$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a740b6aa-0122-3e60-80eb-5a88e59bd6ac.roa File: a740b6aa-0122-3e60-80eb-5a88e59bd6ac.roa (raw, json) Hash identifier: M4dZ3I/F7d02ZhzRYCZ6bEVvLV8FHd+ew/Xiat3NaUU= Subject key identifier: E9:74:A7:33:A3:48:3B:A9:1A:8A:FE:F4:D1:A5:C5:C3:7A:35:4B:23 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D49ADFA26068BD05E25515C00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a740b6aa-0122-3e60-80eb-5a88e59bd6ac.roa Signing time: Wed 25 Mar 2026 17:26:08 +0000 ROA not before: Wed 25 Mar 2026 17:26:08 +0000 ROA not after: Tue 23 Jun 2026 17:26:08 +0000 asID: 40115 IP address blocks: 207.56.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:ad:fa:26:06:8b:d0:5e:25:51:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 25 17:26:08 2026 GMT Not After : Jun 23 17:26:08 2026 GMT Subject: CN=ef295387-6a5a-4e96-bc9b-a4716edd40d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:55:6f:23:4a:b7:b4:41:4c:b6:49:33:3c: f5:f0:dd:9f:4d:c4:2d:13:20:ec:d1:4d:23:bc:2a: e7:49:a0:78:e5:e7:3e:60:8c:64:d3:06:44:e1:4e: 24:cc:fa:49:79:2e:1b:bf:d9:29:fc:6d:84:62:8d: 58:8e:c1:5e:af:c9:31:9d:8d:1e:2e:6d:82:39:3c: 2e:5e:97:de:16:c6:0b:f8:a1:6c:de:94:4a:f7:98: 14:45:f2:3d:b2:67:18:17:03:be:4f:82:2a:23:97: 7d:fb:07:c9:ad:55:dd:f0:a3:aa:cd:53:3b:f7:e2: b2:f7:48:a6:42:a1:f4:28:ca:c6:44:36:dc:17:4e: a5:78:a0:bb:26:24:f4:3f:a8:c9:9c:8d:ba:95:50: a3:31:bc:e6:87:26:86:60:6a:93:a8:d3:de:d6:fd: d4:50:d3:49:0a:b6:a3:c2:fd:79:12:e3:ee:27:1d: 70:ca:b7:47:ac:0f:36:66:02:9d:83:c9:83:c6:44: d4:72:df:ba:57:13:08:c5:2b:85:cc:01:e8:62:70: e9:cc:63:22:0e:65:1a:f7:3e:98:10:75:81:57:8b: f6:6d:87:f7:ac:d8:04:ed:6f:9c:83:a2:53:72:05: 46:02:96:6e:54:cf:2e:08:06:fc:ed:cb:52:50:b3: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:74:A7:33:A3:48:3B:A9:1A:8A:FE:F4:D1:A5:C5:C3:7A:35:4B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a740b6aa-0122-3e60-80eb-5a88e59bd6ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.56.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:ab:db:9e:29:f8:58:03:ce:f0:21:6a:8c:80:25:a0:75:31: b2:52:16:7e:89:d5:b6:f6:df:a3:96:a9:11:73:1d:85:b2:50: 4d:8c:57:9e:5f:34:1a:04:e0:d1:f8:c6:75:6a:30:4c:d7:c3: aa:61:8b:cb:fb:0f:84:65:38:5a:d8:15:c3:45:5c:d1:cc:8b: 9a:67:ca:f7:15:3c:28:d2:86:71:0a:49:42:42:bd:e5:35:34: 81:40:c3:58:ac:a9:5a:62:ec:bd:62:20:01:e9:32:5b:88:26: 53:4a:a9:d8:af:79:43:d1:fc:82:fa:3c:79:6e:c3:f4:1c:1b: 0c:a5:c5:86:3b:7a:b7:87:c4:eb:05:de:f7:26:cd:ab:0a:f6: 9e:8d:76:a6:e3:56:ed:ec:5a:1a:2b:e2:69:d2:42:7f:21:fb: d3:20:85:cf:f7:21:3c:6f:19:24:bd:ad:f9:4b:7e:da:87:0b: 5e:45:69:e1:42:01:ed:67:be:7c:19:99:af:b7:39:15:ab:b3: f8:f1:bd:2d:8d:ed:02:3d:5a:9e:29:90:ac:3e:96:03:7d:3a: 4c:ff:a8:fe:40:34:42:7c:e7:6a:09:1d:1e:d6:2b:b5:54:23: 5d:0a:2c:8a:c4:a3:c1:f7:96:3d:6b:56:1c:e4:50:c2:78:91: 9f:d1:76:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JrfomBovQXiVRXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMyNTE3MjYwOFoXDTI2MDYyMzE3MjYwOFowLzEtMCsGA1UEAxMk ZWYyOTUzODctNmE1YS00ZTk2LWJjOWItYTQ3MTZlZGQ0MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYVVbyNKt7RBTLZJMzz18N2fTcQtEyDs0U0j vCrnSaB45ec+YIxk0wZE4U4kzPpJeS4bv9kp/G2EYo1YjsFer8kxnY0eLm2COTwu XpfeFsYL+KFs3pRK95gURfI9smcYFwO+T4IqI5d9+wfJrVXd8KOqzVM79+Ky90im QqH0KMrGRDbcF06leKC7JiT0P6jJnI26lVCjMbzmhyaGYGqTqNPe1v3UUNNJCraj wv15EuPuJx1wyrdHrA82ZgKdg8mDxkTUct+6VxMIxSuFzAHoYnDpzGMiDmUa9z6Y EHWBV4v2bYf3rNgE7W+cg6JTcgVGApZuVM8uCAb87ctSULNKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl0pzOjSDupGor+9NGlxcN6NUsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTc0MGI2YWEtMDEyMi0z ZTYwLTgwZWItNWE4OGU1OWJkNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzzjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMir254p+FgDzvAhaoyAJaB1MbJSFn6J1bb236OWqRFzHYWyUE2MV55f NBoE4NH4xnVqMEzXw6phi8v7D4RlOFrYFcNFXNHMi5pnyvcVPCjShnEKSUJCveU1 NIFAw1isqVpi7L1iIAHpMluIJlNKqdiveUPR/IL6PHluw/QcGwylxYY7ereHxOsF 3vcmzasK9p6NdqbjVu3sWhor4mnSQn8h+9Mghc/3ITxvGSS9rflLftqHC15FaeFC Ae1nvnwZma+3ORWrs/jxvS2N7QI9Wp4pkKw+lgN9Okz/qP5ANEJ852oJHR7WK7VU I10KLIrEo8H3lj1rVhzkUMJ4kZ/RdpI= -----END CERTIFICATE-----Generated at Thu Mar 26 04:12:47 2026 by rpki-client