$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa File: 23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa (raw, json) Hash identifier: NigWmj/Pc0QPx1grJVPc1U0KE/vMlsDnxCT9Phm+yxk= Subject key identifier: 3E:38:5C:EE:9A:4B:E5:34:37:75:B8:81:1C:E9:A6:A4:13:2B:13:18 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584D237A3BC8C56370B30BA94800 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 208259 IP address blocks: 209.240.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:c8:c5:63:70:b3:0b:a9:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f4bfbc2d-7e07-4c55-b8f1-21b852e31d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:dc:ab:3d:3f:57:ef:41:88:65:a6:75:e7: d8:40:3e:3e:e9:dd:4d:27:39:9a:35:b0:96:73:94: f5:85:ba:41:ff:0a:73:d5:0f:cc:e7:a4:d3:c8:ff: 27:62:49:d8:cb:13:26:82:4d:f8:85:da:65:6b:29: b6:d8:96:f7:3a:31:90:87:a4:46:1f:e7:fe:7c:8b: a0:3c:f0:1d:3e:7b:0d:b8:9e:91:76:a1:db:6c:56: a2:82:01:fc:1c:7f:5d:e1:a3:6f:7a:f5:d2:16:63: b1:cb:84:1d:48:cb:70:40:4e:9d:5f:ed:46:e1:45: c9:41:c6:03:01:ca:11:39:1a:d1:42:8a:75:17:81: 40:b1:39:01:4f:3b:04:30:b0:1f:03:4f:48:6f:52: 48:da:fc:a8:1a:67:58:d0:6a:6c:4b:31:6f:c3:61: b6:d0:f1:d2:b8:0c:89:ff:36:53:25:23:66:c6:07: 89:ab:b0:01:92:35:88:32:14:18:99:aa:25:e9:69: 0f:d1:16:9c:63:f2:79:30:40:ff:e9:67:54:a7:fb: d9:68:62:0d:ef:29:1a:41:0c:24:fc:8d:01:85:af: 3d:7a:f0:ea:fc:27:62:bb:87:37:19:c7:f9:b7:14: ae:10:d2:46:05:3f:15:70:26:8b:24:92:10:67:20: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:38:5C:EE:9A:4B:E5:34:37:75:B8:81:1C:E9:A6:A4:13:2B:13:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5a:1e:df:53:3a:98:01:c1:19:26:22:06:1d:a4:04:74:af: c1:86:9a:7c:3f:25:18:ee:02:9e:19:27:b2:1c:59:fb:e1:42: 64:42:b2:cf:1e:bf:dc:6b:d6:a0:40:b7:ef:b4:88:27:ea:ad: 67:b1:f7:c3:20:c0:4e:32:1b:fe:d8:cb:fb:90:2d:92:2f:56: be:d9:a6:85:b9:11:fc:99:ec:b7:73:00:5c:3a:41:c2:12:4d: ae:ef:a9:c3:83:8d:9a:a1:dc:65:3e:9d:15:b1:6f:4c:5c:cc: a5:fe:cc:ff:10:e9:c7:8b:00:c1:f6:df:76:cb:32:33:ce:8d: 42:ce:3f:2b:a9:b0:7b:09:77:74:5d:cf:5d:63:f5:d8:c3:46: a8:47:59:dc:f7:8f:d4:68:d1:b2:1b:97:27:d2:71:07:bc:8b: d5:09:77:10:c4:ed:0a:9f:96:c5:09:d3:9f:cf:21:c1:fe:69: 16:28:74:34:0a:20:8e:59:93:64:17:33:23:db:2a:d0:61:2e: 31:c3:ab:f8:ac:8f:31:e8:fd:46:7c:44:d2:90:22:b6:e2:3d: 1a:eb:ea:33:2d:33:6c:e8:a3:d2:58:21:fd:21:59:4a:7b:e5: cb:d4:ca:23:29:b2:97:bd:b7:5b:7e:8c:1a:6c:c7:4a:4f:7e: 36:49:89:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejvIxWNwswupSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjRiZmJjMmQtN2UwNy00YzU1LWI4ZjEtMjFiODUyZTMxZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFLcqz0/V+9BiGWmdefYQD4+6d1NJzmaNbCW c5T1hbpB/wpz1Q/M56TTyP8nYknYyxMmgk34hdplaym22Jb3OjGQh6RGH+f+fIug PPAdPnsNuJ6RdqHbbFaiggH8HH9d4aNvevXSFmOxy4QdSMtwQE6dX+1G4UXJQcYD AcoRORrRQop1F4FAsTkBTzsEMLAfA09Ib1JI2vyoGmdY0GpsSzFvw2G20PHSuAyJ /zZTJSNmxgeJq7ABkjWIMhQYmaol6WkP0RacY/J5MED/6WdUp/vZaGIN7ykaQQwk /I0Bha89evDq/Cdiu4c3Gcf5txSuENJGBT8VcCaLJJIQZyC0eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD44XO6aS+U0N3W4gRzppqQTKxMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMjM2NTUxMDQtMGI5ZS0z MWM2LTlhNWMtOWMxZDIwZmMxNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNaHt9TOpgBwRkmIgYdpAR0r8GGmnw/JRjuAp4ZJ7IcWfvhQmRCss8e v9xr1qBAt++0iCfqrWex98MgwE4yG/7Yy/uQLZIvVr7ZpoW5EfyZ7LdzAFw6QcIS Ta7vqcODjZqh3GU+nRWxb0xczKX+zP8Q6ceLAMH233bLMjPOjULOPyupsHsJd3Rd z11j9djDRqhHWdz3j9Ro0bIblyfScQe8i9UJdxDE7QqflsUJ05/PIcH+aRYodDQK II5Zk2QXMyPbKtBhLjHDq/isjzHo/UZ8RNKQIrbiPRrr6jMtM2zoo9JYIf0hWUp7 5cvUyiMpspe9t1t+jBpsx0pPfjZJiSk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:18 2026 by rpki-client