$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa File: 138497f4-eab8-37a3-8d4e-8dddf2b99925.roa (raw, json) Hash identifier: Db/Bq0O6HtIRyKc7FTEVsLYv+2BPwHeWYLPLRW4tWos= Subject key identifier: D1:AE:58:A2:97:7C:D1:19:9A:04:CB:C9:AD:DE:DB:E5:40:F7:F9:C1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D24E10E681FAC97CCC94F9800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 0 IP address blocks: 209.24.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0e:68:1f:ac:97:cc:c9:4f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=559a9583-ba93-48f6-bf20-0aae1e9ed621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:29:69:14:d0:31:0a:02:b0:7c:eb:bc:d4: 7e:9a:9d:6a:f5:e3:98:2a:8d:74:93:52:eb:38:64: 05:8d:e0:25:6e:6e:71:21:35:3e:94:df:3d:f5:04: 8d:e5:76:73:87:00:32:50:f7:64:dd:2f:d0:2b:44: 7b:c8:10:92:67:32:30:3a:cc:5a:b7:97:32:dd:a7: d1:61:d3:50:24:97:e7:da:e4:27:32:47:ea:54:f7: 9a:47:45:8b:30:96:4a:dc:8e:d4:00:b4:c8:83:c8: 41:6f:1c:67:b9:62:26:be:2b:57:a0:05:72:c1:f1: e5:4b:39:3d:5b:a1:eb:ea:76:b4:8d:59:f3:1a:cc: 5f:4b:0a:76:23:5a:0f:a8:ff:44:5b:77:19:e8:d1: ee:63:de:a0:18:00:a3:0e:31:54:9c:aa:9f:58:fe: b5:5e:5b:28:e4:cb:69:9e:d0:42:7e:88:4b:bf:05: 93:52:0e:a5:c8:9c:d6:7a:70:5f:f6:1c:9c:91:24: 77:97:f6:11:ec:b8:53:60:68:b2:59:fc:3c:98:4d: 76:f9:be:01:5a:2a:b1:f8:ee:cc:b3:ab:bd:9d:72: 35:63:63:99:b4:21:31:e1:e7:b9:43:a6:fb:60:6e: 99:5b:df:40:f4:bd:8f:0b:8a:dc:ad:a0:1a:02:97: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:58:A2:97:7C:D1:19:9A:04:CB:C9:AD:DE:DB:E5:40:F7:F9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.24.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:7b:35:76:32:10:58:f9:80:61:78:9e:0e:af:b5:35:ca:34: 97:97:13:02:a8:e8:36:27:1c:4f:be:1a:6b:01:32:61:3e:2d: 93:66:f5:7d:52:84:03:65:7b:00:3e:b4:b6:92:49:6c:0b:94: de:11:0c:7b:89:5c:ce:96:8b:85:12:92:eb:ad:0a:ef:b2:a0: bc:04:86:92:52:51:8f:86:7e:7d:9e:87:24:6c:ca:c8:d5:62: 6b:9d:98:f9:18:3d:97:1a:79:b4:ea:dd:cc:bb:be:79:a0:65: e7:5a:21:00:82:92:33:d6:30:52:aa:37:96:2e:bb:e6:b8:ff: 62:ef:af:e5:41:8f:69:f9:e3:4e:8a:18:e5:23:e4:e3:a9:2b: 90:3c:a1:f7:df:ca:c8:cf:93:fe:a2:9e:b6:62:56:1f:64:43: a3:74:73:8d:9d:85:dc:3e:77:73:5e:a0:c2:7c:43:83:7a:08: 5d:d7:4c:6e:90:a8:fd:f0:fa:25:00:ac:08:ca:39:d6:96:2b: 38:49:1f:ef:5e:30:72:51:bf:69:79:f2:6e:db:4a:6a:ef:d1: 74:8c:c2:bb:71:59:61:c9:de:06:33:68:23:8d:f8:d1:6e:20: 6d:5f:e3:ec:2c:6a:61:ff:9c:6d:32:4c:a1:09:1c:17:64:ea: 1c:0b:99:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q5oH6yXzMlPmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTU5YTk1ODMtYmE5My00OGY2LWJmMjAtMGFhZTFlOWVkNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6YpaRTQMQoCsHzrvNR+mp1q9eOYKo10k1Lr OGQFjeAlbm5xITU+lN899QSN5XZzhwAyUPdk3S/QK0R7yBCSZzIwOsxat5cy3afR YdNQJJfn2uQnMkfqVPeaR0WLMJZK3I7UALTIg8hBbxxnuWImvitXoAVywfHlSzk9 W6Hr6na0jVnzGsxfSwp2I1oPqP9EW3cZ6NHuY96gGACjDjFUnKqfWP61Xlso5Mtp ntBCfohLvwWTUg6lyJzWenBf9hyckSR3l/YR7LhTYGiyWfw8mE12+b4BWiqx+O7M s6u9nXI1Y2OZtCEx4ee5Q6b7YG6ZW99A9L2PC4rcraAaApf5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGuWKKXfNEZmgTLya3e2+VA9/nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTM4NDk3ZjQtZWFiOC0z N2EzLThkNGUtOGRkZGYyYjk5OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB7NXYyEFj5gGF4ng6vtTXKNJeXEwKo6DYnHE++GmsBMmE+LZNm9X1S hANlewA+tLaSSWwLlN4RDHuJXM6Wi4USkuutCu+yoLwEhpJSUY+Gfn2ehyRsysjV YmudmPkYPZcaebTq3cy7vnmgZedaIQCCkjPWMFKqN5Yuu+a4/2Lvr+VBj2n5406K GOUj5OOpK5A8offfysjPk/6inrZiVh9kQ6N0c42dhdw+d3NeoMJ8Q4N6CF3XTG6Q qP3w+iUArAjKOdaWKzhJH+9eMHJRv2l58m7bSmrv0XSMwrtxWWHJ3gYzaCON+NFu IG1f4+wsamH/nG0yTKEJHBdk6hwLmco= -----END CERTIFICATE-----Generated at Thu Mar 26 03:33:23 2026 by rpki-client