$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa File: 0475b828-a277-3eeb-8b05-22e0f1e69824.roa (raw, json) Hash identifier: VsWlTTwHp2RN+SvPu+3B83hurf/aCq1c8JbreHrmmJY= Subject key identifier: 72:2F:A3:52:D7:FD:B9:69:FF:7F:FE:1C:37:7B:DC:48:5E:7A:F5:0A Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584D1F4A10AEC2A054C5B6114300 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 8100 IP address blocks: 209.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:10:ae:c2:a0:54:c5:b6:11:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=6e73bc1f-6bdf-441b-b38b-4699d4b505f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:f0:d0:d3:7a:20:c8:da:d2:15:a1:08:5f: 1d:93:0b:7d:74:59:0e:3c:67:1d:3d:d7:1d:4d:92: d8:ac:f4:63:84:53:36:70:6f:97:02:44:c6:6d:e8: 4d:97:3a:3b:bd:7b:e6:ed:a0:96:2b:b2:fc:18:ca: af:07:f8:3c:6c:e5:31:0a:ee:0f:29:54:91:1a:50: 6f:4b:32:bd:64:58:c7:08:07:a9:25:47:fe:3b:ed: 03:14:00:72:97:92:f1:80:a6:fe:89:6c:81:28:b3: 93:1f:a4:b3:72:e4:1a:be:3d:68:84:5d:08:23:00: 12:c6:38:8f:fb:87:1b:f1:e6:65:c4:22:b1:03:84: de:1f:7d:4e:1a:7b:6d:2a:73:03:b0:1f:c7:8c:70: 78:b6:de:36:02:6a:c1:67:99:1a:97:08:0e:33:bf: 7f:32:69:0e:8f:79:02:79:73:48:f2:38:78:0e:a5: 37:c4:b1:64:49:2d:92:40:95:c5:44:f5:17:81:2c: 0b:9a:53:ee:6f:05:74:da:87:5b:97:3d:da:0e:50: f8:09:7d:6f:bc:40:ae:f7:98:41:bb:35:89:01:95: 67:b6:86:be:fd:63:dd:6b:29:bf:3f:2d:3a:5d:c6: aa:33:30:23:13:a5:48:30:29:62:01:f9:1c:e1:6d: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2F:A3:52:D7:FD:B9:69:FF:7F:FE:1C:37:7B:DC:48:5E:7A:F5:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:35:4d:6b:ed:2f:14:2b:67:2d:02:90:ee:15:4d:8b:c1:e5: fe:4e:4f:ae:2e:c0:e9:d8:17:e7:6f:aa:58:f8:34:1c:92:2a: 8c:e9:16:e2:10:30:3a:06:a8:4e:aa:e4:c5:67:47:ae:1a:3e: ed:59:9f:74:9e:68:41:ea:50:69:98:7f:67:7a:be:4a:aa:c9: 12:e5:8f:fc:88:ee:b7:0b:ea:f1:c5:af:e4:ce:e4:d7:0a:51: 99:4c:3c:d8:4a:d1:1b:ed:77:51:3a:41:34:6c:1f:7a:7c:92: 85:3c:23:f6:c1:f7:2e:94:75:ad:9f:23:d9:18:56:15:00:70: 1b:bc:85:f4:4e:5d:d8:c3:8e:f5:9b:82:e2:2d:b8:fa:35:4b: 8c:ff:6c:61:45:3c:19:fc:e7:f1:f6:85:e3:01:01:92:d3:8f: 8c:72:27:45:17:e5:34:ba:64:d5:a1:66:25:12:ac:4f:bb:5f: ab:52:66:e2:04:7d:fe:bd:32:5d:bf:57:ac:46:60:55:20:74: 56:0c:ff:fc:60:ac:6c:5e:72:28:6a:d2:5e:df:b6:a3:97:16: 79:ca:38:29:81:ec:f4:02:94:4f:b4:28:41:88:6d:71:f8:08: b2:27:b3:0e:cc:d0:c1:a8:47:b4:2e:e0:cc:77:98:83:40:d9: a0:c8:3c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShCuwqBUxbYRQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NmU3M2JjMWYtNmJkZi00NDFiLWIzOGItNDY5OWQ0YjUwNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFLw0NN6IMja0hWhCF8dkwt9dFkOPGcdPdcd TZLYrPRjhFM2cG+XAkTGbehNlzo7vXvm7aCWK7L8GMqvB/g8bOUxCu4PKVSRGlBv SzK9ZFjHCAepJUf+O+0DFAByl5LxgKb+iWyBKLOTH6SzcuQavj1ohF0IIwASxjiP +4cb8eZlxCKxA4TeH31OGnttKnMDsB/HjHB4tt42AmrBZ5kalwgOM79/MmkOj3kC eXNI8jh4DqU3xLFkSS2SQJXFRPUXgSwLmlPubwV02odblz3aDlD4CX1vvECu95hB uzWJAZVntoa+/WPdaym/Py06XcaqMzAjE6VIMCliAfkc4W0c6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIvo1LX/blp/3/+HDd73EheevUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDQ3NWI4MjgtYTI3Ny0z ZWViLThiMDUtMjJlMGYxZTY5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc1TWvtLxQrZy0CkO4VTYvB5f5OT64uwOnYF+dvqlj4NBySKozpFuIQ MDoGqE6q5MVnR64aPu1Zn3SeaEHqUGmYf2d6vkqqyRLlj/yI7rcL6vHFr+TO5NcK UZlMPNhK0Rvtd1E6QTRsH3p8koU8I/bB9y6Uda2fI9kYVhUAcBu8hfROXdjDjvWb guItuPo1S4z/bGFFPBn85/H2heMBAZLTj4xyJ0UX5TS6ZNWhZiUSrE+7X6tSZuIE ff69Ml2/V6xGYFUgdFYM//xgrGxecihq0l7ftqOXFnnKOCmB7PQClE+0KEGIbXH4 CLInsw7M0MGoR7Qu4Mx3mINA2aDIPOg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:18 2026 by rpki-client