$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa File: 40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json) Hash identifier: bc/96oCpi/LIymjhHDQtl73FCJ5ar/3VvIIc4e9NKrg= Subject key identifier: 7D:A5:A4:55:12:BA:AC:A6:99:C6:46:96:00:8A:4A:AA:3B:BB:6D:A2 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D386A481CB20DDC8C516A6240 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397422 IP address blocks: 209.237.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:48:1c:b2:0d:dc:8c:51:6a:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=e87e0ad2-a847-4a20-a81d-e77b145452a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:98:05:4f:a6:0e:32:f6:bf:9c:6a:fa:45: e5:cd:45:71:49:63:69:ca:8f:6e:3f:ec:10:69:8e: 20:49:53:f8:c9:c2:67:e8:99:5c:14:a1:de:6e:1c: 08:03:50:83:7e:18:80:e8:7f:a1:da:70:0a:97:9d: d1:f9:8d:8f:4f:83:41:3a:e0:bc:ab:1b:48:05:bf: be:08:7c:e0:03:fe:70:67:73:cf:f7:1a:6b:d9:f7: 35:b9:17:1d:b6:8a:4c:40:d5:9e:87:4a:1d:02:b8: 84:b9:08:46:3e:16:38:9d:66:f2:23:53:a5:de:ff: 29:44:bb:bc:11:b4:9a:63:e4:11:d2:1a:bd:d6:66: 1c:2d:de:dd:59:30:d0:1b:56:ad:c8:35:89:12:b4: 44:07:0e:65:3d:67:7e:d1:85:a0:f0:7b:22:d7:58: 28:a5:e9:d2:eb:c9:60:d2:f1:61:6d:4a:dc:a4:c8: d7:b8:ef:57:0c:01:d6:8a:cb:82:a2:0e:25:d8:5e: 04:e7:bb:38:bb:04:27:a3:e8:fc:8c:66:9b:88:53: e9:28:7e:ac:87:93:06:df:95:37:a1:65:67:ff:7f: 24:4d:4a:98:4c:e7:2b:aa:2d:9a:ff:89:31:a4:66: 1e:12:44:6b:fa:16:81:4b:43:3a:59:80:c1:05:cd: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A5:A4:55:12:BA:AC:A6:99:C6:46:96:00:8A:4A:AA:3B:BB:6D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8d:ed:91:06:cc:b8:1c:b8:8b:78:95:19:20:dd:bd:fd:56: 37:de:e7:b0:c1:8a:ea:22:5d:cd:be:4c:e2:6a:a1:f0:ac:67: 16:6c:3a:9b:e6:35:99:03:92:92:44:97:f1:b7:7c:84:7f:ce: 1b:69:f0:14:60:64:6d:44:45:11:a0:61:30:c6:5a:1f:73:52: b3:91:e4:7b:dd:d5:1b:47:cf:dc:82:c1:32:8a:f6:64:ce:32: ab:7b:0e:f3:2d:0d:6f:f6:37:42:00:f0:d7:ab:7b:ad:65:ba: a6:99:f9:4c:6e:d1:5c:5d:6f:76:8f:d5:59:1f:28:fe:0e:f9: 3c:58:83:32:69:bc:a6:50:8c:11:ea:e3:13:65:ba:35:35:7d: 91:07:67:4d:f1:07:a5:29:61:29:b3:3f:bb:17:4d:0a:6d:9c: 78:30:60:ea:96:ac:bb:8d:a9:63:6c:f7:20:a0:e1:33:3e:7e: 90:fd:b5:b5:6b:f2:13:01:60:75:e3:51:45:af:25:8a:43:11: 3f:07:23:d7:dd:d6:1a:2e:8d:0c:b6:b6:14:81:ca:d7:2c:a5: d5:f2:88:bf:20:71:d4:fc:58:82:33:37:3f:8d:ff:bd:a6:ca: 78:78:46:a1:58:a3:35:dd:f1:d5:ea:89:46:a4:8e:22:1b:60: 84:7f:f6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akgcsg3cjFFqYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZTg3ZTBhZDItYTg0Ny00YTIwLWE4MWQtZTc3YjE0NTQ1MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY+YBU+mDjL2v5xq+kXlzUVxSWNpyo9uP+wQ aY4gSVP4ycJn6JlcFKHebhwIA1CDfhiA6H+h2nAKl53R+Y2PT4NBOuC8qxtIBb++ CHzgA/5wZ3PP9xpr2fc1uRcdtopMQNWeh0odAriEuQhGPhY4nWbyI1Ol3v8pRLu8 EbSaY+QR0hq91mYcLd7dWTDQG1atyDWJErREBw5lPWd+0YWg8Hsi11gopenS68lg 0vFhbUrcpMjXuO9XDAHWisuCog4l2F4E57s4uwQno+j8jGabiFPpKH6sh5MG35U3 oWVn/38kTUqYTOcrqi2a/4kxpGYeEkRr+haBS0M6WYDBBc1HlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2lpFUSuqymmcZGlgCKSqo7u22iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDAzODUyMzUtZjc5Mi0z ZTNmLThhNjgtYjFhZmZhNjVmMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuN7ZEGzLgcuIt4lRkg3b39Vjfe57DBiuoiXc2+TOJqofCsZxZsOpvm NZkDkpJEl/G3fIR/zhtp8BRgZG1ERRGgYTDGWh9zUrOR5Hvd1RtHz9yCwTKK9mTO Mqt7DvMtDW/2N0IA8Nere61luqaZ+Uxu0Vxdb3aP1VkfKP4O+TxYgzJpvKZQjBHq 4xNlujU1fZEHZ03xB6UpYSmzP7sXTQptnHgwYOqWrLuNqWNs9yCg4TM+fpD9tbVr 8hMBYHXjUUWvJYpDET8HI9fd1houjQy2thSBytcspdXyiL8gcdT8WIIzNz+N/72m ynh4RqFYozXd8dXqiUakjiIbYIR/9tk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:07:48 2026 by rpki-client