$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: u2OtYIS/NImJxs9DvDIh1gh58sRtQR20HXtRKISxl0k= Subject key identifier: A1:98:FB:13:47:9E:D2:B4:C8:58:70:66:C0:6D:BD:26:27:1D:35:2F Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584D2644C4110648D80C78D23100 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c4:11:06:48:d8:0c:78:d2:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=5370b2a7-cfbf-448a-bff1-abb95497a326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:68:62:cd:a4:bd:4c:9e:51:19:16:45:07: 92:87:b9:a1:ed:99:99:db:34:95:19:5a:b3:ed:a6: 81:f7:f7:7f:f6:b4:de:d7:9c:ab:20:46:9e:b2:7a: c2:60:f9:68:a4:b5:fd:9e:20:18:c4:aa:9d:55:cb: 4d:13:35:34:24:c0:e0:1a:51:06:02:31:93:4c:68: 57:e4:ce:9a:33:95:a6:93:b8:b1:82:0d:59:48:db: 3a:da:a4:44:67:05:02:63:bf:46:ff:c6:d9:cb:d7: 83:0e:5d:13:60:50:14:83:e8:73:f1:41:d7:28:6b: eb:f6:68:8e:a1:6c:bd:f1:e5:b0:84:bf:55:27:f4: b0:22:25:b1:b0:8f:a1:ff:e4:0a:89:29:68:36:aa: 2b:ff:75:3f:0a:8c:71:08:c0:4f:ab:84:ca:b4:71: c4:46:3e:fb:1f:c4:24:e2:9e:bb:e5:c1:f5:b0:6b: 45:ee:65:d9:8b:75:68:f4:2b:c1:01:96:c6:2c:e0: 5f:cb:bd:d2:24:d5:0e:ca:6a:d6:d4:02:77:3c:9a: 93:6e:83:bb:d6:5c:5f:41:cb:c1:c1:ed:bb:56:fe: 1d:62:c3:67:e9:0c:8e:70:8c:aa:e8:3b:15:f7:ee: b5:17:ac:d3:d0:36:92:85:54:e2:71:28:23:f3:43: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:FB:13:47:9E:D2:B4:C8:58:70:66:C0:6D:BD:26:27:1D:35:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:53:2c:49:68:18:43:05:8a:ba:4f:30:6a:79:29:70:a1:22: 8d:60:86:d3:19:be:a6:c0:0e:8c:45:bf:87:14:7f:ba:24:a8: 19:82:97:67:4b:a9:df:9c:8d:14:96:87:a4:33:57:b8:07:d1: 94:a5:39:83:f9:1b:85:bf:15:f0:eb:f9:42:f9:d4:7a:06:30: 13:0e:78:bd:61:06:dc:04:cd:76:0c:3d:e5:91:ad:c7:a6:cd: 79:72:08:16:8e:9c:f8:70:a0:5c:ce:99:2e:7b:bd:ef:84:57: 45:ef:e9:dd:f6:7d:5d:19:d3:bd:a3:bd:14:5d:40:e1:ce:ce: 69:71:10:89:88:c0:ec:60:23:9c:fe:6f:25:b6:93:6c:a3:bf: 77:3d:a2:d8:73:71:01:30:cb:93:bf:7a:48:b1:69:12:63:37: 25:9a:78:44:61:40:d4:e9:ad:6b:40:90:3c:59:4b:21:98:fd: 9a:8c:17:ca:f6:4c:ea:8e:23:9c:77:b7:47:e2:9f:78:db:ef: 06:ea:5c:3b:cb:dc:cc:2c:91:76:3c:19:d5:a9:20:73:1c:06: 5d:c7:e7:d5:cb:e8:bc:b7:9b:8a:f6:12:0b:0a:9c:e7:c2:18: 1b:61:47:75:86:32:76:de:53:ab:b9:7c:45:49:6c:98:fa:e9: de:86:d1:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMQRBkjYDHjSMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NTM3MGIyYTctY2ZiZi00NDhhLWJmZjEtYWJiOTU0OTdhMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2spoYs2kvUyeURkWRQeSh7mh7ZmZ2zSVGVqz 7aaB9/d/9rTe15yrIEaesnrCYPlopLX9niAYxKqdVctNEzU0JMDgGlEGAjGTTGhX 5M6aM5Wmk7ixgg1ZSNs62qREZwUCY79G/8bZy9eDDl0TYFAUg+hz8UHXKGvr9miO oWy98eWwhL9VJ/SwIiWxsI+h/+QKiSloNqor/3U/CoxxCMBPq4TKtHHERj77H8Qk 4p675cH1sGtF7mXZi3Vo9CvBAZbGLOBfy73SJNUOymrW1AJ3PJqTboO71lxfQcvB we27Vv4dYsNn6QyOcIyq6DsV9+61F6zT0DaShVTicSgj80MQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGY+xNHntK0yFhwZsBtvSYnHTUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVTLEloGEMFirpPMGp5KXChIo1ghtMZvqbADoxFv4cUf7okqBmCl2dL qd+cjRSWh6QzV7gH0ZSlOYP5G4W/FfDr+UL51HoGMBMOeL1hBtwEzXYMPeWRrcem zXlyCBaOnPhwoFzOmS57ve+EV0Xv6d32fV0Z072jvRRdQOHOzmlxEImIwOxgI5z+ byW2k2yjv3c9othzcQEwy5O/ekixaRJjNyWaeERhQNTprWtAkDxZSyGY/ZqMF8r2 TOqOI5x3t0fin3jb7wbqXDvL3MwskXY8GdWpIHMcBl3H59XL6Ly3m4r2EgsKnOfC GBthR3WGMnbeU6u5fEVJbJj66d6G0R0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:36 2026 by rpki-client