$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa File: a8d84f62-51d4-3c50-ac70-43d409c29abd.roa (raw, json) Hash identifier: Fa4HSo1NGuox/oMsBIhtOXkjSVJURf5xAv7wQd7sKsE= Subject key identifier: D2:D7:C1:60:5D:58:B4:03:9D:04:0C:C0:14:E6:C7:EA:79:DD:2E:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D359FDEE59C43E525D19D2A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7342 IP address blocks: 209.131.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:de:e5:9c:43:e5:25:d1:9d:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=be218788-9049-4dcc-8d8f-fae2084c544e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:28:86:0f:b7:11:24:2c:97:17:4d:31:0d: cc:37:37:13:1c:16:cc:ca:1e:84:0d:7d:30:d9:39: c3:8c:17:ba:e9:d6:93:47:bd:f5:2e:b7:2c:5a:5f: 03:56:95:e3:0d:8b:1a:a6:fa:92:46:5b:40:c4:b7: 7e:86:33:fb:84:10:90:c3:05:ce:d0:f8:85:00:6e: bf:19:3b:72:93:0a:56:12:25:d6:68:1c:24:5a:e0: 38:64:c4:ea:2f:01:72:6d:51:d5:b9:e1:91:ff:54: aa:89:67:cd:66:1b:98:0b:c1:e8:dc:04:fd:5b:2b: ac:0d:f4:a5:00:99:d5:1c:b8:78:86:26:b9:84:22: 8b:38:88:4c:16:10:ae:1b:5c:36:c7:55:45:e5:89: 85:dc:c1:33:51:94:20:c4:41:64:84:93:1b:e1:ac: c3:30:b1:ab:29:0e:97:d5:30:6a:b1:52:96:38:53: 78:ea:01:2a:fe:a6:cf:23:af:94:87:2d:de:de:78: 42:bc:d8:8a:9a:95:4e:87:f5:39:da:47:39:46:a6: b6:d4:e3:82:42:6b:6b:e4:0f:4d:23:5e:de:61:ce: 8d:78:9e:ec:9d:4c:cc:46:0a:fe:d5:2e:30:c0:ac: e2:3a:43:28:fe:07:2d:4a:e6:a9:de:8b:c8:fe:fc: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:C1:60:5D:58:B4:03:9D:04:0C:C0:14:E6:C7:EA:79:DD:2E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:06:e6:b4:e9:84:2d:d1:66:12:d2:2a:04:1d:db:ef:f0: 49:2b:80:5f:71:d1:ae:49:fe:86:1e:e4:f8:4d:55:ce:9e:c9: 4f:d3:38:30:ec:ba:2a:7a:a8:cb:ed:b5:1d:2f:dd:4d:93:1f: 41:39:78:a8:4f:df:7b:53:b5:9d:7b:c6:ba:d5:d8:59:35:ed: e5:85:17:69:b7:4d:c9:57:5a:cd:39:2f:d2:90:3f:c4:2c:6d: d6:55:09:33:40:2a:e6:a7:da:37:3f:ac:e6:ae:bb:a1:56:8e: f9:f1:d9:2c:bf:16:74:47:fe:26:17:19:97:4e:55:6e:bd:8f: dc:0e:ee:cc:dd:b4:21:21:43:21:a4:4b:81:66:5c:3e:9c:3e: 05:38:5e:37:67:c8:cc:32:76:c0:c3:1f:d5:dd:95:bb:f3:46: 8e:c7:b4:37:5e:1f:1f:5f:7c:eb:33:a8:1d:8e:c7:29:cc:a2: 33:1d:4d:d7:b2:1f:c4:61:35:03:5d:77:3b:83:80:aa:83:9c: fe:32:36:90:c4:66:1d:4d:3f:d2:65:df:21:14:ae:44:d4:ab: 0c:1a:9a:93:b9:c2:a7:c2:cf:c0:1b:82:70:ff:a3:79:6a:7f: 9a:75:b3:52:b6:b9:fa:99:af:e3:43:4a:d7:ec:7d:3b:d9:4d: 98:21:d6:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n97lnEPlJdGdKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YmUyMTg3ODgtOTA0OS00ZGNjLThkOGYtZmFlMjA4NGM1NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dAohg+3ESQslxdNMQ3MNzcTHBbMyh6EDX0w 2TnDjBe66daTR731LrcsWl8DVpXjDYsapvqSRltAxLd+hjP7hBCQwwXO0PiFAG6/ GTtykwpWEiXWaBwkWuA4ZMTqLwFybVHVueGR/1SqiWfNZhuYC8Ho3AT9WyusDfSl AJnVHLh4hia5hCKLOIhMFhCuG1w2x1VF5YmF3MEzUZQgxEFkhJMb4azDMLGrKQ6X 1TBqsVKWOFN46gEq/qbPI6+Uhy3e3nhCvNiKmpVOh/U52kc5Rqa21OOCQmtr5A9N I17eYc6NeJ7snUzMRgr+1S4wwKziOkMo/gctSuap3ovI/vzhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLXwWBdWLQDnQQMwBTmx+p53S5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThkODRmNjItNTFkNC0z YzUwLWFjNzAtNDNkNDA5YzI5YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzkBua06YQt0WYS0ioEHdvv8EkrgF9x0a5J/oYe5PhNVc6eyU/TODDs uip6qMvttR0v3U2TH0E5eKhP33tTtZ17xrrV2Fk17eWFF2m3TclXWs05L9KQP8Qs bdZVCTNAKuan2jc/rOauu6FWjvnx2Sy/FnRH/iYXGZdOVW69j9wO7szdtCEhQyGk S4FmXD6cPgU4XjdnyMwydsDDH9XdlbvzRo7HtDdeHx9ffOszqB2OxynMojMdTdey H8RhNQNddzuDgKqDnP4yNpDEZh1NP9Jl3yEUrkTUqwwampO5wqfCz8AbgnD/o3lq f5p1s1K2ufqZr+NDStfsfTvZTZgh1t8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:27 2026 by rpki-client