$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa File: 5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json) Hash identifier: JnNPWhwjBG7iT0pflfL7jFnv8alO3IxwYVaySJQhawc= Subject key identifier: 44:3B:35:7B:DA:53:34:FA:A3:9F:CC:0C:0A:38:3B:7D:63:C7:43:9A Certificate issuer: /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Certificate serial: 010D0C9F4328584D300A66215D6DC000D952AAC0 Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 376 IP address blocks: 132.209.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:66:21:5d:6d:c0:00:d9:52:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=15f01eca-7963-47dd-8398-a55c81182088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:d5:05:65:05:68:01:a2:a4:35:50:a5:ba: 5f:b7:8f:c6:b0:6d:e1:f3:53:73:d8:86:e5:66:83: b6:42:a3:86:fc:e4:84:11:5d:cd:c8:33:b8:fd:d3: 03:74:6f:c9:00:22:59:90:56:64:75:98:01:7a:bc: aa:de:7f:89:ee:5d:d8:3e:74:26:99:04:ac:4e:d0: 91:fb:83:b8:fd:53:63:54:17:61:cd:5a:33:13:65: 2c:6b:ce:08:81:8f:07:de:3c:64:da:73:5b:8a:26: e2:7e:84:2d:1d:6a:74:03:3c:4b:91:9c:12:ee:e7: c8:4c:10:bf:48:f6:cd:34:83:f5:a1:6d:03:6d:13: 27:ef:0c:6e:02:d0:34:21:c4:3d:db:64:cf:62:11: b0:e3:95:a8:83:a9:0f:59:17:c6:1b:40:82:05:0e: 18:84:2e:c2:fe:1a:48:b8:ed:32:6e:5e:fc:cf:06: 9b:4d:8a:68:99:80:f6:39:86:31:c7:47:77:ac:42: bb:84:53:8d:74:fb:29:f8:dc:34:45:c6:22:87:20: e6:76:4f:72:ea:04:e3:56:bb:67:69:c8:06:9d:e4: fd:c2:2d:39:56:56:34:fa:a7:a4:ba:bd:1a:62:37: 0d:ce:04:6c:65:fc:aa:fd:f9:b9:0a:a8:d8:5d:ca: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3B:35:7B:DA:53:34:FA:A3:9F:CC:0C:0A:38:3B:7D:63:C7:43:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl X509v3 Authority Key Identifier: keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer sbgp-ipAddrBlock: critical IPv4: 132.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:49:c7:2b:c9:d6:4b:0e:d8:94:5f:22:c2:83:ce:a1:be:53: 82:b4:a3:72:ca:4f:ce:fd:69:55:2a:96:6b:22:3b:3c:5f:42: 6f:bf:6b:f9:2f:6b:26:04:6e:b1:cd:3a:46:7d:46:22:e1:1a: 09:76:7f:54:2f:74:be:9c:5b:34:ed:af:3f:6d:cf:43:20:d2: 4a:4f:53:27:22:1d:7c:56:fb:98:29:ee:df:fd:78:ad:8a:91: 03:b1:a0:83:0d:53:f0:36:fa:cf:03:57:77:ec:7a:9e:c5:53: 6d:44:c5:53:c0:6c:67:9b:5a:dd:ee:ac:6c:9f:e3:8c:54:0e: 2f:00:a8:22:bf:28:35:99:32:91:9f:c8:5e:8f:16:6a:4b:02: 2f:6e:64:91:ef:6d:b1:94:00:70:97:26:1a:c0:91:55:84:2e: 1d:5a:da:0c:93:0e:6f:be:78:79:a1:e6:e5:40:2f:94:07:4a: fd:d3:a0:eb:5d:bc:d9:c4:f1:f7:76:d7:64:ba:a5:a1:de:46: 20:ca:ee:1b:a5:78:ff:02:89:c5:1d:3d:1e:9b:88:f8:2b:a1: 5f:b3:74:3c:56:9f:74:98:be:29:bb:f8:91:c7:26:b7:b4:c6: db:10:3b:7b:bb:e8:55:5a:57:d7:54:ac:f5:8d:2e:e8:b5:3b: 7e:ed:44:d9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCmYhXW3AANlSqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1 NDhmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTVmMDFlY2EtNzk2My00N2RkLTgzOTgtYTU1YzgxMTgyMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0APVBWUFaAGipDVQpbpft4/GsG3h81Nz2Ibl ZoO2QqOG/OSEEV3NyDO4/dMDdG/JACJZkFZkdZgBeryq3n+J7l3YPnQmmQSsTtCR +4O4/VNjVBdhzVozE2Usa84IgY8H3jxk2nNbiibifoQtHWp0AzxLkZwS7ufITBC/ SPbNNIP1oW0DbRMn7wxuAtA0IcQ922TPYhGw45Wog6kPWRfGG0CCBQ4YhC7C/hpI uO0ybl78zwabTYpomYD2OYYxx0d3rEK7hFONdPsp+Nw0RcYihyDmdk9y6gTjVrtn acgGneT9wi05VlY0+qekur0aYjcNzgRsZfyq/fm5CqjYXcqF9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEQ7NXvaUzT6o5/MDAo4O31jx0OaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZl N2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvNWZhYjc2MjQtN2JhMC0z OGNjLTkzOWQtNDdkZDM2MmIxYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZmZTdmNGUtZTFiZC00MjdhLTgx OTQtNGVhNDM5NmU1NDhmLzhmZmU3ZjRlLWUxYmQtNDI3YS04MTk0LTRlYTQzOTZl NTQ4Zi5jcmwwHwYDVR0jBBgwFoAUGuaMACjfi7qQxWRbYBA/ICySr5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0 Mzk2ZTU0OGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgUnHK8nWSw7YlF8iwoPOob5TgrSjcspPzv1pVSqWayI7PF9Cb79r+S9r JgRusc06Rn1GIuEaCXZ/VC90vpxbNO2vP23PQyDSSk9TJyIdfFb7mCnu3/14rYqR A7Gggw1T8Db6zwNXd+x6nsVTbUTFU8BsZ5ta3e6sbJ/jjFQOLwCoIr8oNZkykZ/I Xo8WaksCL25kke9tsZQAcJcmGsCRVYQuHVraDJMOb754eaHm5UAvlAdK/dOg6128 2cTx93bXZLqlod5GIMruG6V4/wKJxR09HpuI+CuhX7N0PFafdJi+Kbv4kccmt7TG 2xA7e7voVVpX11Ss9Y0u6LU7fu1E2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:29 2026 by rpki-client