$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: xjS5vRnmWkn9tWAMMrn37aUUeTNa63i44umO/X8okx8= Subject key identifier: 4A:F8:BA:6E:B4:B0:52:FC:0C:D4:96:AA:E0:B4:75:18:2B:1F:71:50 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584D1F4A0D4231EC021AECB06700 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:0d:42:31:ec:02:1a:ec:b0:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=296aa576-6228-4dce-95bb-e8bfef74f97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:93:a0:99:a8:84:16:39:88:02:a2:4b:2b: 1b:7d:cb:e1:98:fa:21:fb:c7:ec:e3:87:4d:2a:b1: e4:5f:36:b5:6f:1d:df:59:2c:23:3a:d0:8c:d6:af: d7:b7:e0:09:0d:3d:ad:59:48:9e:83:b9:1f:ac:06: 83:06:7a:be:5e:8b:aa:48:89:e4:74:e5:24:4c:3c: 96:52:f1:cd:ee:c3:35:b6:ce:bf:96:77:85:e3:14: 12:b3:48:cf:c7:3a:7c:29:1b:a1:5e:d1:f5:23:3b: a5:ea:68:49:8b:e4:25:ce:71:ab:c2:bb:cf:9a:39: 7b:75:cf:3a:50:f7:71:48:cb:10:2a:f6:dd:b1:81: 97:68:4c:bb:9e:fc:ec:93:27:8a:98:10:2d:45:43: 15:6d:51:c8:7c:a4:48:30:12:b4:9b:9a:c1:2e:21: 58:c9:85:08:93:a7:98:68:fb:e1:e3:4d:68:6c:f1: e4:03:1b:a1:bf:1f:cc:41:f8:3d:ee:45:8e:7c:62: 7a:3b:77:b3:10:b2:eb:6b:7f:a4:72:a4:9b:e6:f6: da:57:56:34:f9:21:bb:fa:82:65:ef:55:8d:10:f6: fb:fc:dd:fb:2a:d2:56:34:dc:28:90:1a:f2:d9:b4: 21:6a:85:5d:9f:0d:23:83:0b:5d:89:05:94:33:ca: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F8:BA:6E:B4:B0:52:FC:0C:D4:96:AA:E0:B4:75:18:2B:1F:71:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5e:00:e9:c6:46:39:24:91:3a:cb:f7:4f:ef:9f:96:cd:a4: 75:16:5e:87:a5:e2:c9:10:09:0c:1a:ea:70:02:b3:d0:69:1e: 00:e4:5a:db:ea:6f:96:17:0c:e1:3f:c0:c3:59:4f:f4:65:2c: 32:e5:aa:ce:60:74:83:10:06:50:61:07:81:f3:3d:51:4b:a2: 67:c0:5f:f7:b3:dc:8c:f9:e0:ae:00:06:66:1c:93:59:48:f6: cc:cb:f8:e4:16:f5:60:b5:5b:39:fb:bc:35:08:49:60:c4:cf: f0:54:cd:81:b2:2e:c4:3d:5d:00:e6:aa:fd:4f:af:12:82:49: c8:06:06:0a:c1:b4:0e:5b:52:67:f3:66:ab:12:9c:0d:4c:05: 80:b1:a7:e9:c8:78:f9:b9:d7:ad:0b:f2:5d:15:6d:f5:cf:c8: 1f:b9:60:3e:0e:a2:8f:0e:74:1d:01:b6:28:dd:a3:f6:5e:71: 6c:bd:e5:e6:b8:c3:bd:29:88:1e:ae:af:52:bd:ce:d4:49:b0: 3f:69:ce:9f:d1:7f:e0:0d:af:48:a4:b9:d6:40:11:24:fd:48: 64:6d:b1:fe:aa:7e:bf:8e:ac:1e:45:c2:ac:af:6d:76:e7:0e: f4:44:94:8e:0c:0b:4d:d1:eb:3d:6c:21:80:da:13:cd:a2:b4: db:11:e0:5f -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0fSg1CMewCGuywZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk Mjk2YWE1NzYtNjIyOC00ZGNlLTk1YmItZThiZmVmNzRmOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiaToJmohBY5iAKiSysbfcvhmPoh+8fs44dN KrHkXza1bx3fWSwjOtCM1q/Xt+AJDT2tWUieg7kfrAaDBnq+XouqSInkdOUkTDyW UvHN7sM1ts6/lneF4xQSs0jPxzp8KRuhXtH1Izul6mhJi+QlznGrwrvPmjl7dc86 UPdxSMsQKvbdsYGXaEy7nvzskyeKmBAtRUMVbVHIfKRIMBK0m5rBLiFYyYUIk6eY aPvh401obPHkAxuhvx/MQfg97kWOfGJ6O3ezELLra3+kcqSb5vbaV1Y0+SG7+oJl 71WNEPb7/N37KtJWNNwokBry2bQhaoVdnw0jgwtdiQWUM8pQewIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEr4um60sFL8DNSWquC0dRgrH3FQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAiV4A6cZGOSSROsv3T++fls2kdRZeh6XiyRAJDBrqcAKz 0GkeAORa2+pvlhcM4T/Aw1lP9GUsMuWqzmB0gxAGUGEHgfM9UUuiZ8Bf97PcjPng rgAGZhyTWUj2zMv45Bb1YLVbOfu8NQhJYMTP8FTNgbIuxD1dAOaq/U+vEoJJyAYG CsG0DltSZ/NmqxKcDUwFgLGn6ch4+bnXrQvyXRVt9c/IH7lgPg6ijw50HQG2KN2j 9l5xbL3l5rjDvSmIHq6vUr3O1EmwP2nOn9F/4A2vSKS51kARJP1IZG2x/qp+v46s HkXCrK9tducO9ESUjgwLTdHrPWwhgNoTzaK02xHgXw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:32 2026 by rpki-client