$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa File: 0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa (raw, json) Hash identifier: 5QJV/mDGjeY3RNNdJkmga7R68yG6VJq0nFTE90r+Xag= Subject key identifier: AC:F9:E6:F9:19:AC:03:E5:62:F4:21:79:8B:CF:A7:9E:A0:6F:D7:3A Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D0D424A99ED60DF1CA229AF80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 209.51.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:4a:99:ed:60:df:1c:a2:29:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=0dd154e3-1a19-4496-8f06-8b775ba8976c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:d7:89:01:fe:45:32:52:e5:f0:d3:40:d6: 9c:87:15:79:db:ad:8a:26:17:36:4b:bb:e1:df:cd: 07:f0:57:a1:d1:26:76:b8:4c:51:71:f2:9c:4f:09: 07:40:33:9b:c5:1c:5c:b8:c5:64:f8:00:ee:93:31: c6:81:22:e5:2c:e7:5e:c9:73:82:f7:67:9a:a9:b9: 65:eb:4d:6c:62:7c:53:1a:3e:d9:38:ce:7e:76:8d: 68:10:59:73:fa:45:de:b8:ba:70:90:bb:d4:17:fd: 61:76:c4:fc:40:ab:85:02:5a:8f:8c:98:46:87:14: 91:6f:df:1c:58:0c:b5:e4:41:21:6e:ef:67:1d:ad: 79:f7:d4:fc:24:18:85:ed:37:02:a5:e3:ae:c8:fe: be:5d:26:b1:a5:df:5c:0b:5d:76:28:bf:98:46:74: 9a:73:bc:2b:d6:f1:ff:2d:85:38:e4:2b:6f:e7:58: b4:0a:ca:67:51:1c:2b:2d:95:2d:9c:dd:f8:b8:27: 79:bd:65:5b:6d:4c:ac:5d:3e:13:f6:88:61:b1:fe: 7f:25:a7:0f:25:bf:7c:ab:e0:69:8e:0d:ba:49:a8: c5:1c:51:11:4d:aa:27:9a:c6:49:e6:41:fc:8f:47: d0:cc:9b:29:98:ae:44:d5:8c:30:00:da:5a:11:8a: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F9:E6:F9:19:AC:03:E5:62:F4:21:79:8B:CF:A7:9E:A0:6F:D7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d5:47:5e:10:f1:0b:79:a7:67:bc:6d:7b:65:7f:44:fd:99: 7a:ac:29:0d:27:17:39:62:5a:11:e6:fa:1a:2b:90:fd:f8:1c: 70:41:25:90:d3:02:9f:be:37:ff:4e:1c:db:17:4c:03:a2:66: 5a:6a:3f:48:1b:49:47:52:5c:c6:2c:31:ca:4e:2f:23:89:f4: a5:f3:ac:b5:d1:74:6f:0c:fe:dd:44:27:bf:37:4c:38:d4:0e: 7d:48:19:5a:c5:79:0e:50:0c:a5:6f:7b:c4:c3:00:69:66:98: 84:23:8c:41:e2:72:3a:a3:71:c8:1c:84:28:54:82:be:95:d1: 7c:84:18:22:4a:fb:5a:86:90:63:8e:51:50:97:7b:e6:31:ee: a3:02:da:2e:08:bd:7b:64:11:75:2d:ac:71:d7:e7:5d:21:40: f8:3e:bd:76:93:69:e5:65:97:56:12:46:69:1e:bd:d0:2e:3b: cf:32:eb:ed:9f:aa:34:83:9c:6d:b5:67:2d:27:87:bd:7e:b0: 46:9e:52:88:d4:e0:d2:8e:43:a5:79:1b:e5:34:14:12:b5:b3: 97:99:ba:ba:fb:0b:db:cd:2e:e9:98:45:49:d3:fc:cf:36:d4: 36:a9:da:6d:34:ae:25:a4:84:f7:a0:04:59:4f:a5:17:d7:9d: 58:1a:a1:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQkqZ7WDfHKIpr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGRkMTU0ZTMtMWExOS00NDk2LThmMDYtOGI3NzViYTg5NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qzXiQH+RTJS5fDTQNachxV5262KJhc2S7vh 380H8Feh0SZ2uExRcfKcTwkHQDObxRxcuMVk+ADukzHGgSLlLOdeyXOC92eaqbll 601sYnxTGj7ZOM5+do1oEFlz+kXeuLpwkLvUF/1hdsT8QKuFAlqPjJhGhxSRb98c WAy15EEhbu9nHa1599T8JBiF7TcCpeOuyP6+XSaxpd9cC112KL+YRnSac7wr1vH/ LYU45Ctv51i0CspnURwrLZUtnN34uCd5vWVbbUysXT4T9ohhsf5/JacPJb98q+Bp jg26SajFHFERTaonmsZJ5kH8j0fQzJspmK5E1YwwANpaEYpYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz55vkZrAPlYvQheYvPp56gb9c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMGYzNDI5ZDgtNTYyNS0z MjE3LTg1YzItMDE1ZTBiOGFhZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLVR14Q8Qt5p2e8bXtlf0T9mXqsKQ0nFzliWhHm+horkP34HHBBJZDT Ap++N/9OHNsXTAOiZlpqP0gbSUdSXMYsMcpOLyOJ9KXzrLXRdG8M/t1EJ783TDjU Dn1IGVrFeQ5QDKVve8TDAGlmmIQjjEHicjqjccgchChUgr6V0XyEGCJK+1qGkGOO UVCXe+Yx7qMC2i4IvXtkEXUtrHHX510hQPg+vXaTaeVll1YSRmkevdAuO88y6+2f qjSDnG21Zy0nh71+sEaeUojU4NKOQ6V5G+U0FBK1s5eZurr7C9vNLumYRUnT/M82 1Dap2m00riWkhPegBFlPpRfXnVgaoXA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:33 2026 by rpki-client