$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1d318a9-2c59-3f17-9209-b28724c60909.roa File: a1d318a9-2c59-3f17-9209-b28724c60909.roa (raw, json) Hash identifier: amEzjnD+4SgSKHRmkwrhehRPzkDZUTwcRjyXhiknH7Q= Subject key identifier: 81:06:3F:ED:91:1A:57:5B:E7:56:5D:91:90:C5:3B:36:74:E7:98:76 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D15A24D5B64905D2CCF35AE80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1d318a9-2c59-3f17-9209-b28724c60909.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 328631 IP address blocks: 209.61.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:4d:5b:64:90:5d:2c:cf:35:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=417eabf1-27c0-4d00-9418-7fcd138ba3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:84:67:51:cc:75:15:3d:59:22:c5:c3:8e: b0:a3:6b:7d:a5:50:43:ea:06:89:5a:96:43:90:32: 58:95:86:16:3b:28:49:07:38:a1:2f:ff:f0:b4:a0: 30:58:46:62:4f:89:40:34:c4:f1:61:0e:5d:18:64: 62:d9:df:bd:7d:99:1e:c5:84:08:d9:9d:5d:3a:82: 46:17:e4:49:19:44:41:66:e8:b0:05:66:94:74:e9: 3f:59:8b:38:6f:35:01:ba:0a:3d:02:8c:db:1e:8c: fc:6d:b5:2c:13:5d:0f:ee:68:95:db:06:13:06:8d: f7:86:3f:4a:9d:17:83:33:13:64:c8:c1:76:af:20: e4:21:36:e1:e2:2d:9a:f7:3f:15:ca:b6:1b:6c:f7: 30:06:8d:f3:4b:57:57:a4:91:1e:ba:e3:c4:6a:9f: 23:92:47:d1:9a:7d:4b:04:d6:6b:3a:51:9e:95:1a: ec:6f:ef:e1:0b:67:bc:5e:f1:25:01:47:1a:79:ed: 68:f2:31:d7:34:f5:4f:19:91:99:58:92:8c:9d:a7: 68:43:1b:39:d9:87:4d:83:f4:2c:7d:9b:e9:3e:b0: e9:21:f0:23:39:84:b9:40:b6:f2:09:ef:69:b4:63: dc:c2:89:c9:5e:07:0c:1c:46:45:22:5d:fe:5f:f4: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:3F:ED:91:1A:57:5B:E7:56:5D:91:90:C5:3B:36:74:E7:98:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1d318a9-2c59-3f17-9209-b28724c60909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:82:4f:d4:7e:d8:71:5c:c3:bb:f3:87:aa:6c:26:a7:8c:04: 89:b7:52:80:7d:94:85:e0:bb:66:0e:35:85:46:7f:18:52:b7: 96:f9:31:bd:53:bb:b6:87:4f:22:83:4d:ec:f4:02:8b:38:c0: ec:84:4b:aa:1d:45:19:1e:bf:52:c5:f0:ce:88:6d:50:46:86: 23:7d:8d:96:49:30:ec:4b:8d:23:08:60:45:7e:3f:de:5b:54: dd:ab:25:48:65:52:fe:bb:84:a2:08:aa:ec:fb:1d:3f:d7:68: c2:be:81:6e:e8:ca:4e:5e:63:be:7f:dd:86:77:2d:89:cc:48: a4:b6:54:b1:8b:64:2a:65:8a:01:f5:3d:e7:bb:e0:fa:f2:cf: ea:82:7a:19:4b:91:99:61:f1:0f:49:af:ff:e4:23:19:d9:6b: 33:31:b5:0f:28:34:82:1f:eb:28:b0:30:84:81:ef:17:e8:82: 07:e7:44:78:42:7d:9d:1d:fa:6e:51:de:30:f1:ac:0e:49:ff: 94:bf:ae:f5:be:4a:2c:1e:26:5a:84:82:f5:bc:34:7f:52:ea: a3:a4:c1:7c:fe:d7:07:cc:79:49:7d:a3:0a:83:33:b2:5a:7a: 8d:da:3c:4d:55:d4:a4:bc:61:8b:16:26:c0:0e:3a:b1:08:03: 7e:bd:bb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vok1bZJBdLM81roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NDE3ZWFiZjEtMjdjMC00ZDAwLTk0MTgtN2ZjZDEzOGJhM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+EZ1HMdRU9WSLFw46wo2t9pVBD6gaJWpZD kDJYlYYWOyhJBzihL//wtKAwWEZiT4lANMTxYQ5dGGRi2d+9fZkexYQI2Z1dOoJG F+RJGURBZuiwBWaUdOk/WYs4bzUBugo9AozbHoz8bbUsE10P7miV2wYTBo33hj9K nReDMxNkyMF2ryDkITbh4i2a9z8VyrYbbPcwBo3zS1dXpJEeuuPEap8jkkfRmn1L BNZrOlGelRrsb+/hC2e8XvElAUcaee1o8jHXNPVPGZGZWJKMnadoQxs52YdNg/Qs fZvpPrDpIfAjOYS5QLbyCe9ptGPcwonJXgcMHEZFIl3+X/SM2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEGP+2RGldb51ZdkZDFOzZ055h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTFkMzE4YTktMmM1OS0z ZjE3LTkyMDktYjI4NzI0YzYwOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0T0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKCT9R+2HFcw7vzh6psJqeMBIm3UoB9lIXgu2YONYVGfxhSt5b5Mb1T u7aHTyKDTez0Aos4wOyES6odRRkev1LF8M6IbVBGhiN9jZZJMOxLjSMIYEV+P95b VN2rJUhlUv67hKIIquz7HT/XaMK+gW7oyk5eY75/3YZ3LYnMSKS2VLGLZCpligH1 Pee74Pryz+qCehlLkZlh8Q9Jr//kIxnZazMxtQ8oNIIf6yiwMISB7xfoggfnRHhC fZ0d+m5R3jDxrA5J/5S/rvW+SiweJlqEgvW8NH9S6qOkwXz+1wfMeUl9owqDM7Ja eo3aPE1V1KS8YYsWJsAOOrEIA369uwc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:18 2026 by rpki-client