$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/e3766539-1565-35ed-9b44-f34165d7784c.roa File: e3766539-1565-35ed-9b44-f34165d7784c.roa (raw, json) Hash identifier: 3gMZGUU8c4rwxCaixCdBj3nNceC/Rk7wo4Y2A1aZPzo= Subject key identifier: 05:C5:F5:2A:99:88:80:91:31:E6:27:25:E0:39:10:39:27:0A:18:85 Certificate issuer: /CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Certificate serial: 010D0C9F4328584D11547A5D56082F0A4D8B4EE6 Authority key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/e3766539-1565-35ed-9b44-f34165d7784c.roa Signing time: Thu 05 Mar 2026 13:00:32 +0000 ROA not before: Thu 05 Mar 2026 13:00:32 +0000 ROA not after: Wed 03 Jun 2026 12:00:32 +0000 asID: 54049 IP address blocks: 209.209.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:54:7a:5d:56:08:2f:0a:4d:8b:4e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Validity Not Before: Mar 5 13:00:32 2026 GMT Not After : Jun 3 12:00:32 2026 GMT Subject: CN=70ff8b64-5944-44d0-bd33-b1727ab5d1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:ac:b4:90:f1:26:ee:be:3c:af:42:de:25: a9:ac:df:41:2e:d3:e3:1f:05:d2:7a:eb:b2:04:1f: 2e:e8:d2:e5:b3:63:ab:2c:00:b8:ef:b4:64:63:56: 03:d5:96:19:d1:9e:83:65:e4:35:f2:70:89:39:f1: af:31:a9:ac:3a:c1:86:95:8d:ee:e6:8c:7a:66:25: a5:ed:a1:03:f5:70:82:18:87:1f:21:c2:34:0b:a0: d6:7f:00:a0:cd:ab:30:91:de:15:68:f0:dc:c1:31: 97:a7:8d:c6:3d:10:0b:a9:72:61:a8:26:63:c7:2e: 30:06:43:33:c7:6e:35:cc:0c:e2:e4:fb:ec:2d:82: 8a:2d:db:e0:d5:ed:62:f4:95:b1:9c:dc:5b:01:2b: 66:e4:d6:7b:d1:9a:8b:1d:53:b9:b5:20:7d:74:16: 56:b1:0c:0d:59:7e:f4:e7:5a:6b:9e:ef:44:48:5d: fa:ae:ff:c1:8c:cf:50:ad:09:9c:68:93:ed:01:af: d1:08:12:a9:b4:a2:e2:46:e3:95:f0:44:f5:82:5d: e9:83:92:c6:86:04:41:ae:5f:02:c1:e6:fb:55:9b: 9c:91:f2:cb:36:86:35:5d:68:c9:5a:ba:a1:c3:b7: 16:af:aa:d4:e1:38:8e:da:31:8a:b5:ee:9a:20:6e: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:F5:2A:99:88:80:91:31:E6:27:25:E0:39:10:39:27:0A:18:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/e3766539-1565-35ed-9b44-f34165d7784c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl X509v3 Authority Key Identifier: keyid:A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer sbgp-ipAddrBlock: critical IPv4: 209.209.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:41:69:fe:df:81:b8:b7:fc:47:60:b3:8d:68:dc:c5:45:9f: 6f:2e:6b:ba:d3:9a:11:0c:81:57:e5:a4:69:72:af:cf:d1:c3: e6:d4:2a:66:8e:e7:63:86:4c:12:5c:1b:d0:0a:4d:ee:ab:49: c2:1e:75:30:e6:7e:7b:b8:ca:fa:59:bb:6d:b3:68:e8:f8:10: d2:3e:28:1c:80:a9:06:b0:8d:fe:50:d2:7e:fc:19:dc:eb:8e: 78:f1:0f:5e:ed:05:09:5f:9d:7f:ce:09:31:20:eb:8b:4c:44: fa:1f:0e:fc:2c:4d:d1:36:aa:79:cc:90:ec:16:9e:19:68:fb: 52:bc:ae:12:d5:b1:b1:51:07:a8:7e:64:c0:83:1e:11:6b:41: ba:c4:1e:08:2d:5b:aa:50:46:91:ab:7b:e0:42:bc:ee:a9:2a: f9:a5:79:c0:e5:80:19:b2:14:f4:dc:d3:b3:1c:05:1a:77:8a: ef:ad:bf:54:51:dc:88:a1:40:3e:e3:12:21:2d:ef:ac:7d:62: ab:72:a6:c6:66:50:6a:3e:3d:3b:e2:1c:2f:19:3c:d7:cb:01: e4:81:59:25:d2:44:d9:c3:00:a2:13:a9:c0:7b:c5:4f:9c:b4: e4:6a:9e:14:70:9c:84:31:b3:ff:7f:9a:c3:0c:78:c8:ba:1a: 87:f5:7d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RVHpdVggvCk2LTuYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4 NWE3MB4XDTI2MDMwNTEzMDAzMloXDTI2MDYwMzEyMDAzMlowLzEtMCsGA1UEAxMk NzBmZjhiNjQtNTk0NC00NGQwLWJkMzMtYjE3MjdhYjVkMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2stJDxJu6+PK9C3iWprN9BLtPjHwXSeuuy BB8u6NLls2OrLAC477RkY1YD1ZYZ0Z6DZeQ18nCJOfGvMamsOsGGlY3u5ox6ZiWl 7aED9XCCGIcfIcI0C6DWfwCgzaswkd4VaPDcwTGXp43GPRALqXJhqCZjxy4wBkMz x241zAzi5PvsLYKKLdvg1e1i9JWxnNxbAStm5NZ70ZqLHVO5tSB9dBZWsQwNWX70 51prnu9ESF36rv/BjM9QrQmcaJPtAa/RCBKptKLiRuOV8ET1gl3pg5LGhgRBrl8C web7VZuckfLLNoY1XWjJWrqhw7cWr6rU4TiO2jGKte6aIG78yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXF9SqZiICRMeYnJeA5EDknChiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0 MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvZTM3NjY1MzktMTU2NS0z NWVkLTliNDQtZjM0MTY1ZDc3ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWIxNDA5NmEtZjhhYS00ODU2LTli MDktZGIzMDM0Zjg4NWE3LzFiMTQwOTZhLWY4YWEtNDg1Ni05YjA5LWRiMzAzNGY4 ODVhNy5jcmwwHwYDVR0jBBgwFoAUqMwXTYfOlyHGbxrZhme3ykGC7x8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMw MzRmODg1YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABBaf7fgbi3/Edgs41o3MVFn28ua7rTmhEMgVflpGlyr8/Rw+bUKmaO 52OGTBJcG9AKTe6rScIedTDmfnu4yvpZu22zaOj4ENI+KByAqQawjf5Q0n78Gdzr jnjxD17tBQlfnX/OCTEg64tMRPofDvwsTdE2qnnMkOwWnhlo+1K8rhLVsbFRB6h+ ZMCDHhFrQbrEHggtW6pQRpGre+BCvO6pKvmlecDlgBmyFPTc07McBRp3iu+tv1RR 3IihQD7jEiEt76x9YqtypsZmUGo+PTviHC8ZPNfLAeSBWSXSRNnDAKITqcB7xU+c tORqnhRwnIQxs/9/msMMeMi6Gof1ff0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:39:17 2026 by rpki-client