$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/d33d076d-fc49-3168-81aa-681d06f9e34a.roa File: d33d076d-fc49-3168-81aa-681d06f9e34a.roa (raw, json) Hash identifier: guG7T3J3oBL4dy0mPNjppCLgCIIfpzL18BB0JXPJY8E= Subject key identifier: AD:D7:59:14:49:C6:7B:FD:20:40:95:2A:89:57:0D:34:93:C0:CF:93 Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584D24BE2C813498D2CD68AE4300 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/d33d076d-fc49-3168-81aa-681d06f9e34a.roa Signing time: Thu 12 Mar 2026 11:53:51 +0000 ROA not before: Thu 12 Mar 2026 11:53:51 +0000 ROA not after: Wed 10 Jun 2026 11:53:51 +0000 asID: 3320 IP address blocks: 209.205.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:be:2c:81:34:98:d2:cd:68:ae:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Mar 12 11:53:51 2026 GMT Not After : Jun 10 11:53:51 2026 GMT Subject: CN=39a848d9-0b8e-4796-bb18-d9959f9b1f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:41:cc:1b:48:45:35:c1:2f:92:62:08:f7: b3:7a:e8:79:56:ad:4f:50:16:75:ac:c4:15:73:af: e4:c7:10:7d:ea:76:b4:51:05:4f:59:70:52:61:4d: dd:83:05:36:17:43:d0:d3:55:fe:20:e3:60:6c:fd: dd:93:0a:5a:66:8d:65:89:bd:34:7f:6b:14:c4:91: 31:c5:ee:d6:14:3b:2b:2f:5c:11:b4:8f:78:16:04: ed:a6:5d:0d:ca:8b:6b:4b:74:53:c6:54:dd:fe:71: 2b:7c:68:53:fb:00:b4:9d:11:2e:2c:5c:e8:16:a9: 2c:a4:22:31:4d:3c:05:0d:41:ae:dd:74:c4:16:f4: 6f:8f:00:d7:17:a8:c7:fc:ce:45:90:31:12:c8:5b: b0:f2:10:58:55:41:6c:4d:c5:0b:0c:53:7f:aa:44: da:79:bf:c9:65:35:32:63:da:1d:dc:5a:0e:73:13: 7c:72:48:71:f7:97:26:e1:7b:45:ba:2e:e5:0c:39: 8f:ad:21:6a:25:9c:5c:92:28:2c:53:5e:40:a5:8b: 75:42:43:2a:ca:bb:50:2f:06:b2:c2:27:6a:be:34: bf:40:35:3e:a3:76:e7:57:f6:a6:f7:fe:6f:6b:61: b0:67:72:0c:7e:12:b4:60:e3:83:14:23:99:21:8d: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:59:14:49:C6:7B:FD:20:40:95:2A:89:57:0D:34:93:C0:CF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/d33d076d-fc49-3168-81aa-681d06f9e34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 209.205.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:ab:06:d6:90:c4:2f:a6:c5:1d:90:0d:c1:c5:ef:f1:0e:a1: 5a:94:8b:37:53:7a:fc:6f:b8:43:13:24:e7:ca:a0:07:de:73: 6b:81:be:2a:ea:11:d2:23:61:15:8a:91:38:66:b2:56:b3:c4: 69:30:b8:19:c7:4f:9d:cc:0d:a0:74:84:2b:68:11:b2:3f:0e: a8:e1:21:9f:c3:e7:92:88:2f:a6:05:d0:56:87:27:2a:f1:d0: c4:a1:3b:ee:dd:0d:94:2e:9e:fa:92:7c:b6:66:22:e1:3c:30: d4:b9:20:34:f5:4e:f1:e8:b4:32:92:b3:24:3f:d8:4d:9a:e5: cc:1b:db:ba:e7:7f:c1:49:46:99:55:58:c5:6e:61:23:37:ce: e3:48:40:fb:ed:c3:8a:21:a6:7c:6f:ad:24:9f:6d:8d:2e:71: 4f:2b:d4:a2:bd:5c:2a:c9:a7:0a:ca:bb:b6:2e:48:c2:c0:c6: c3:5b:31:b8:4e:79:61:5c:62:21:52:26:c6:0c:30:17:fc:b8: 0b:f4:16:85:d0:86:11:2c:20:e4:53:9e:22:2c:e9:41:32:0e: 1f:cb:b4:47:7d:bf:1b:b3:37:5b:fd:91:cc:f6:2d:fc:a8:6a: 7c:d8:a0:e3:4c:6d:29:b9:5a:3a:64:cd:30:58:a2:d2:be:03: 4e:f8:1e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0kviyBNJjSzWiuQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI2MDMxMjExNTM1MVoXDTI2MDYxMDExNTM1MVowLzEtMCsGA1UEAxMk MzlhODQ4ZDktMGI4ZS00Nzk2LWJiMTgtZDk5NTlmOWIxZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDlBzBtIRTXBL5JiCPezeuh5Vq1PUBZ1rMQV c6/kxxB96na0UQVPWXBSYU3dgwU2F0PQ01X+IONgbP3dkwpaZo1lib00f2sUxJEx xe7WFDsrL1wRtI94FgTtpl0NyotrS3RTxlTd/nErfGhT+wC0nREuLFzoFqkspCIx TTwFDUGu3XTEFvRvjwDXF6jH/M5FkDESyFuw8hBYVUFsTcULDFN/qkTaeb/JZTUy Y9od3FoOcxN8ckhx95cm4XtFui7lDDmPrSFqJZxckigsU15ApYt1QkMqyrtQLway widqvjS/QDU+o3bnV/am9/5va2GwZ3IMfhK0YOODFCOZIY3XbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3XWRRJxnv9IECVKolXDTSTwM+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvZDMzZDA3NmQtZmM0OS0z MTY4LTgxYWEtNjgxZDA2ZjllMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0c3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMmrBtaQxC+mxR2QDcHF7/EOoVqUizdTevxvuEMTJOfKoAfec2uBvirq EdIjYRWKkThmslazxGkwuBnHT53MDaB0hCtoEbI/DqjhIZ/D55KIL6YF0FaHJyrx 0MShO+7dDZQunvqSfLZmIuE8MNS5IDT1TvHotDKSsyQ/2E2a5cwb27rnf8FJRplV WMVuYSM3zuNIQPvtw4ohpnxvrSSfbY0ucU8r1KK9XCrJpwrKu7YuSMLAxsNbMbhO eWFcYiFSJsYMMBf8uAv0FoXQhhEsIORTniIs6UEyDh/LtEd9vxuzN1v9kcz2Lfyo anzYoONMbSm5WjpkzTBYotK+A074HnI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:07:18 2026 by rpki-client