$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: 2IrzLrxWsPpsX4pmZ4Xll4/bJwytbLdv4jP4aTRY+PU= Subject key identifier: 9C:8A:99:1B:92:52:BC:14:04:8F:39:09:ED:D9:6F:D7:42:61:8C:A4 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584D237A6A2587FD7E177D7AB800 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6a:25:87:fd:7e:17:7d:7a:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b1dabce2-699c-417f-90e1-da82cf893e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:ad:49:7d:e2:06:2f:d4:29:ef:2b:bf:73: 1c:b2:4f:2a:40:70:c0:31:fe:5c:d5:76:69:00:22: d9:d1:48:41:31:4b:c7:f1:9d:31:23:48:6b:39:64: 01:27:5c:c6:fe:33:ee:e8:4a:7c:1b:c5:11:c5:85: 5e:f0:c0:5f:53:0b:f4:91:20:d5:15:01:a4:a2:ea: f6:f7:2b:b7:b7:5a:22:13:bf:2b:54:42:bc:df:95: 33:26:b3:e1:a1:5f:b1:fe:1a:cd:ea:d1:06:03:70: d4:14:9d:d2:40:9e:1f:06:9a:e1:8e:c2:c9:2b:40: b5:94:1d:af:42:05:21:a1:15:86:c7:03:3e:08:6e: 95:cb:9b:bc:fb:44:5d:6e:de:ea:10:4a:f6:d3:59: 61:a5:37:de:c4:34:72:23:00:ee:6c:02:7b:e6:9d: ac:9e:72:44:c2:12:b5:81:8c:71:37:cd:ec:8a:5a: 69:88:b5:8f:c0:68:e2:42:0e:39:e5:d3:ff:8a:9d: 4a:bf:b3:b2:0d:4f:41:f8:57:cc:cf:dd:25:da:75: c7:37:81:fa:0e:8b:f8:d8:fb:15:8e:f9:56:09:64: 8e:75:b9:9f:07:bb:a9:cf:3d:a4:32:07:e4:23:c4: 7b:0c:d5:31:ab:f4:52:dd:b2:b3:e9:fb:55:73:0d: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8A:99:1B:92:52:BC:14:04:8F:39:09:ED:D9:6F:D7:42:61:8C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ff:42:fb:d8:65:26:70:59:94:30:fa:da:e4:59:70:15:4d: 9c:10:1b:f5:b2:a5:5f:99:70:6b:07:40:07:d6:bf:58:27:0f: aa:7d:58:c4:71:1f:78:f3:15:55:4d:89:1a:02:d0:6d:1f:99: 2c:ea:5b:cb:7b:a2:85:de:63:b8:6d:0a:91:48:80:ac:4b:90: 33:89:47:96:41:b9:87:73:50:27:43:c7:be:70:35:3f:fd:8c: f2:bf:0c:23:a6:27:16:a8:06:bd:4c:81:58:e6:7c:6d:ab:d7: e1:3f:6e:ba:2e:80:58:b4:8b:7d:00:a0:f4:41:f7:34:ca:b5: b4:af:37:25:65:2b:4a:39:51:88:a6:07:3e:e4:3d:51:4c:9f: a3:44:56:8f:c0:cd:dd:21:14:84:d2:0f:a6:8c:0e:80:44:76: 93:7f:e6:8f:dc:6d:5a:b6:94:73:d8:96:a8:a6:57:b5:3f:54: e8:e4:38:5b:4f:9e:00:38:98:6a:34:5d:d1:71:b9:f4:8d:cd: 51:a4:d7:59:b2:e1:ff:10:a2:ec:a9:4c:d2:22:4f:06:38:24: 8f:92:b8:2e:12:27:7b:50:92:64:bb:2d:71:5a:63:c8:bf:1a: 4f:e9:1b:52:1a:2b:7f:78:5a:ac:a4:92:f4:3d:3c:83:00:c2: 9e:20:48:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemolh/1+F316uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjFkYWJjZTItNjk5Yy00MTdmLTkwZTEtZGE4MmNmODkzZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWCtSX3iBi/UKe8rv3Mcsk8qQHDAMf5c1XZp ACLZ0UhBMUvH8Z0xI0hrOWQBJ1zG/jPu6Ep8G8URxYVe8MBfUwv0kSDVFQGkour2 9yu3t1oiE78rVEK835UzJrPhoV+x/hrN6tEGA3DUFJ3SQJ4fBprhjsLJK0C1lB2v QgUhoRWGxwM+CG6Vy5u8+0Rdbt7qEEr201lhpTfexDRyIwDubAJ75p2snnJEwhK1 gYxxN83silppiLWPwGjiQg455dP/ip1Kv7OyDU9B+FfMz90l2nXHN4H6Dov42PsV jvlWCWSOdbmfB7upzz2kMgfkI8R7DNUxq/RS3bKz6ftVcw1zcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyKmRuSUrwUBI85Ce3Zb9dCYYykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD/QvvYZSZwWZQw+trkWXAVTZwQG/WypV+ZcGsHQAfWv1gnD6p9WMRx H3jzFVVNiRoC0G0fmSzqW8t7ooXeY7htCpFIgKxLkDOJR5ZBuYdzUCdDx75wNT/9 jPK/DCOmJxaoBr1MgVjmfG2r1+E/brougFi0i30AoPRB9zTKtbSvNyVlK0o5UYim Bz7kPVFMn6NEVo/Azd0hFITSD6aMDoBEdpN/5o/cbVq2lHPYlqimV7U/VOjkOFtP ngA4mGo0XdFxufSNzVGk11my4f8QouypTNIiTwY4JI+SuC4SJ3tQkmS7LXFaY8i/ Gk/pG1IaK394WqykkvQ9PIMAwp4gSBM= -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:54 2026 by rpki-client