$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json) Hash identifier: i3VxQxFongWdvKougeBi4LKCkT5XmvaKpbMX8uWTk9M= Subject key identifier: 26:FF:39:A8:07:91:8A:B6:9D:C5:36:C5:8C:1E:78:A2:E3:6B:3C:5D Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584D492A7118D3909DC939933180 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:71:18:d3:90:9d:c9:39:93:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=f3b823cc-8bff-4ae6-aa36-3718881b1a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:66:7e:80:f6:c1:6c:8c:1e:97:b8:67:fb: 75:86:d0:fb:33:d1:6a:c5:7d:ee:58:55:6f:76:32: 56:9e:82:e8:5e:a9:64:23:e1:25:6e:32:7e:de:55: 24:4e:aa:7c:7a:d8:7b:a0:42:a7:69:b2:1d:f2:04: 7e:13:d7:b0:12:f4:f2:c3:30:9a:3b:e8:8b:03:0d: 71:6b:a6:9e:13:b6:88:95:6d:5d:a1:19:44:3a:ba: 7f:c3:2e:e0:cd:80:a0:f9:b5:66:5a:75:eb:f1:7c: 80:65:83:95:bf:b9:37:a2:14:07:29:a2:f4:b3:04: 77:60:e0:0b:93:6b:19:80:1e:dc:08:48:05:66:bd: 50:7c:4e:97:ce:34:ad:9c:28:41:11:0c:ff:42:ec: 74:44:32:75:ad:54:4c:6e:b5:ad:33:46:ac:84:3f: 7c:c9:c8:52:db:c5:90:4a:25:9a:20:46:39:e6:ae: 33:44:37:64:8c:75:05:60:be:d3:b9:62:42:ae:0a: 9b:81:77:46:42:24:14:2e:7f:3b:74:57:8a:e3:17: 75:b8:68:0a:ee:68:0c:30:1b:21:2d:80:83:83:7c: ba:53:40:f3:31:36:44:8e:9c:44:b0:02:dd:e1:a3: 7e:19:d1:93:94:b3:31:33:04:e2:f3:59:17:8d:6b: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FF:39:A8:07:91:8A:B6:9D:C5:36:C5:8C:1E:78:A2:E3:6B:3C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:82:29:12:ac:11:55:be:28:90:d0:33:4a:5f:31:60:dc:01: 85:f7:cb:9b:de:e8:2d:7b:4b:9e:4e:7d:20:fd:84:68:5d:ea: 15:9d:a6:62:35:b4:3f:80:2a:48:c4:f1:b2:7f:80:0a:d1:95: 14:20:68:22:96:56:d7:00:1b:df:a5:42:9e:51:a0:7f:94:72: 97:00:6c:05:de:55:d6:8a:c7:1b:11:26:39:27:f6:b3:7d:c3: 7e:67:81:c5:0a:f0:46:2d:4a:8c:33:e6:4f:32:52:07:62:02: ec:35:4e:04:da:67:fa:c9:9c:09:e8:6b:be:30:2e:c9:f5:c9: d6:ec:e2:08:4a:7c:2b:86:71:fd:d8:45:42:e0:ec:3f:af:94: 62:bb:aa:d5:16:0b:ab:f4:e7:8e:e9:fa:3a:b3:f5:23:a5:7d: 01:94:2a:ed:fe:3c:2a:20:ef:f6:77:7b:59:d0:27:1c:a5:c9: 36:c6:fb:45:39:75:62:79:93:04:aa:ce:b9:dd:f0:a2:6a:d7: 7d:5f:cd:52:7d:78:7b:20:e4:c7:d0:ca:17:b2:50:9a:b2:8f: 93:dc:61:dc:0a:99:ca:49:a1:4a:77:0c:30:d6:ed:bf:59:4e: ae:d5:88:8a:ba:00:00:01:81:e0:9a:9e:ba:6d:e7:3a:63:86: f9:d7:7b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnEY05CdyTmTMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjNiODIzY2MtOGJmZi00YWU2LWFhMzYtMzcxODg4MWIxYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/5mfoD2wWyMHpe4Z/t1htD7M9FqxX3uWFVv djJWnoLoXqlkI+ElbjJ+3lUkTqp8eth7oEKnabId8gR+E9ewEvTywzCaO+iLAw1x a6aeE7aIlW1doRlEOrp/wy7gzYCg+bVmWnXr8XyAZYOVv7k3ohQHKaL0swR3YOAL k2sZgB7cCEgFZr1QfE6XzjStnChBEQz/Qux0RDJ1rVRMbrWtM0ashD98ychS28WQ SiWaIEY55q4zRDdkjHUFYL7TuWJCrgqbgXdGQiQULn87dFeK4xd1uGgK7mgMMBsh LYCDg3y6U0DzMTZEjpxEsALd4aN+GdGTlLMxMwTi81kXjWuncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb/OagHkYq2ncU2xYweeKLjazxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMzAxNjg1ZjktZWIzMC0z NDZkLWE5OGMtNmY2NTMxNDEyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeCKRKsEVW+KJDQM0pfMWDcAYX3y5ve6C17S55OfSD9hGhd6hWdpmI1 tD+AKkjE8bJ/gArRlRQgaCKWVtcAG9+lQp5RoH+UcpcAbAXeVdaKxxsRJjkn9rN9 w35ngcUK8EYtSowz5k8yUgdiAuw1TgTaZ/rJnAnoa74wLsn1ydbs4ghKfCuGcf3Y RULg7D+vlGK7qtUWC6v0547p+jqz9SOlfQGUKu3+PCog7/Z3e1nQJxylyTbG+0U5 dWJ5kwSqzrnd8KJq131fzVJ9eHsg5MfQyheyUJqyj5PcYdwKmcpJoUp3DDDW7b9Z Tq7ViIq6AAABgeCanrpt5zpjhvnXex4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:27 2026 by rpki-client