$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa File: 0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa (raw, json) Hash identifier: yCX5TWJG89AaOBcyd/p7qqRikq7+iTnf5BVjXcEpBjQ= Subject key identifier: AF:20:08:EA:EE:4A:D3:C2:91:E8:6A:B7:60:28:F6:1F:65:2E:7A:67 Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584D2AC5F8AB5B37A3BF3EF98780 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa Signing time: Sat 14 Mar 2026 15:44:25 +0000 ROA not before: Sat 14 Mar 2026 15:44:25 +0000 ROA not after: Fri 12 Jun 2026 15:44:25 +0000 asID: 30277 IP address blocks: 209.236.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:c5:f8:ab:5b:37:a3:bf:3e:f9:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Mar 14 15:44:25 2026 GMT Not After : Jun 12 15:44:25 2026 GMT Subject: CN=68551927-79cc-4ad2-b7da-c36caf36d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:90:4a:0e:fc:4e:26:83:64:17:87:05:d8: 1c:18:e3:98:03:9f:5b:f2:6d:e8:93:08:34:e7:d1: e0:b2:ae:50:e6:3a:40:de:f9:28:68:ce:f8:45:5b: 1f:b3:f1:34:af:84:e4:a5:71:9c:26:c5:3a:71:d6: ef:fb:ff:fd:2a:d4:a1:b4:45:04:1e:a9:f8:06:2b: 63:3a:22:13:e5:b6:17:fe:af:15:41:ab:2f:1a:50: ed:3a:14:af:17:be:7d:09:15:66:7d:07:89:f7:19: 6d:39:38:88:86:85:1b:a9:e1:21:91:2f:6d:90:75: f5:ba:77:69:06:02:6f:80:1e:50:f0:19:a7:f3:90: b2:f3:52:ef:c3:51:df:78:f5:02:75:7f:04:44:14: ef:a9:7f:59:a2:aa:c4:50:36:20:d3:79:b9:62:55: b8:12:75:0d:ff:c0:91:4e:5c:8d:4c:19:3f:68:89: ab:42:ec:b0:b2:63:ac:ee:e0:22:e1:66:4d:28:a6: c6:4c:81:76:08:68:2b:6d:2b:af:2b:a8:39:da:15: ea:0a:e8:92:6a:31:1c:52:80:1e:07:e3:0d:af:e8: 58:01:ce:ef:f6:6e:49:e0:a7:f8:a2:ca:07:8f:ce: 3d:d2:59:62:1e:82:9f:78:cf:65:a2:83:29:83:33: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:08:EA:EE:4A:D3:C2:91:E8:6A:B7:60:28:F6:1F:65:2E:7A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 209.236.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2e:93:1b:a5:33:21:d7:a9:e9:11:9c:a5:be:6b:da:ad:31: 19:de:fc:9a:78:e7:c0:b8:3f:b0:3c:db:e5:79:90:6a:57:24: 3f:5a:58:20:23:ba:f0:05:c7:1a:58:45:09:74:61:1b:fd:12: 7d:4b:df:17:49:20:e9:16:13:f6:69:f2:33:1b:79:14:2d:18: 90:4b:f9:da:32:7a:8b:b3:70:90:a8:5a:f3:ac:f7:7f:30:d0: b6:23:b6:60:cf:85:6a:33:2c:fa:c7:9f:00:e0:33:a7:97:91: 82:38:4e:0f:36:a1:f8:5a:38:28:00:f8:62:3b:44:7d:6c:af: 89:ad:78:22:3c:5a:cf:89:5f:7a:18:a5:e4:f2:67:1c:e2:47: c5:bb:08:45:ad:66:ae:7a:69:6d:a4:06:f2:6f:3e:30:90:0d: b6:cb:cf:84:44:29:f1:8a:16:e6:75:cd:59:72:7c:4d:59:55: 0e:4a:ac:01:c4:3a:bb:1f:83:e8:bd:c9:16:8a:b9:7a:df:c6: 97:e2:63:e7:e8:6c:83:23:85:b7:76:fa:de:ff:e1:3a:c6:6a: f2:65:f2:56:a6:82:2e:46:c1:f0:73:92:c8:6d:77:4c:be:5c: bb:f6:fe:c4:a4:8b:59:36:50:ed:b5:f6:a2:52:40:a6:a7:4f: 27:35:e6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qxfirWzejvz75h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MDMxNDE1NDQyNVoXDTI2MDYxMjE1NDQyNVowLzEtMCsGA1UEAxMk Njg1NTE5MjctNzljYy00YWQyLWI3ZGEtYzM2Y2FmMzZkNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovuQSg78TiaDZBeHBdgcGOOYA59b8m3okwg0 59Hgsq5Q5jpA3vkoaM74RVsfs/E0r4TkpXGcJsU6cdbv+//9KtShtEUEHqn4Bitj OiIT5bYX/q8VQasvGlDtOhSvF759CRVmfQeJ9xltOTiIhoUbqeEhkS9tkHX1undp BgJvgB5Q8Bmn85Cy81Lvw1HfePUCdX8ERBTvqX9ZoqrEUDYg03m5YlW4EnUN/8CR TlyNTBk/aImrQuywsmOs7uAi4WZNKKbGTIF2CGgrbSuvK6g52hXqCuiSajEcUoAe B+MNr+hYAc7v9m5J4Kf4osoHj8490lliHoKfeM9looMpgzPKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8gCOruStPCkehqt2Ao9h9lLnpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvMGNmM2I0Y2YtMTQ5Mi0z YjkxLThlZDAtODE5YzBjNmIyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0exwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMukxulMyHXqekRnKW+a9qtMRne/Jp458C4P7A82+V5kGpXJD9aWCAj uvAFxxpYRQl0YRv9En1L3xdJIOkWE/Zp8jMbeRQtGJBL+doyeouzcJCoWvOs938w 0LYjtmDPhWozLPrHnwDgM6eXkYI4Tg82ofhaOCgA+GI7RH1sr4mteCI8Ws+JX3oY peTyZxziR8W7CEWtZq56aW2kBvJvPjCQDbbLz4REKfGKFuZ1zVlyfE1ZVQ5KrAHE Orsfg+i9yRaKuXrfxpfiY+fobIMjhbd2+t7/4TrGavJl8lamgi5GwfBzkshtd0y+ XLv2/sSki1k2UO219qJSQKanTyc15nI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:20:03 2026 by rpki-client