$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa File: 0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa (raw, json) Hash identifier: E8DSEsuLg3LCcFJxrvQ1j1g48riNlHHwaGMJU2ENh0Y= Subject key identifier: 2A:96:DF:B9:15:AD:14:F5:A7:93:8B:92:65:38:76:13:2A:9E:4D:CC Certificate issuer: /CN=ebe4e372-a81b-4281-b3fe-19178dec0235 Certificate serial: 010D0C9F4328584D4A8FA835AF1857F1849A0900 Authority key identifier: 0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16954 IP address blocks: 209.54.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a8:35:af:18:57:f1:84:9a:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe4e372-a81b-4281-b3fe-19178dec0235 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=f7d3e783-c624-4a19-b2f0-ad881165c403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:45:cb:af:78:d9:f7:c7:7b:d3:94:f1:aa: ac:67:e0:d5:f7:d4:bf:21:2b:e3:3f:16:be:08:84: 2e:4a:e0:44:1a:f6:da:7c:73:5a:62:4a:ac:12:20: 77:44:98:fe:82:f7:fa:18:40:2f:15:ec:9f:37:3b: 15:39:6d:20:74:1a:b1:b8:3b:5e:53:15:7a:ff:5d: 6a:09:cf:53:ba:4f:01:9b:57:19:2b:24:8d:14:a2: 7d:1a:52:a1:1c:98:da:36:85:7c:a1:62:34:4f:1b: 2c:9a:c9:83:60:dd:46:85:ce:42:fa:55:00:5c:d3: f7:66:c1:9e:a2:0a:09:77:35:d6:74:5f:e8:5e:cc: f4:93:ae:ec:83:18:0a:4c:a6:39:e0:1d:97:8d:2d: aa:f1:d0:31:b8:e4:5e:d0:1c:e8:25:cb:a7:c5:e8: c9:c8:d7:1a:be:8d:43:11:79:d5:58:6a:c1:20:f0: da:29:23:b3:f3:7a:e6:1b:e7:d3:3b:bb:e1:24:0b: 22:1c:b0:d8:0a:3f:fb:b4:e6:12:36:58:36:77:51: c1:96:a5:3d:94:2f:15:a2:20:fc:2c:ed:d1:af:a6: 28:64:ef:6a:2c:03:4e:a2:10:82:22:c3:a1:8d:5a: 71:17:28:aa:07:16:f5:11:00:51:17:c5:3c:99:10: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:DF:B9:15:AD:14:F5:A7:93:8B:92:65:38:76:13:2A:9E:4D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl X509v3 Authority Key Identifier: keyid:0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer sbgp-ipAddrBlock: critical IPv4: 209.54.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a0:f4:a5:10:47:7d:bb:05:f8:87:32:83:2e:9d:39:bf:9e: fc:f4:85:dd:a3:85:68:ca:f8:a9:e1:3a:00:8e:d2:cd:f4:84: b5:ca:cd:ac:45:7b:5e:c6:9d:04:4e:b1:ff:15:bd:c1:a5:3b: a6:36:81:2f:17:c3:96:04:d9:b2:ae:c8:66:f5:eb:8d:cc:6f: ca:0c:c0:bf:2d:ad:89:ef:97:c9:f1:66:b5:34:62:1d:ed:cf: 7a:a6:d4:1b:a1:d0:5c:d3:07:8b:ca:06:61:e1:d9:b8:5b:11: f4:53:b4:b4:26:d5:b5:8f:d3:b8:40:42:13:0b:62:e7:b8:fc: 2c:7e:ee:7d:83:26:ec:dc:52:c9:db:ee:a6:22:eb:c6:1a:5f: 61:25:66:c2:59:3a:9e:b0:eb:ed:6b:59:7d:ef:cf:fc:5b:03: 05:17:49:af:b7:06:02:7e:ef:76:e8:63:1f:de:a0:15:90:bf: 05:f9:4c:3e:35:8f:02:bf:0f:b7:84:75:73:c5:23:23:41:6f: 99:29:70:4b:bc:81:6b:c2:d0:11:80:84:c1:ac:e8:35:4e:89: 7f:b0:ff:ac:c9:db:35:ed:66:e7:d8:bb:9e:f2:ac:1e:b8:64: b8:d8:a6:e4:cd:e2:99:9d:d1:f3:c0:3c:45:06:1d:59:f5:60: 6f:63:4f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6g1rxhX8YSaCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJlNGUzNzItYTgxYi00MjgxLWIzZmUtMTkxNzhkZWMw MjM1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZjdkM2U3ODMtYzYyNC00YTE5LWIyZjAtYWQ4ODExNjVjNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRtFy6942ffHe9OU8aqsZ+DV99S/ISvjPxa+ CIQuSuBEGvbafHNaYkqsEiB3RJj+gvf6GEAvFeyfNzsVOW0gdBqxuDteUxV6/11q Cc9Tuk8Bm1cZKySNFKJ9GlKhHJjaNoV8oWI0TxssmsmDYN1Ghc5C+lUAXNP3ZsGe ogoJdzXWdF/oXsz0k67sgxgKTKY54B2XjS2q8dAxuORe0BzoJcunxejJyNcavo1D EXnVWGrBIPDaKSOz83rmG+fTO7vhJAsiHLDYCj/7tOYSNlg2d1HBlqU9lC8VoiD8 LO3Rr6YoZO9qLANOohCCIsOhjVpxFyiqBxb1EQBRF8U8mRA6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqW37kVrRT1p5OLkmU4dhMqnk3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYmU0 ZTM3Mi1hODFiLTQyODEtYjNmZS0xOTE3OGRlYzAyMzUvMGNiZWE5YzUtOWMxZS0z ZmJjLWI1ZjgtNTFjNTQxZTE3Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWJlNGUzNzItYTgxYi00MjgxLWIz ZmUtMTkxNzhkZWMwMjM1L2ViZTRlMzcyLWE4MWItNDI4MS1iM2ZlLTE5MTc4ZGVj MDIzNS5jcmwwHwYDVR0jBBgwFoAUDFhkm8tv/zRFcJ2iuFyN4Pyf9e4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYmU0ZTM3Mi1hODFiLTQyODEtYjNmZS0xOTE3 OGRlYzAyMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWg9KUQR327BfiHMoMunTm/nvz0hd2jhWjK+KnhOgCO0s30hLXKzaxF e17GnQROsf8VvcGlO6Y2gS8Xw5YE2bKuyGb1643Mb8oMwL8trYnvl8nxZrU0Yh3t z3qm1Buh0FzTB4vKBmHh2bhbEfRTtLQm1bWP07hAQhMLYue4/Cx+7n2DJuzcUsnb 7qYi68YaX2ElZsJZOp6w6+1rWX3vz/xbAwUXSa+3BgJ+73boYx/eoBWQvwX5TD41 jwK/D7eEdXPFIyNBb5kpcEu8gWvC0BGAhMGs6DVOiX+w/6zJ2zXtZufYu57yrB64 ZLjYpuTN4pmd0fPAPEUGHVn1YG9jT8M= -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:12 2026 by rpki-client