$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa File: a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa (raw, json) Hash identifier: OkQhgrPMEggrdoPPjQH7hmdP7pxKsv3UKQfe+L0QN3M= Subject key identifier: 59:AF:39:67:5A:7C:6A:9B:00:39:62:73:94:07:28:26:10:60:F6:9A Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584D0BDD06E0DE40ABCF013787E0 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 26831 IP address blocks: 209.124.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:06:e0:de:40:ab:cf:01:37:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=53e6785f-5d5a-4dac-a1e8-060a99ab6c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:b5:31:55:42:98:d0:ab:8e:0c:2a:bb:1b: 89:08:d1:b5:c6:a2:ee:b0:7a:57:70:ef:4a:ef:38: 98:d1:b9:71:98:fc:10:66:70:9a:f3:a1:20:7a:b1: d8:d9:37:22:e3:3c:5a:f5:0b:18:6a:02:a9:e9:fc: ff:d1:9b:b2:4f:7b:33:f5:46:5c:f0:a0:94:70:1c: 1e:34:86:55:4f:ed:db:72:e8:ce:b4:a5:2a:db:35: a9:78:8f:ad:52:24:d9:b5:07:ed:5d:25:1b:ac:4a: 7a:85:5e:db:d3:17:50:7d:3a:9c:f1:8d:97:81:c1: 24:aa:2c:a9:96:15:d5:9a:74:4f:3f:8e:eb:ff:1c: 10:a9:cc:12:72:93:58:42:4f:0a:6c:a0:39:74:4b: 9a:3e:1a:4a:50:7d:fb:99:48:fb:f7:a1:f7:7a:cf: 0e:c4:7a:eb:39:e7:82:7a:bf:bc:ec:b9:d0:2e:7b: 17:2c:b2:61:bf:83:f7:f2:8c:79:8a:cf:cf:7e:6a: ae:c0:0c:d0:fd:f3:bb:2c:8e:9a:98:d7:12:31:9f: 66:04:2b:49:40:32:3f:69:0a:05:fc:b9:55:09:ee: d1:81:84:cb:60:41:63:0e:37:2e:80:bc:a7:5a:b2: 33:d3:88:35:fb:93:22:ee:44:ae:72:f9:d2:63:35: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:39:67:5A:7C:6A:9B:00:39:62:73:94:07:28:26:10:60:F6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:82:8f:47:54:69:c4:0c:81:b7:be:f1:80:8b:b7:69:05:0e: e5:47:84:99:e1:3d:6f:b1:cd:5c:d5:27:43:0a:23:86:75:57: a9:08:1e:e5:dc:50:99:d9:ca:29:17:c4:e5:fc:80:a1:32:68: 08:e5:06:61:f9:0b:7a:2b:fd:f4:23:00:b4:51:e2:f1:c1:0d: af:f7:98:99:dc:26:80:31:a6:bd:2a:c2:e7:14:03:03:22:03: b1:3a:40:3b:74:63:6b:90:bf:cd:15:e5:44:ba:37:32:f7:a3: ae:8a:19:e6:e1:58:16:72:8a:33:8d:d7:40:21:c4:26:20:5b: 84:46:54:58:5b:1a:26:98:67:e9:53:cc:cf:73:ff:69:00:65: de:6d:fe:f6:6d:a1:66:75:08:de:57:b6:dc:f1:95:d5:f0:65: 02:f2:6b:cc:18:b5:8b:cc:4f:10:7c:64:05:78:47:cb:ad:88: 5a:a4:a7:21:c5:81:c8:d6:18:18:9b:84:d7:f1:38:ea:ae:31: 8d:ef:f7:a6:b6:75:e0:aa:f3:04:1a:79:68:56:a9:40:13:41: 15:da:d3:ef:13:01:6b:aa:1a:5f:f5:a3:69:c8:3b:d8:87:94: 04:d3:e1:de:f3:11:48:ab:9e:b8:13:2e:24:46:e7:4d:46:04: 73:f7:b7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3Qbg3kCrzwE3h+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk NTNlNjc4NWYtNWQ1YS00ZGFjLWExZTgtMDYwYTk5YWI2Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oG1MVVCmNCrjgwquxuJCNG1xqLusHpXcO9K 7ziY0blxmPwQZnCa86EgerHY2Tci4zxa9QsYagKp6fz/0ZuyT3sz9UZc8KCUcBwe NIZVT+3bcujOtKUq2zWpeI+tUiTZtQftXSUbrEp6hV7b0xdQfTqc8Y2XgcEkqiyp lhXVmnRPP47r/xwQqcwScpNYQk8KbKA5dEuaPhpKUH37mUj796H3es8OxHrrOeeC er+87LnQLnsXLLJhv4P38ox5is/PfmquwAzQ/fO7LI6amNcSMZ9mBCtJQDI/aQoF /LlVCe7RgYTLYEFjDjcugLynWrIz04g1+5Mi7kSucvnSYzU2twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmvOWdafGqbADlic5QHKCYQYPaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvYTdlOWJmMTctYjFlOS0z ZTc5LWE3YzYtYTE2ZjU3YjJkMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGCj0dUacQMgbe+8YCLt2kFDuVHhJnhPW+xzVzVJ0MKI4Z1V6kIHuXc UJnZyikXxOX8gKEyaAjlBmH5C3or/fQjALRR4vHBDa/3mJncJoAxpr0qwucUAwMi A7E6QDt0Y2uQv80V5US6NzL3o66KGebhWBZyijON10AhxCYgW4RGVFhbGiaYZ+lT zM9z/2kAZd5t/vZtoWZ1CN5XttzxldXwZQLya8wYtYvMTxB8ZAV4R8utiFqkpyHF gcjWGBibhNfxOOquMY3v96a2deCq8wQaeWhWqUATQRXa0+8TAWuqGl/1o2nIO9iH lATT4d7zEUirnrgTLiRG501GBHP3t8s= -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:21 2026 by rpki-client