$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/f9b0e905-dbc7-3fbc-a5ad-020498ce3f3e.roa File: f9b0e905-dbc7-3fbc-a5ad-020498ce3f3e.roa (raw, json) Hash identifier: IoBma/fcpuMCeJcP5G3WGnFfobWRrei3Cje5fsWf6V0= Subject key identifier: 8E:36:7C:6B:C6:10:25:E3:FE:1C:41:55:2F:76:66:D8:AF:21:17:F4 Certificate issuer: /CN=9a3d5156-0805-43d8-89a7-e6677660aae2 Certificate serial: 010D0C9F4328584D1B1A1ABE33A16FDAE428DBC0 Authority key identifier: 6C:65:84:B6:41:30:26:10:02:37:02:39:3B:74:29:65:F7:82:6A:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/f9b0e905-dbc7-3fbc-a5ad-020498ce3f3e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 400833 IP address blocks: 216.234.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/9a3d5156-0805-43d8-89a7-e6677660aae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/9a3d5156-0805-43d8-89a7-e6677660aae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:1a:be:33:a1:6f:da:e4:28:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3d5156-0805-43d8-89a7-e6677660aae2 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=a8dc7e9a-78df-4d43-b100-c830a8cf03f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:b2:4b:d6:dd:e1:79:41:95:c1:34:21:7d: 4a:41:30:19:03:11:1c:9e:67:72:12:cb:46:ce:cc: 1e:ec:f8:4b:3f:b8:7e:92:92:31:ce:3d:a4:a6:49: fc:37:e9:02:80:04:0a:fb:51:ef:05:61:cd:ec:68: a1:55:47:f9:aa:32:2e:ab:be:86:94:1c:7f:8c:1e: 41:ca:27:89:1a:f4:a2:d0:db:8a:ad:e7:0d:01:19: cd:9e:a0:ac:80:4e:56:ad:76:bf:33:80:9b:ca:41: d6:6f:11:c9:0f:1a:29:bc:ba:81:c7:92:27:f2:8d: 2a:80:4b:4f:2c:51:58:07:2d:92:4d:c4:31:5e:0d: 2e:48:63:4a:e7:69:21:ca:d7:d1:76:ed:08:4c:12: da:cc:bf:19:d0:93:c7:8e:64:c3:0c:64:b2:44:e0: 78:57:2d:a7:3c:d9:88:d8:f6:e2:49:8b:c9:cf:63: fb:6d:41:44:d6:a8:7c:0a:68:17:84:13:d6:f0:5d: 38:76:23:b8:d7:4e:9a:dd:42:26:3b:51:6a:39:10: 85:36:9c:3f:aa:0f:96:63:2c:5a:89:0f:ff:d9:b7: c8:c8:78:60:42:8d:4b:98:22:bf:ca:eb:fc:0d:04: 26:55:ba:7d:27:23:05:91:d5:63:fd:93:b9:d2:8d: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:36:7C:6B:C6:10:25:E3:FE:1C:41:55:2F:76:66:D8:AF:21:17:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/f9b0e905-dbc7-3fbc-a5ad-020498ce3f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/9a3d5156-0805-43d8-89a7-e6677660aae2.crl X509v3 Authority Key Identifier: keyid:6C:65:84:B6:41:30:26:10:02:37:02:39:3B:74:29:65:F7:82:6A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2.cer sbgp-ipAddrBlock: critical IPv4: 216.234.