$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/6dda4e4c-8c2c-365b-a925-0fdf35b3e917.roa File: 6dda4e4c-8c2c-365b-a925-0fdf35b3e917.roa (raw, json) Hash identifier: mMgCPDT3umRB0+5QcYn+T5e50qkOOFKjBf74uFN4YT8= Subject key identifier: BE:D8:70:D3:F4:57:F4:50:C2:54:EC:98:74:14:45:83:C0:53:C5:90 Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584D386A5BC1C21A68398372A220 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/6dda4e4c-8c2c-365b-a925-0fdf35b3e917.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 135542 IP address blocks: 209.209.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:5b:c1:c2:1a:68:39:83:72:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=59e095f7-d459-4d50-a7e9-782aa8ce3c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:43:fe:ea:c1:8b:65:86:a1:18:43:19:dd: 5b:46:ee:91:51:74:10:37:87:4d:e8:a2:35:6e:e6: e6:44:ce:40:3b:f2:52:15:81:49:0c:08:71:7d:af: e3:b3:ef:aa:5d:7f:d5:1f:8c:60:c8:8b:db:f7:6f: 99:32:65:c3:85:af:76:c6:42:e0:92:2c:44:a4:c4: 18:e5:0b:5f:63:40:2c:b5:21:9a:d7:c0:bc:c4:24: 53:16:41:0e:0c:56:63:e2:2e:c0:9b:3a:f3:04:78: 4b:23:c8:8e:e9:14:07:0e:ad:62:6c:54:9f:19:47: cf:f6:5c:39:12:53:4a:bd:a0:6b:aa:ec:f5:07:75: 82:95:f7:07:29:fe:c1:37:7d:ad:66:f7:aa:13:a0: bb:29:2d:70:49:dc:79:07:b0:a6:01:59:bb:ec:ca: 22:b0:ea:36:21:f3:97:c3:de:40:75:cb:91:cb:00: 70:15:e8:c4:12:ea:4b:16:84:aa:4f:14:fc:d1:13: 61:06:03:e7:97:de:2f:ea:ca:08:d0:d3:4c:60:54: 3b:dc:cf:63:8f:01:5f:c3:3d:0f:01:92:01:e7:a2: a0:f9:58:ae:fe:4f:66:c8:40:5c:96:15:46:d8:65: b4:86:37:39:87:f7:d4:be:11:43:4c:02:fc:0c:e4: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D8:70:D3:F4:57:F4:50:C2:54:EC:98:74:14:45:83:C0:53:C5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/6dda4e4c-8c2c-365b-a925-0fdf35b3e917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7e:3f:a7:a2:98:fa:a5:e4:24:77:e9:3a:46:50:cd:bb:6e: 91:c0:cc:b8:a1:a2:d2:b6:b7:26:2f:b0:9e:d3:93:b5:94:6b: 51:0f:9a:1f:d7:b7:1d:f5:1c:fd:74:b8:d6:28:5f:82:dd:5d: f9:73:52:1d:7b:f4:0c:b6:ac:ed:07:26:24:c9:80:1a:58:17: a7:71:40:ad:13:aa:ed:32:16:8e:c3:7e:a5:b4:ac:64:72:f5: 4d:6c:ac:88:3c:f7:43:16:c5:21:b2:5b:73:dd:c2:de:c7:4c: 56:06:23:2f:d7:9f:d9:9f:94:30:af:3a:2f:f0:86:f7:db:7f: 09:62:49:f9:03:a6:69:55:27:b0:05:2f:84:2a:cf:08:88:5c: ff:66:8a:f3:b9:af:48:a4:f7:a6:a8:c1:e5:02:18:66:9a:d1: 59:db:42:00:e0:49:cc:be:8c:64:c7:31:aa:bd:3c:8a:9a:e6: 7d:7e:f3:26:9e:a1:d1:7e:04:89:a5:63:ac:f3:08:e3:40:f9: 83:d9:4e:c3:99:71:98:af:30:d7:38:54:dd:08:3f:77:02:0b: 9b:9c:6a:a0:a9:ae:e3:13:3d:8d:a9:2b:33:24:2b:b8:56:d0: 7f:bd:bc:55:75:8a:03:2b:c5:87:5e:48:70:1e:44:66:00:e1: 7a:b2:6a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alvBwhpoOYNyoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NTllMDk1ZjctZDQ1OS00ZDUwLWE3ZTktNzgyYWE4Y2UzYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KhD/urBi2WGoRhDGd1bRu6RUXQQN4dN6KI1 bubmRM5AO/JSFYFJDAhxfa/js++qXX/VH4xgyIvb92+ZMmXDha92xkLgkixEpMQY 5QtfY0AstSGa18C8xCRTFkEODFZj4i7AmzrzBHhLI8iO6RQHDq1ibFSfGUfP9lw5 ElNKvaBrquz1B3WClfcHKf7BN32tZveqE6C7KS1wSdx5B7CmAVm77MoisOo2IfOX w95AdcuRywBwFejEEupLFoSqTxT80RNhBgPnl94v6soI0NNMYFQ73M9jjwFfwz0P AZIB56Kg+Viu/k9myEBclhVG2GW0hjc5h/fUvhFDTAL8DOSHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7YcNP0V/RQwlTsmHQURYPAU8WQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvNmRkYTRlNGMtOGMyYy0z NjViLWE5MjUtMGZkZjM1YjNlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV+P6eimPql5CR36TpGUM27bpHAzLihotK2tyYvsJ7Tk7WUa1EPmh/X tx31HP10uNYoX4LdXflzUh179Ay2rO0HJiTJgBpYF6dxQK0Tqu0yFo7DfqW0rGRy 9U1srIg890MWxSGyW3Pdwt7HTFYGIy/Xn9mflDCvOi/whvfbfwliSfkDpmlVJ7AF L4QqzwiIXP9mivO5r0ik96aoweUCGGaa0VnbQgDgScy+jGTHMaq9PIqa5n1+8yae odF+BImlY6zzCONA+YPZTsOZcZivMNc4VN0IP3cCC5ucaqCpruMTPY2pKzMkK7hW 0H+9vFV1igMrxYdeSHAeRGYA4XqyanE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:36 2026 by rpki-client