$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa File: 39a0738d-bd81-3dc4-bada-007779bfb3e8.roa (raw, json) Hash identifier: 6AHwBYOKVvjcGf5m9Qr5yCsPaKbqQI7wqd7BJTlC/Mo= Subject key identifier: 98:3F:89:94:61:79:E7:4F:B4:E7:61:82:A1:66:90:EC:47:58:4B:69 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584D300A54A90841E1F2967B7340 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:54:a9:08:41:e1:f2:96:7b:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0dded305-cf27-4fa3-8bcb-20bd17d1d5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:2f:dc:ba:be:7c:f9:60:cf:9a:38:77:e7: b4:5c:06:34:24:ee:d3:fc:1b:70:e9:ca:be:e0:5c: 17:5a:fc:f0:4b:61:b9:bf:a3:3d:05:40:4e:9a:3a: e2:88:1b:d9:e0:00:94:a1:bf:69:4b:11:82:29:99: c0:03:17:19:d6:28:f5:38:11:44:d2:0a:32:4b:99: 1d:69:56:f2:46:29:52:ae:f0:cb:ed:85:11:d1:32: 08:78:3f:72:f6:86:64:9e:aa:e4:68:d7:3a:7d:0f: 65:c0:b7:18:41:b0:e7:e6:b8:14:3f:0a:3b:ec:56: 6f:87:6e:99:6c:bb:90:7a:2a:29:14:30:50:4d:02: 09:58:71:7a:d6:c5:c0:5b:d2:30:51:72:2e:85:b9: 66:ee:ca:96:f8:65:b6:05:72:52:e9:67:85:7f:ac: f6:ce:07:f4:0f:73:72:f2:03:a4:45:93:50:43:50: cf:38:d3:00:a7:e0:bf:80:46:b1:c4:d0:23:ae:4f: 97:84:4a:61:4a:d1:37:2c:cf:43:7e:6d:24:a1:4a: ac:6d:98:65:32:d3:ee:51:92:8d:d5:09:70:c0:10: fb:ac:7d:d5:14:20:fb:76:0d:7c:ff:fd:84:f8:b3: 61:4b:3a:bd:08:d0:70:82:6d:db:c4:d5:ae:2e:a3: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3F:89:94:61:79:E7:4F:B4:E7:61:82:A1:66:90:EC:47:58:4B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:76:73:a3:2e:97:5c:62:8b:04:46:24:53:c3:2a:79:a2:a2: c6:63:d6:e4:bb:82:3c:4d:a7:90:6a:62:92:2d:f5:36:73:70: 63:ec:eb:bf:ed:fd:b0:2b:47:09:7d:0e:c9:c2:e3:f3:e4:5e: 5d:6e:ed:bd:4b:ff:2f:69:b2:c1:7e:ba:00:2e:6a:10:aa:b2: e8:43:2d:46:04:01:2e:c9:64:d3:e8:7b:c3:e1:6a:df:e6:34: 1d:9e:ff:e2:d7:bd:0f:9f:8f:76:52:06:17:1e:fc:a5:c9:51: 00:16:e5:d3:53:b0:30:c4:34:9f:62:e2:48:ed:0b:a3:9f:80: 43:f1:bc:ba:97:66:f8:9a:ad:09:8c:04:d9:cf:b0:5c:c9:63: 0b:fd:47:88:5e:dc:09:61:42:da:7b:29:49:29:59:e9:44:f6: e0:00:35:14:f8:9a:0e:f5:70:b1:a4:11:9e:72:b7:1f:6c:12: 75:b4:16:e4:a4:74:d5:35:64:88:7f:bd:51:30:21:3c:ea:ec: d1:86:9a:8c:71:2c:88:8a:ac:53:06:5e:21:9b:fe:97:6a:20: 0e:79:be:b0:80:d4:ee:5a:82:02:61:10:91:41:eb:de:1b:83: 30:05:1f:42:90:a5:a7:1b:cf:70:95:c8:76:16:1f:b9:77:f1: 85:79:bc:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClSpCEHh8pZ7c0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGRkZWQzMDUtY2YyNy00ZmEzLThiY2ItMjBiZDE3ZDFkNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Qv3Lq+fPlgz5o4d+e0XAY0JO7T/Btw6cq+ 4FwXWvzwS2G5v6M9BUBOmjriiBvZ4ACUob9pSxGCKZnAAxcZ1ij1OBFE0goyS5kd aVbyRilSrvDL7YUR0TIIeD9y9oZknqrkaNc6fQ9lwLcYQbDn5rgUPwo77FZvh26Z bLuQeiopFDBQTQIJWHF61sXAW9IwUXIuhblm7sqW+GW2BXJS6WeFf6z2zgf0D3Ny 8gOkRZNQQ1DPONMAp+C/gEaxxNAjrk+XhEphStE3LM9Dfm0koUqsbZhlMtPuUZKN 1QlwwBD7rH3VFCD7dg18//2E+LNhSzq9CNBwgm3bxNWuLqNcTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg/iZRheedPtOdhgqFmkOxHWEtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMzlhMDczOGQtYmQ4MS0z ZGM0LWJhZGEtMDA3Nzc5YmZiM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR2c6Mul1xiiwRGJFPDKnmiosZj1uS7gjxNp5BqYpIt9TZzcGPs67/t /bArRwl9DsnC4/PkXl1u7b1L/y9pssF+ugAuahCqsuhDLUYEAS7JZNPoe8Phat/m NB2e/+LXvQ+fj3ZSBhce/KXJUQAW5dNTsDDENJ9i4kjtC6OfgEPxvLqXZviarQmM BNnPsFzJYwv9R4he3AlhQtp7KUkpWelE9uAANRT4mg71cLGkEZ5ytx9sEnW0FuSk dNU1ZIh/vVEwITzq7NGGmoxxLIiKrFMGXiGb/pdqIA55vrCA1O5aggJhEJFB694b gzAFH0KQpacbz3CVyHYWH7l38YV5vGw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:00:40 2026 by rpki-client