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9d:91:c7:08:80:3f:00:cd:cf:b8:2f:51:7f:cc:6a:a0:fe: 51:c4:c9:d2:45:b9:e0:15:4e:10:0b:8f:eb:41:f3:59:74:71: 01:7e:52:38:e8:9b:23:10:79:2d:ca:c5:80:30:6d:d9:0d:25: 08:06:ed:ed:3f:6d:60:9d:90:09:a0:6e:13:3b:33:58:4b:b5: b1:4d:43:a5:97:df:f3:25:9a:71:34:23:51:e2:30:35:1a:c6: 72:8e:6a:f8:51:19:02:43:36:45:53:1a:14:9b:a9:4e:45:28: ab:2d:b9:46:33:4c:77:f3:22:1d:0a:aa:cc:45:6a:98:03:ba: 1f:e0:dc:a6:5d:43:e4:fe:03:0b:f7:6c:26:67:8d:7c:43:d0: 8b:b3:7a:d5:e1:15:8e:6f:3d:ca:a0:cc:93:0f:99:d1:fa:86: 74:c2:b9:23:ca:7d:91:7f:90:e5:b7:f2:2e:f7:32:71:ae:39: f2:24:89:a3:ba:da:4e:30:e3:c2:91:7c:26:f1:6a:f4:68:33: 00:ce:17:13:9c:8e:cf:48:dc:67:35:45:20:17:53:8f:96:38: d7:56:0c:86:5b:b9:6c:e0:31:49:63:5f:62:88:f6:d2:e2:b1: 7f:b9:f4:29:8d:13:ad:1d:59:96:0a:73:b7:e7:e0:77:d1:b6: 89:20:39:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhq+M6Fv2uQo28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzZDUxNTYtMDgwNS00M2Q4LTg5YTctZTY2Nzc2NjBh YWUyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YThkYzdlOWEtNzhkZi00ZDQzLWIxMDAtYzgzMGE4Y2YwM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AyyS9bd4XlBlcE0IX1KQTAZAxEcnmdyEstG zswe7PhLP7h+kpIxzj2kpkn8N+kCgAQK+1HvBWHN7GihVUf5qjIuq76GlBx/jB5B yieJGvSi0NuKrecNARnNnqCsgE5WrXa/M4CbykHWbxHJDxopvLqBx5In8o0qgEtP LFFYBy2STcQxXg0uSGNK52khytfRdu0ITBLazL8Z0JPHjmTDDGSyROB4Vy2nPNmI 2PbiSYvJz2P7bUFE1qh8CmgXhBPW8F04diO4106a3UImO1FqORCFNpw/qg+WYyxa iQ//2bfIyHhgQo1LmCK/yuv8DQQmVbp9JyMFkdVj/ZO50o0eKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI42fGvGECXj/hxBVS92ZtivIRf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YTNk NTE1Ni0wODA1LTQzZDgtODlhNy1lNjY3NzY2MGFhZTIvZjliMGU5MDUtZGJjNy0z ZmJjLWE1YWQtMDIwNDk4Y2UzZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWEzZDUxNTYtMDgwNS00M2Q4LTg5 YTctZTY2Nzc2NjBhYWUyLzlhM2Q1MTU2LTA4MDUtNDNkOC04OWE3LWU2Njc3NjYw YWFlMi5jcmwwHwYDVR0jBBgwFoAUbGWEtkEwJhACNwI5O3QpZfeCagowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YTNkNTE1Ni0wODA1LTQzZDgtODlhNy1lNjY3 NzY2MGFhZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2Oq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASdkccIgD8Azc+4L1F/zGqg/lHEydJFueAVThALj+tB81l0cQF+Ujjo myMQeS3KxYAwbdkNJQgG7e0/bWCdkAmgbhM7M1hLtbFNQ6WX3/MlmnE0I1HiMDUa xnKOavhRGQJDNkVTGhSbqU5FKKstuUYzTHfzIh0KqsxFapgDuh/g3KZdQ+T+Awv3 bCZnjXxD0IuzetXhFY5vPcqgzJMPmdH6hnTCuSPKfZF/kOW38i73MnGuOfIkiaO6 2k4w48KRfCbxavRoMwDOFxOcjs9I3Gc1RSAXU4+WONdWDIZbuWzgMUljX2KI9tLi sX+59CmNE60dWZYKc7fn4HfRtokgOVA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:53 2026 by rpki-client