$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af/48972f33-61b3-30ee-9550-077c2ffe2176.roa File: 48972f33-61b3-30ee-9550-077c2ffe2176.roa (raw, json) Hash identifier: 7VyMLGWkTeVoTAbsEYcV00Pn4LkJleRaFh4IbouVu+Q= Subject key identifier: 97:80:9A:E8:FB:26:D3:71:A4:67:E4:F6:4B:02:28:7C:54:DC:22:50 Certificate issuer: /CN=9dfa2977-a9cb-4338-ac9a-bf87bd4d00af Certificate serial: 010D0C9F4328584D1B19E36C575183B0A46CC640 Authority key identifier: B1:29:B9:12:CD:0A:46:5D:17:1E:E7:DB:02:DD:26:CB:27:A0:2D:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af/48972f33-61b3-30ee-9550-077c2ffe2176.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 213929 IP address blocks: 173.214.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e3:6c:57:51:83:b0:a4:6c:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfa2977-a9cb-4338-ac9a-bf87bd4d00af Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d4150cb6-7c52-4556-9293-2021667bf118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:9e:ee:f0:14:fb:8a:bf:8a:36:45:04:c8: a4:ef:67:25:b8:a6:59:62:fd:cb:03:5e:c2:4e:06: 39:e0:29:20:16:b0:fa:00:9c:76:3f:9a:e6:bb:aa: 1c:e2:86:72:b0:d1:3b:72:3b:4a:4e:39:3f:b2:e0: 51:25:b4:ef:16:7b:cb:75:4f:14:de:a4:bb:e4:8e: 0e:a3:bb:57:09:2d:11:a6:4f:48:c7:e9:6d:1e:49: 1c:d5:02:a8:e7:ee:7d:8b:ad:6b:ac:ad:a7:0b:57: 81:fd:0f:fa:c7:86:11:69:d1:32:00:ea:58:b1:e4: e2:f6:0e:dd:48:fc:97:fa:bb:f2:2f:13:8d:1b:64: 9d:62:2a:ca:5d:65:d0:30:c9:36:99:a5:d1:c9:2f: 9b:47:37:01:e2:3a:09:43:ae:da:5a:36:63:8f:84: 90:fa:62:68:4c:cf:4d:8f:22:67:85:d8:17:0b:76: 2b:8b:14:b0:50:99:ea:bc:2a:f3:68:21:de:a2:d5: c0:53:8e:16:af:f6:39:6b:0b:8c:7b:92:e0:23:ca: 3d:87:98:60:d6:73:65:dc:f1:29:66:5d:94:59:80: e1:6a:d7:2e:d6:79:bf:8b:38:c4:05:d8:e2:46:f3: 3f:af:cc:db:ac:55:26:71:da:3f:88:ea:12:a2:b5: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:80:9A:E8:FB:26:D3:71:A4:67:E4:F6:4B:02:28:7C:54:DC:22:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af/48972f33-61b3-30ee-9550-077c2ffe2176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af.crl X509v3 Authority Key Identifier: keyid:B1:29:B9:12:CD:0A:46:5D:17:1E:E7:DB:02:DD:26:CB:27:A0:2D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfa2977-a9cb-4338-ac9a-bf87bd4d00af.cer sbgp-ipAddrBlock: critical IPv4: 173.214.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:14:60:44:f2:00:de:be:77:cc:cb:f4:7b:8c:30:6f:d5:78: 5e:94:e3:eb:95:82:65:a1:8c:29:58:74:31:85:72:b1:01:e3: 98:9a:63:3c:95:82:02:0a:42:45:5c:81:c9:6c:8b:5d:8c:67: bc:8a:5b:52:f9:0a:f3:18:7a:1b:db:9e:95:8a:cc:aa:73:77: 76:73:ec:22:23:5b:96:15:5c:55:92:e0:13:64:c0:b9:c0:ec: 2d:a4:fa:0c:ee:a9:62:96:d2:a3:2b:d2:4b:3d:60:5d:63:7b: bf:c4:68:2d:b0:ab:86:63:33:60:10:f6:73:68:88:e1:22:c4: 84:63:b6:71:65:25:77:38:84:1c:1a:5e:1b:3b:d7:9e:7b:d4: 55:70:c5:7a:8e:8c:5c:94:c5:f0:e3:78:da:55:64:c8:b3:5d: cc:9c:3d:d3:ee:78:16:b9:86:8f:25:11:7d:91:ee:d4:5d:bf: 8b:62:94:25:79:77:c1:6b:2b:01:13:ab:9e:ce:a1:ca:5c:79: 04:19:3b:45:ca:cf:4c:0c:f4:d9:33:9d:6a:ec:e9:4b:b4:d2: 5c:2c:cb:32:a4:3f:58:b5:63:fb:16:19:3d:3f:fa:cd:c1:0d: 8e:7d:51:df:9a:64:10:b5:7b:e8:34:1c:14:0c:e1:d6:3f:cc: 58:68:8b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeNsV1GDsKRsxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYTI5NzctYTljYi00MzM4LWFjOWEtYmY4N2JkNGQw MGFmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDQxNTBjYjYtN2M1Mi00NTU2LTkyOTMtMjAyMTY2N2JmMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIKe7vAU+4q/ijZFBMik72cluKZZYv3LA17C TgY54CkgFrD6AJx2P5rmu6oc4oZysNE7cjtKTjk/suBRJbTvFnvLdU8U3qS75I4O o7tXCS0Rpk9Ix+ltHkkc1QKo5+59i61rrK2nC1eB/Q/6x4YRadEyAOpYseTi9g7d SPyX+rvyLxONG2SdYirKXWXQMMk2maXRyS+bRzcB4joJQ67aWjZjj4SQ+mJoTM9N jyJnhdgXC3YrixSwUJnqvCrzaCHeotXAU44Wr/Y5awuMe5LgI8o9h5hg1nNl3PEp Zl2UWYDhatcu1nm/izjEBdjiRvM/r8zbrFUmcdo/iOoSorVgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeAmuj7JtNxpGfk9ksCKHxU3CJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZGZh Mjk3Ny1hOWNiLTQzMzgtYWM5YS1iZjg3YmQ0ZDAwYWYvNDg5NzJmMzMtNjFiMy0z MGVlLTk1NTAtMDc3YzJmZmUyMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWRmYTI5NzctYTljYi00MzM4LWFj OWEtYmY4N2JkNGQwMGFmLzlkZmEyOTc3LWE5Y2ItNDMzOC1hYzlhLWJmODdiZDRk MDBhZi5jcmwwHwYDVR0jBBgwFoAUsSm5Es0KRl0XHufbAt0myyegLRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZGZhMjk3Ny1hOWNiLTQzMzgtYWM5YS1iZjg3 YmQ0ZDAwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYUYETyAN6+d8zL9HuMMG/VeF6U4+uVgmWhjClYdDGFcrEB45iaYzyV ggIKQkVcgclsi12MZ7yKW1L5CvMYehvbnpWKzKpzd3Zz7CIjW5YVXFWS4BNkwLnA 7C2k+gzuqWKW0qMr0ks9YF1je7/EaC2wq4ZjM2AQ9nNoiOEixIRjtnFlJXc4hBwa Xhs715571FVwxXqOjFyUxfDjeNpVZMizXcycPdPueBa5ho8lEX2R7tRdv4tilCV5 d8FrKwETq57OocpceQQZO0XKz0wM9NkznWrs6Uu00lwsyzKkP1i1Y/sWGT0/+s3B DY59Ud+aZBC1e+g0HBQM4dY/zFhoi+w= -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:16 2026 by rpki-client