$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa File: bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa (raw, json) Hash identifier: 9EP4Ip2LO21hgYBy7QfoY1qPJ6k9qH0I60kNvS3n5Vc= Subject key identifier: 21:55:09:CE:CB:20:76:F2:18:D5:F9:82:AD:47:3A:3D:1C:16:EB:F8 Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Certificate serial: 010D0C9F4328584D386A4EECA881E9F9C7FC6F00 Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 19137 IP address blocks: 208.70.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4e:ec:a8:81:e9:f9:c7:fc:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=f9c07709-c6a7-4527-a76f-d52c773e8b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:4a:3e:cd:0c:8a:d2:0b:c2:75:ca:dc:48: 44:98:b2:01:3e:3a:0e:0e:c5:0a:af:7b:af:79:9c: af:7c:e2:ae:c2:74:4d:f2:5f:d6:f1:f2:80:10:2d: ba:fe:4a:ce:c3:c5:31:a7:01:64:39:f0:cc:4b:43: 7e:38:d1:3e:cd:9b:c4:83:42:b4:a5:b8:ef:d5:e2: 97:72:00:fe:72:ff:0e:5f:9c:28:6a:2d:e1:f9:2c: d3:7c:20:68:a7:25:df:9d:6e:00:99:3b:27:21:3d: 03:1b:9e:2f:b6:ee:4a:07:0f:bc:11:9f:76:b1:a3: ba:ae:fc:49:fa:01:cc:67:db:e7:8a:57:b4:ee:d8: f5:50:48:df:e4:89:83:27:f5:9f:ba:c1:85:63:e8: 50:eb:49:2b:1f:e1:40:6b:37:07:2d:1a:86:b3:ca: 01:f4:79:d9:b4:44:4c:d5:85:10:5c:57:b2:ea:83: 5d:c4:e8:fa:3e:aa:9d:0b:8c:27:ec:4b:c9:17:8c: 8d:4c:8f:ca:eb:49:04:5d:0a:c7:08:80:2c:12:43: cf:3d:25:e6:20:01:0d:1f:25:9d:69:3b:3e:32:38: 51:eb:6d:d8:f4:01:6e:81:d0:73:9b:b6:f3:28:2b: 98:c4:cb:69:9f:6b:62:36:0e:b2:62:25:86:01:c4: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:55:09:CE:CB:20:76:F2:18:D5:F9:82:AD:47:3A:3D:1C:16:EB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl X509v3 Authority Key Identifier: keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer sbgp-ipAddrBlock: critical IPv4: 208.70.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:62:ad:9a:eb:62:b5:1e:82:1d:77:74:26:2a:47:aa:d9:0b: 86:ce:9c:33:e9:08:99:0b:60:57:49:9f:1d:27:41:f3:00:cb: 4f:35:83:39:9f:b2:45:17:25:e4:9a:53:15:10:e7:65:5c:8d: 68:d1:a7:d2:1e:59:1d:73:1b:97:0e:c1:ce:48:f2:79:64:71: 6b:8d:78:7f:44:72:d8:c1:58:8e:f0:e5:1e:15:22:4e:d5:05: 7f:bd:aa:f1:a9:98:cb:20:d9:2d:b0:37:81:ec:5f:94:b4:77: 01:5e:3b:04:c6:a9:85:7f:e4:bb:06:0a:d4:a6:44:c5:e9:b4: 76:82:12:aa:0e:44:5c:58:0e:6a:5a:fb:85:fd:5e:70:34:b9: 7f:51:d4:f2:85:0d:e5:99:c5:c4:86:45:46:a4:19:b8:0f:94: d8:82:0d:31:b7:e0:78:e8:90:66:72:9a:16:12:5e:9a:ca:09: 94:d4:1a:1e:0c:ce:39:b0:a4:fd:81:ff:0f:f7:a3:72:7d:1d: f3:ac:76:8a:d0:9d:6d:ac:ff:4a:5e:d3:5a:33:4a:a3:3d:00: 32:44:f8:b7:4c:75:09:d9:de:3f:e6:ca:cf:f6:00:13:58:86: f4:a5:03:a0:4d:e7:38:d8:5f:22:96:30:1d:6b:2a:62:83:11: 6f:55:90:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ak7sqIHp+cf8bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk ZjEzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZjljMDc3MDktYzZhNy00NTI3LWE3NmYtZDUyYzc3M2U4YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/JKPs0MitILwnXK3EhEmLIBPjoODsUKr3uv eZyvfOKuwnRN8l/W8fKAEC26/krOw8UxpwFkOfDMS0N+ONE+zZvEg0K0pbjv1eKX cgD+cv8OX5woai3h+SzTfCBopyXfnW4AmTsnIT0DG54vtu5KBw+8EZ92saO6rvxJ +gHMZ9vnile07tj1UEjf5ImDJ/WfusGFY+hQ60krH+FAazcHLRqGs8oB9HnZtERM 1YUQXFey6oNdxOj6PqqdC4wn7EvJF4yNTI/K60kEXQrHCIAsEkPPPSXmIAENHyWd aTs+MjhR623Y9AFugdBzm7bzKCuYxMtpn2tiNg6yYiWGAcTF9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFVCc7LIHbyGNX5gq1HOj0cFuv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvYmIyZjE0ZGMtYTNmZi0z MzYzLTkwZWYtNjc3MWE4YTAxNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0 ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0 YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1irZrrYrUegh13dCYqR6rZC4bOnDPpCJkLYFdJnx0nQfMAy081gzmf skUXJeSaUxUQ52VcjWjRp9IeWR1zG5cOwc5I8nlkcWuNeH9EctjBWI7w5R4VIk7V BX+9qvGpmMsg2S2wN4HsX5S0dwFeOwTGqYV/5LsGCtSmRMXptHaCEqoORFxYDmpa +4X9XnA0uX9R1PKFDeWZxcSGRUakGbgPlNiCDTG34HjokGZymhYSXprKCZTUGh4M zjmwpP2B/w/3o3J9HfOsdorQnW2s/0pe01ozSqM9ADJE+LdMdQnZ3j/mys/2ABNY hvSlA6BN5zjYXyKWMB1rKmKDEW9VkFI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:31 2026 by rpki-client