$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/9133a9df-5488-32e9-9f31-295fa33ac5e5.roa File: 9133a9df-5488-32e9-9f31-295fa33ac5e5.roa (raw, json) Hash identifier: c4DDiHnq+nDf2xIyWpWcXU+3lohRc92ooqxk6D8HFa4= Subject key identifier: 2D:FF:DC:B8:F9:88:A2:35:3F:7A:B1:0F:B4:D7:6C:6E:FC:0B:8F:5B Certificate issuer: /CN=980354e2-3c42-4edd-9777-d1d6e1642181 Certificate serial: 010D0C9F4328584D300A2022344848C0DC9C8B20 Authority key identifier: F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/9133a9df-5488-32e9-9f31-295fa33ac5e5.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 394621 IP address blocks: 207.166.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:20:22:34:48:48:c0:dc:9c:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980354e2-3c42-4edd-9777-d1d6e1642181 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=197c8bf0-ee1f-4947-9391-d1ecb64fe2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:5e:c4:2e:2a:e3:92:7e:92:4b:b4:4f:cb: 7d:e8:03:22:96:da:3f:39:be:f1:3f:75:a6:43:bc: 34:b7:0d:86:6b:5f:88:1b:69:fa:14:a7:0e:1c:02: 2a:a5:9e:62:04:e0:42:cd:43:61:d0:82:14:a4:bb: 0c:f7:a8:36:42:2d:84:ec:fe:aa:aa:97:f1:24:f5: 97:f1:4a:46:96:19:2a:69:0a:3d:6a:20:df:70:60: d6:61:c9:fa:16:ce:00:a5:c2:08:5d:31:61:48:fb: bf:f8:21:4b:d9:e3:fc:39:0b:a6:b3:37:71:16:94: 2d:dc:bc:3c:14:08:eb:f7:89:91:65:ae:49:9a:d1: 08:d1:ba:3b:90:09:4a:cd:ac:40:2c:2b:c2:f3:b5: 0c:1e:6b:9d:7f:e4:21:8b:d2:bc:03:06:0d:23:58: 53:0e:80:15:00:e6:61:ec:19:b9:6f:d0:a9:82:36: 24:93:0b:6d:da:be:a5:a4:77:1c:5d:66:9c:b6:2a: 51:c2:d7:ec:23:f5:b7:54:c3:ff:e4:ab:e2:54:5f: c3:8a:41:25:d7:9a:b3:a6:13:0f:db:e0:21:db:e5: 27:f6:43:e5:ac:f8:fa:6a:ab:e1:78:52:64:9c:31: 58:50:75:2b:e0:a4:97:00:ac:5b:00:74:9f:ad:da: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FF:DC:B8:F9:88:A2:35:3F:7A:B1:0F:B4:D7:6C:6E:FC:0B:8F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/9133a9df-5488-32e9-9f31-295fa33ac5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181/980354e2-3c42-4edd-9777-d1d6e1642181.crl X509v3 Authority Key Identifier: keyid:F4:5F:9F:9B:76:DF:58:13:AB:80:5E:79:65:DB:F7:4F:29:2A:2D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/980354e2-3c42-4edd-9777-d1d6e1642181.cer sbgp-ipAddrBlock: critical IPv4: 207.166.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e9:87:b4:8c:14:80:0c:71:c5:cc:b7:ea:1c:de:8a:eb:e7: 8e:64:75:a1:11:26:68:59:42:f8:0f:97:4f:22:4b:d8:05:8a: b4:ba:3d:23:f7:d2:4c:8e:d9:a8:4c:c7:e1:0f:d9:56:b0:ea: 63:75:b0:b5:c5:15:ad:da:10:96:92:f7:37:a2:c5:3b:28:3e: 88:3a:2f:75:0f:41:3f:50:d1:3f:4e:90:c3:4c:cd:7e:42:73: b7:68:69:f4:56:de:c9:c3:c9:01:ed:17:87:b7:a6:65:5b:89: 59:66:5a:66:7c:c9:e9:88:d5:f7:7b:cd:d5:83:55:3a:fe:fb: 76:fe:3d:3f:d9:0e:5a:05:2d:75:af:29:78:a2:8f:b2:f6:2b: 22:b8:bc:ab:ad:52:f0:8f:0c:b2:3c:8e:97:37:78:9a:ab:6e: 16:89:52:9d:64:b6:fe:79:f1:06:45:52:60:e4:e5:db:1f:e8: cc:e5:ef:ba:8e:de:7d:ef:53:7d:e7:da:d1:d7:d0:ab:b7:00: 46:1d:fb:01:af:98:72:29:90:c8:33:24:31:93:18:20:d0:92: be:43:3e:c5:f1:b1:f9:5c:65:19:b7:bd:2b:1b:a3:34:b7:07: 4d:44:48:53:d4:20:05:df:f1:e5:ee:11:ff:58:0d:41:41:95: 29:e6:24:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCiAiNEhIwNyciyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgwMzU0ZTItM2M0Mi00ZWRkLTk3NzctZDFkNmUxNjQy MTgxMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTk3YzhiZjAtZWUxZi00OTQ3LTkzOTEtZDFlY2I2NGZlMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEBexC4q45J+kku0T8t96AMilto/Ob7xP3Wm Q7w0tw2Ga1+IG2n6FKcOHAIqpZ5iBOBCzUNh0IIUpLsM96g2Qi2E7P6qqpfxJPWX 8UpGlhkqaQo9aiDfcGDWYcn6Fs4ApcIIXTFhSPu/+CFL2eP8OQumszdxFpQt3Lw8 FAjr94mRZa5JmtEI0bo7kAlKzaxALCvC87UMHmudf+Qhi9K8AwYNI1hTDoAVAOZh 7Bm5b9CpgjYkkwtt2r6lpHccXWactipRwtfsI/W3VMP/5KviVF/DikEl15qzphMP 2+Ah2+Un9kPlrPj6aqvheFJknDFYUHUr4KSXAKxbAHSfrdoQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3/3Lj5iKI1P3qxD7TXbG78C49bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ODAz NTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2ZTE2NDIxODEvOTEzM2E5ZGYtNTQ4OC0z MmU5LTlmMzEtMjk1ZmEzM2FjNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTgwMzU0ZTItM2M0Mi00ZWRkLTk3 NzctZDFkNmUxNjQyMTgxLzk4MDM1NGUyLTNjNDItNGVkZC05Nzc3LWQxZDZlMTY0 MjE4MS5jcmwwHwYDVR0jBBgwFoAU9F+fm3bfWBOrgF55Zdv3TykqLQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ODAzNTRlMi0zYzQyLTRlZGQtOTc3Ny1kMWQ2 ZTE2NDIxODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6aLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPph7SMFIAMccXMt+oc3orr545kdaERJmhZQvgPl08iS9gFirS6PSP3 0kyO2ahMx+EP2Vaw6mN1sLXFFa3aEJaS9zeixTsoPog6L3UPQT9Q0T9OkMNMzX5C c7doafRW3snDyQHtF4e3pmVbiVlmWmZ8yemI1fd7zdWDVTr++3b+PT/ZDloFLXWv KXiij7L2KyK4vKutUvCPDLI8jpc3eJqrbhaJUp1ktv558QZFUmDk5dsf6Mzl77qO 3n3vU33n2tHX0Ku3AEYd+wGvmHIpkMgzJDGTGCDQkr5DPsXxsflcZRm3vSsbozS3 B01ESFPUIAXf8eXuEf9YDUFBlSnmJO0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:27 2026 by rpki-client