$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa File: ea8c8f15-c687-3daa-b878-45a8368b74d7.roa (raw, json) Hash identifier: r8tooRpNxQO2lNUOVorWGowhtVFbRi3CNbUVXHoKcso= Subject key identifier: 0D:88:77:E7:1C:62:C3:52:7A:43:36:49:3A:32:96:D6:E0:EF:C7:69 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D343A1D6F24B3AB8CEF68FD00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 55246 IP address blocks: 209.237.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1d:6f:24:b3:ab:8c:ef:68:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=2f674d2a-49d7-440f-afce-2d18b8da8fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:b5:af:1c:24:8e:43:42:84:57:c9:8b:22: de:fc:a6:80:2b:92:bb:c2:62:be:e0:fe:e2:a8:ee: 6e:f9:1a:af:25:68:0b:71:04:9b:31:5c:c1:e5:41: b0:85:ab:78:7c:1e:60:89:c3:db:0e:d1:a4:3c:1f: 66:4a:8b:27:42:cb:63:8c:5d:ed:98:6d:d1:fd:65: 1a:49:1d:d7:08:33:3c:3e:f5:52:ac:b4:f5:19:9e: 9f:53:0e:14:f3:d7:57:b7:bd:56:d5:05:cf:e5:29: 3f:de:1c:11:f2:0e:00:05:4b:24:a6:9f:1d:37:23: d2:75:14:ef:62:18:2b:33:9c:c8:89:ba:9c:c8:98: b1:52:51:f9:63:1c:ba:31:ef:77:5d:be:35:43:33: 34:ff:36:74:42:18:55:fb:95:7c:84:cd:d0:37:55: 1c:79:7f:33:3f:a6:80:f6:d4:d7:70:ac:3c:54:1a: ad:b7:63:ca:a2:fc:c5:11:0f:76:15:66:4d:d1:e3: a3:65:2a:98:08:b9:b7:59:fa:07:3f:35:2d:77:a7: 33:e7:db:d9:e2:f1:f7:df:7f:a4:8f:24:cb:9d:0e: b4:51:b7:42:68:3b:02:7b:db:fd:5b:0b:f6:68:0c: 35:d9:c9:dd:d3:9b:ab:ba:5a:61:18:ab:c9:0f:7c: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:88:77:E7:1C:62:C3:52:7A:43:36:49:3A:32:96:D6:E0:EF:C7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b9:78:d2:e7:de:bd:29:d7:29:5c:d4:17:a2:82:e2:25:45: 0c:fb:5a:3f:17:c6:b4:5b:3f:09:b8:e3:ed:19:00:e7:d4:18: c5:b4:25:69:b9:b3:7f:73:41:ff:bc:0c:a9:0b:79:68:1b:ab: ff:df:3c:c4:a0:f8:38:f4:1d:d2:8b:80:3f:cb:a9:5b:84:5e: 9b:47:f7:75:6f:e8:69:08:50:a9:ef:73:17:04:a6:33:78:9c: 4b:28:36:31:6d:04:48:12:63:c3:10:b8:81:80:1a:ff:bc:1e: 77:eb:06:bf:11:65:a4:92:4a:07:b9:44:cf:25:bf:a3:6a:15: 26:09:94:69:c8:c3:be:b6:26:db:15:66:21:e3:f8:3d:c7:45: d0:34:50:ab:38:51:b1:ec:8c:8c:0e:90:31:45:08:1f:60:13: bd:bd:06:fa:cb:f0:dc:b5:b5:bc:fd:4e:06:84:2f:94:9f:4d: 4f:0c:b5:20:e2:7c:01:1e:4c:88:1b:ec:07:82:07:60:96:e9: f2:d9:db:be:82:45:2a:ed:52:2f:4f:07:e0:bb:d2:c8:93:ef: 44:1a:e1:bb:4d:69:c5:eb:62:10:24:ae:2b:68:a0:0f:5b:30: 59:92:d8:72:ea:76:4d:f5:00:8e:84:87:a3:dc:3f:0b:ce:6a: be:81:45:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oh1vJLOrjO9o/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MmY2NzRkMmEtNDlkNy00NDBmLWFmY2UtMmQxOGI4ZGE4ZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2u1rxwkjkNChFfJiyLe/KaAK5K7wmK+4P7i qO5u+RqvJWgLcQSbMVzB5UGwhat4fB5gicPbDtGkPB9mSosnQstjjF3tmG3R/WUa SR3XCDM8PvVSrLT1GZ6fUw4U89dXt71W1QXP5Sk/3hwR8g4ABUskpp8dNyPSdRTv YhgrM5zIibqcyJixUlH5Yxy6Me93Xb41QzM0/zZ0QhhV+5V8hM3QN1UceX8zP6aA 9tTXcKw8VBqtt2PKovzFEQ92FWZN0eOjZSqYCLm3WfoHPzUtd6cz59vZ4vH333+k jyTLnQ60UbdCaDsCe9v9Wwv2aAw12cnd05urulphGKvJD3wAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2Id+ccYsNSekM2SToyltbg78dpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZWE4YzhmMTUtYzY4Ny0z ZGFhLWI4NzgtNDVhODM2OGI3NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu5eNLn3r0p1ylc1BeiguIlRQz7Wj8XxrRbPwm44+0ZAOfUGMW0JWm5 s39zQf+8DKkLeWgbq//fPMSg+Dj0HdKLgD/LqVuEXptH93Vv6GkIUKnvcxcEpjN4 nEsoNjFtBEgSY8MQuIGAGv+8HnfrBr8RZaSSSge5RM8lv6NqFSYJlGnIw762JtsV ZiHj+D3HRdA0UKs4UbHsjIwOkDFFCB9gE729BvrL8Ny1tbz9TgaEL5SfTU8MtSDi fAEeTIgb7AeCB2CW6fLZ276CRSrtUi9PB+C70siT70Qa4btNacXrYhAkritooA9b MFmS2HLqdk31AI6Eh6PcPwvOar6BRXQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:16 2026 by rpki-client