b2:d1:ba:76:09:6b:f8:ba: 35:22:9b:e5:8e:d6:df:2c:d2:4c:e4:ea:2c:db:3d: 4c:03:10:7f:15:f0:82:01:ec:14:dd:56:82:bb:41: 40:6b:a0:7a:57:b8:27:a7:11:14:8e:26:42:ce:0d: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8B:35:CF:77:EB:56:49:B9:4B:0F:5B:E0:A3:F2:AF:F0:F0:B6:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a7:58:3e:fe:97:a1:23:27:87:3e:3c:27:41:e1:fb:ce:8e: 0d:ae:04:7e:e2:29:02:61:63:0f:88:3c:d6:11:32:d7:aa:01: 5f:55:d0:66:44:09:03:2b:0d:a7:e2:64:a6:48:79:7d:0f:1c: 05:5f:da:57:24:3c:97:dd:25:60:1e:a5:5a:ba:4c:00:a5:a6: cf:a8:6e:0c:dc:88:0f:f4:71:16:2c:66:04:e4:6c:1e:7e:e9: a2:13:e8:2c:75:a5:6e:ce:fc:b6:4f:b8:6f:9d:d5:35:0c:6c: 8b:1b:40:b2:02:c8:a8:a3:93:43:82:04:d9:80:79:e8:e2:26: c6:e9:e3:3d:fd:71:0a:b4:97:59:3c:97:72:2f:5f:60:37:1a: 81:d5:d0:e7:15:17:97:fa:b1:5b:49:b8:28:b2:38:64:f5:35: a5:f0:e3:62:47:d8:47:cc:3a:2e:55:cd:22:82:2d:ad:26:bb: c4:90:01:b2:07:6a:14:78:e5:35:34:f8:3d:ac:39:95:b0:4b: af:98:d0:f4:81:e6:58:7c:2d:61:f7:73:b8:ad:b9:11:df:2e: 11:f9:01:6d:87:7b:12:d7:8a:0c:da:88:95:3b:26:e2:43:52: 0d:ef:5f:b7:e3:39:c3:38:24:74:04:d6:a9:7e:1e:3e:a7:b3: bb:01:c2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7M5svzZE0Cq8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MzEzYzZhMWItZDQwNi00ZGZmLWJhNDItYzUwYzczN2E5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOTsThZm9WOZvB1CgEFwjcbLeMxsONd4+Hb/ f73hk9D4DmZwLed14pewVmOipsTW0e2GJhvu9VZWR1Os866oZYchhYZbemvKherX j+kfFEMOFoFjjtiMiutq4zPfyict1Tx9BBP+f/nB2iJjQ8Hx6Ql9COQ+4sNz0Yar r02C7q+Ktxq2m9A8El7ScCvqcbfHugXj6GJF3Lyl3Gt+OUNlxmM0AGieN0Yozyoa YvCj9v1umkuSwzKOIJPxfos+7eIr65YE2MrqjJg0stG6dglr+Lo1IpvljtbfLNJM 5Oos2z1MAxB/FfCCAewU3VaCu0FAa6B6V7gnpxEUjiZCzg04OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuLNc9361ZJuUsPW+Cj8q/w8Lb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjFhYjAzM2UtNDNiNC0z OGY1LTkyYmQtOWNjNjA4MWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESnWD7+l6EjJ4c+PCdB4fvOjg2uBH7iKQJhYw+IPNYRMteqAV9V0GZE CQMrDafiZKZIeX0PHAVf2lckPJfdJWAepVq6TAClps+obgzciA/0cRYsZgTkbB5+ 6aIT6Cx1pW7O/LZPuG+d1TUMbIsbQLICyKijk0OCBNmAeejiJsbp4z39cQq0l1k8 l3IvX2A3GoHV0OcVF5f6sVtJuCiyOGT1NaXw42JH2EfMOi5VzSKCLa0mu8SQAbIH ahR45TU0+D2sOZWwS6+Y0PSB5lh8LWH3c7ituRHfLhH5AW2HexLXigzaiJU7JuJD Ug3vX7fjOcM4JHQE1ql+Hj6ns7sBwuM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:12 2026 by rpki-client