$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa File: 6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa (raw, json) Hash identifier: TbI8oHsXjAPK0yceoY7cm5Oxama4z32k+nFq0DiTRh8= Subject key identifier: 41:97:7D:19:68:47:94:F6:D4:B9:93:9D:9F:F2:31:2B:1C:BB:FD:00 Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584D0BDD07038F27B7B14FC1BA40 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 26831 IP address blocks: 209.124.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:07:03:8f:27:b7:b1:4f:c1:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=0ffb1d31-0bfc-438f-a827-61525f512bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:8c:3f:ee:3f:33:52:f0:9c:50:a2:27:35: 9c:59:96:75:cf:4d:65:f1:62:0f:84:c2:96:b9:33: 2b:f8:5e:17:27:ad:4e:49:48:48:ba:e3:22:81:5a: c4:97:91:12:f6:b8:89:9d:3f:71:b1:20:3d:df:2c: 94:3a:6f:6c:e1:14:19:ed:9a:50:cd:9a:dd:fc:c2: 5f:77:da:be:1f:df:6f:db:cf:a1:f6:a5:20:7c:08: ec:01:08:85:c5:7a:23:67:3d:f0:c9:bb:50:37:f5: a1:93:22:83:cd:fe:67:8d:76:4b:a0:73:71:94:1b: 77:23:75:ee:53:2a:d9:fa:b2:6c:1e:f6:8b:25:58: db:a9:ac:4a:f2:b9:e3:2f:a0:fb:4d:ce:79:17:be: df:a0:ad:cb:7c:93:6f:5b:33:ea:05:8d:48:e6:03: 33:76:c2:b7:5a:a4:43:6b:06:b8:52:b0:7b:3d:d4: 4b:24:4c:4c:e0:7a:c2:9d:be:27:15:d9:46:1c:35: 38:db:23:51:32:54:52:d3:e7:d0:9f:50:2f:8b:31: d3:8a:96:85:08:c3:cd:af:75:6c:19:1d:06:58:3a: 09:1c:c1:25:bb:98:2b:02:65:1c:a6:b2:b7:5b:1b: 5c:05:97:71:93:93:ba:03:7c:fa:c2:ff:76:80:09: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:7D:19:68:47:94:F6:D4:B9:93:9D:9F:F2:31:2B:1C:BB:FD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dd:97:7c:17:22:ae:7b:19:69:6e:ff:8b:e7:e2:19:1a:66: 13:77:b1:76:06:f4:e3:82:9a:1b:9e:69:ca:cd:94:4d:7b:1d: 3b:fb:04:e1:ad:74:b0:31:8a:74:b6:cc:6c:23:b0:bf:d9:ee: d8:d6:d0:e6:c8:1d:76:bb:9c:f6:c4:35:7f:79:b5:9a:43:22: b3:1d:cb:78:9f:b1:01:23:2d:05:17:d6:97:25:fa:51:33:db: 76:42:c1:0c:15:33:be:9a:67:a8:f6:24:12:0c:1d:71:a2:8a: 8d:96:93:06:e7:7a:4b:c5:f1:e9:e8:7d:b7:51:67:01:46:98: b5:5c:46:72:f2:b2:4b:4e:47:ec:b8:79:74:42:ed:ad:b2:a8: be:97:5f:e2:9a:31:ec:fc:2e:2b:7c:25:8d:99:f4:92:10:bd: 2a:88:21:f2:ef:47:6d:9c:5b:af:74:07:7b:a0:8c:7f:b2:b3: ef:58:e4:c6:72:57:0d:11:82:c5:b8:a8:b7:1f:98:b5:87:68: 66:65:88:e4:21:d5:ad:cf:26:a9:83:22:41:3b:79:87:16:63: 07:66:03:0b:14:8a:f1:c2:40:05:e2:0e:4d:cc:f2:66:fe:c3: 87:0e:b6:71:ae:63:2b:7e:1b:2a:68:2d:fd:07:34:38:39:38: 32:aa:0d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QcDjye3sU/BukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MGZmYjFkMzEtMGJmYy00MzhmLWE4MjctNjE1MjVmNTEyYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwCMP+4/M1LwnFCiJzWcWZZ1z01l8WIPhMKW uTMr+F4XJ61OSUhIuuMigVrEl5ES9riJnT9xsSA93yyUOm9s4RQZ7ZpQzZrd/MJf d9q+H99v28+h9qUgfAjsAQiFxXojZz3wybtQN/WhkyKDzf5njXZLoHNxlBt3I3Xu UyrZ+rJsHvaLJVjbqaxK8rnjL6D7Tc55F77foK3LfJNvWzPqBY1I5gMzdsK3WqRD awa4UrB7PdRLJExM4HrCnb4nFdlGHDU42yNRMlRS0+fQn1AvizHTipaFCMPNr3Vs GR0GWDoJHMElu5grAmUcprK3WxtcBZdxk5O6A3z6wv92gAmkhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGXfRloR5T21LmTnZ/yMSscu/0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvNjg0OGM0Y2UtYjMzMy0z YzcxLWFhMTItMDhmYTY4ZGI3YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATdl3wXIq57GWlu/4vn4hkaZhN3sXYG9OOCmhueacrNlE17HTv7BOGt dLAxinS2zGwjsL/Z7tjW0ObIHXa7nPbENX95tZpDIrMdy3ifsQEjLQUX1pcl+lEz 23ZCwQwVM76aZ6j2JBIMHXGiio2WkwbnekvF8enofbdRZwFGmLVcRnLysktOR+y4 eXRC7a2yqL6XX+KaMez8Lit8JY2Z9JIQvSqIIfLvR22cW690B3ugjH+ys+9Y5MZy Vw0RgsW4qLcfmLWHaGZliOQh1a3PJqmDIkE7eYcWYwdmAwsUivHCQAXiDk3M8mb+ w4cOtnGuYyt+GypoLf0HNDg5ODKqDYA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:26 2026 by rpki-client