$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/792f591f-e064-31ce-9a1f-e5d283fa965d.roa File: 792f591f-e064-31ce-9a1f-e5d283fa965d.roa (raw, json) Hash identifier: KpJ7bXxpHW3bkKbtPEFwB4E9aCId/xPcGtt/9gVZlWQ= Subject key identifier: 0D:3E:2F:76:38:70:63:08:AE:73:CE:0E:3A:AB:5B:B8:F8:0D:1E:A1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D300A5BB416C2C8E60F41B800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/792f591f-e064-31ce-9a1f-e5d283fa965d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 3949 IP address blocks: 204.2.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5b:b4:16:c2:c8:e6:0f:41:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d7dac0c8-3439-43b5-a008-f2dbcb48d308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:ef:c2:f4:7f:fc:2c:80:3a:a1:fa:cb:8e: 6a:d8:be:3b:43:63:40:f7:75:76:96:10:78:c5:ab: 9d:6e:9b:14:63:fa:2d:53:75:dd:a3:5e:16:86:34: ff:6a:e1:33:03:ac:6e:36:57:b4:be:57:5f:b9:e2: 33:e2:a3:bf:b8:d9:b9:ad:82:b1:9b:8e:7a:88:36: ff:58:96:ac:cd:9f:86:5f:cc:d2:a3:c0:5f:a0:dc: 9d:f9:4f:64:94:a0:91:a5:4a:fd:67:c8:a7:ac:4c: 02:a8:63:05:33:1b:d4:74:bd:5e:8d:a5:99:ca:5a: d6:b4:1c:ab:c2:8b:bd:88:81:d9:0f:47:9e:68:b0: ba:f7:27:01:f5:dc:09:06:87:24:00:9b:db:f4:63: 52:68:35:8e:ce:45:85:ae:0f:f6:62:33:8a:af:62: 95:be:ca:fb:3a:f3:c9:a9:94:7b:5a:b4:03:01:b4: dd:cd:be:76:82:0f:79:39:96:fa:e6:13:73:46:3d: b0:3f:b5:1d:dc:99:f0:11:dc:7f:c4:b2:13:3e:8b: ad:e4:01:63:0a:26:e0:fb:0b:07:2e:ae:5f:7a:b9: fc:a7:93:c7:3b:b5:19:46:7b:4a:2f:c1:01:e9:e7: 7a:99:c0:33:13:0a:02:dd:87:d8:53:a1:e1:29:9c: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3E:2F:76:38:70:63:08:AE:73:CE:0E:3A:AB:5B:B8:F8:0D:1E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/792f591f-e064-31ce-9a1f-e5d283fa965d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:29:c0:bb:ce:7c:e4:a1:a1:bb:fd:27:ba:7b:83:c7:e4:a9: 47:8f:35:80:48:7b:e4:0a:5d:38:f0:ac:4e:1b:66:87:78:e2: fb:32:58:88:29:63:dd:72:d4:37:31:c0:39:da:f3:b9:a0:2d: 45:f5:1a:ed:4e:f8:77:49:ce:c1:99:aa:7d:d7:a5:3b:28:67: 6e:d8:c9:ee:2f:14:75:de:6a:b2:fb:85:6b:64:16:55:de:ab: a9:ed:48:a5:7d:74:40:d5:56:89:7a:39:e9:e0:dd:98:e1:49: 53:51:b5:41:d0:19:9f:57:73:bb:0d:18:4b:90:c2:05:2d:3d: 0b:1e:95:c3:14:ea:8e:8d:37:88:03:73:d2:7c:ba:ae:7e:05: 04:37:b5:8b:99:35:06:a7:69:7e:53:b7:ef:70:27:bf:5f:09: d4:fe:97:5b:38:0a:ff:2f:c0:d8:99:50:6a:ed:ff:6d:aa:44: e4:25:50:cb:b6:ae:a0:06:c9:2d:cd:dd:1e:d3:58:8d:ce:6c: d4:4f:4c:ec:a0:94:fa:43:40:9a:8a:78:41:71:b8:20:f1:32: f2:9a:a7:6f:b9:9e:07:48:f2:f5:b0:43:2d:e6:3e:a2:57:6d: af:8f:e9:ee:2d:54:e6:a4:3d:fa:34:76:fd:dc:d0:53:98:e7: 1a:9b:d2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClu0FsLI5g9BuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDdkYWMwYzgtMzQzOS00M2I1LWEwMDgtZjJkYmNiNDhkMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V7vwvR//CyAOqH6y45q2L47Q2NA93V2lhB4 xaudbpsUY/otU3Xdo14WhjT/auEzA6xuNle0vldfueIz4qO/uNm5rYKxm456iDb/ WJaszZ+GX8zSo8BfoNyd+U9klKCRpUr9Z8inrEwCqGMFMxvUdL1ejaWZylrWtByr wou9iIHZD0eeaLC69ycB9dwJBockAJvb9GNSaDWOzkWFrg/2YjOKr2KVvsr7OvPJ qZR7WrQDAbTdzb52gg95OZb65hNzRj2wP7Ud3JnwEdx/xLITPout5AFjCibg+wsH Lq5fern8p5PHO7UZRntKL8EB6ed6mcAzEwoC3YfYU6HhKZyTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0+L3Y4cGMIrnPODjqrW7j4DR6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzkyZjU5MWYtZTA2NC0z MWNlLTlhMWYtZTVkMjgzZmE5NjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzALVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8pwLvOfOShobv9J7p7g8fkqUePNYBIe+QKXTjwrE4bZod44vsyWIgp Y91y1DcxwDna87mgLUX1Gu1O+HdJzsGZqn3XpTsoZ27Yye4vFHXearL7hWtkFlXe q6ntSKV9dEDVVol6Oeng3ZjhSVNRtUHQGZ9Xc7sNGEuQwgUtPQselcMU6o6NN4gD c9J8uq5+BQQ3tYuZNQanaX5Tt+9wJ79fCdT+l1s4Cv8vwNiZUGrt/22qROQlUMu2 rqAGyS3N3R7TWI3ObNRPTOyglPpDQJqKeEFxuCDxMvKap2+5ngdI8vWwQy3mPqJX ba+P6e4tVOakPfo0dv3c0FOY5xqb0oI= -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:38 2026 by rpki-client