$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/753e0d19-e85d-3108-ab40-64ca9efff508.roa File: 753e0d19-e85d-3108-ab40-64ca9efff508.roa (raw, json) Hash identifier: wF+lmxb7+e5v0rBhcy0ITS8UB7zud3M0oq6USleYFvg= Subject key identifier: 77:B7:A1:96:DE:38:DC:FE:E0:15:20:BC:06:CE:D4:23:0C:8C:16:F2 Certificate issuer: /CN=b18afa70-561d-4db9-a167-25cd94a409b4 Certificate serial: 010D0C9F4328584D143D16E8C17CF9694DC08980 Authority key identifier: 8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/753e0d19-e85d-3108-ab40-64ca9efff508.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 402020 IP address blocks: 209.127.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:16:e8:c1:7c:f9:69:4d:c0:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18afa70-561d-4db9-a167-25cd94a409b4 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=335c7996-765f-4cf7-93df-d944fd2e428a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:3e:54:fc:10:1a:5e:dc:ac:6a:00:c7:00: 9a:43:5d:59:b1:4d:37:8d:80:4b:07:07:0c:0c:81: db:39:09:7b:68:fe:10:8c:a8:7e:ea:18:52:b9:07: b0:75:0e:c2:35:bb:9f:70:61:98:50:a9:9a:f4:6a: e7:5b:33:18:3d:e4:8b:5a:9e:87:e1:62:78:46:84: 34:39:e0:82:a8:bf:f2:50:70:e9:dd:1a:f5:30:a0: ce:e5:76:80:79:8c:a0:23:89:c2:c1:5b:b0:56:71: bc:cd:56:ae:9a:1c:66:57:da:77:85:bf:65:dd:4c: 0d:bd:f9:d7:75:c0:dd:ce:50:55:dc:a4:51:d8:26: e8:ce:3c:43:b2:93:84:26:77:0b:5e:d7:95:3f:53: 50:0a:79:96:3c:9e:d5:d3:82:9d:3a:99:a3:02:a3: 20:d7:1b:c3:60:41:9a:ff:bd:55:e8:84:4c:24:ef: 10:41:82:95:9c:18:ac:f1:f5:54:e6:3b:65:c8:65: d9:f6:82:f2:f6:c0:a2:e9:bb:73:af:9f:a4:5f:49: 07:98:aa:ab:c9:f1:37:0b:12:75:12:39:26:4b:3b: 15:94:85:f7:fd:75:5b:21:0c:fe:42:bc:89:01:b6: 86:ba:27:60:df:e3:5b:3e:1d:13:04:b0:98:45:c4: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B7:A1:96:DE:38:DC:FE:E0:15:20:BC:06:CE:D4:23:0C:8C:16:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/753e0d19-e85d-3108-ab40-64ca9efff508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl X509v3 Authority Key Identifier: keyid:8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer sbgp-ipAddrBlock: critical IPv4: 209.127.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:25:ee:b0:50:a9:94:41:08:cc:02:8a:38:da:0d:74:66:57: 90:7c:ac:a6:47:f8:86:8b:72:59:75:56:1f:ee:7b:da:ba:6f: 39:0c:cb:58:12:55:60:b1:2b:5c:a4:70:fd:35:31:7f:e1:ac: 9d:12:2c:9f:15:72:be:65:0f:85:bd:9b:b8:8b:d0:a3:c9:a9: b2:cb:63:a5:dd:04:af:36:dc:a9:80:02:04:63:b9:19:c0:74: ff:c3:d8:98:1c:22:dd:af:79:15:90:ea:7a:2e:f3:3c:1a:b3: e7:18:b7:7c:81:51:af:8a:d6:4a:79:06:36:2c:58:0b:c1:18: d5:1a:ab:21:8e:aa:24:27:35:3a:69:44:0d:4e:2a:83:27:22: 8b:d6:07:8d:a5:d2:c2:22:9b:7e:df:16:d6:cf:41:8a:1b:da: fc:36:5f:dd:3a:92:6d:5f:b9:e7:cf:5c:40:6c:b9:e8:1f:1d: aa:54:a2:08:6b:99:9f:dd:15:25:e0:a8:eb:76:f3:f5:0c:9b: 27:c6:7a:8f:45:b3:e2:0e:a1:c7:01:d2:be:02:fa:7a:18:f2: d4:22:69:ac:5b:02:b0:a2:74:65:a3:4b:c6:8b:03:e5:f6:56: f5:7d:36:73:56:93:1f:e5:2e:97:19:34:8a:01:a4:2d:c1:b5: 31:b3:ed:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRbowXz5aU3AiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4YWZhNzAtNTYxZC00ZGI5LWExNjctMjVjZDk0YTQw OWI0MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MzM1Yzc5OTYtNzY1Zi00Y2Y3LTkzZGYtZDk0NGZkMmU0MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5M+VPwQGl7crGoAxwCaQ11ZsU03jYBLBwcM DIHbOQl7aP4QjKh+6hhSuQewdQ7CNbufcGGYUKma9GrnWzMYPeSLWp6H4WJ4RoQ0 OeCCqL/yUHDp3Rr1MKDO5XaAeYygI4nCwVuwVnG8zVaumhxmV9p3hb9l3UwNvfnX dcDdzlBV3KRR2CbozjxDspOEJncLXteVP1NQCnmWPJ7V04KdOpmjAqMg1xvDYEGa /71V6IRMJO8QQYKVnBis8fVU5jtlyGXZ9oLy9sCi6btzr5+kX0kHmKqryfE3CxJ1 EjkmSzsVlIX3/XVbIQz+QryJAbaGuidg3+NbPh0TBLCYRcRk7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe3oZbeONz+4BUgvAbO1CMMjBbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMThh ZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNkOTRhNDA5YjQvNzUzZTBkMTktZTg1ZC0z MTA4LWFiNDAtNjRjYTllZmZmNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjE4YWZhNzAtNTYxZC00ZGI5LWEx NjctMjVjZDk0YTQwOWI0L2IxOGFmYTcwLTU2MWQtNGRiOS1hMTY3LTI1Y2Q5NGE0 MDliNC5jcmwwHwYDVR0jBBgwFoAUivM3Utvlhj0YB/liZNFFxvuh00swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMThhZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNk OTRhNDA5YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMl7rBQqZRBCMwCijjaDXRmV5B8rKZH+IaLcll1Vh/ue9q6bzkMy1gS VWCxK1ykcP01MX/hrJ0SLJ8Vcr5lD4W9m7iL0KPJqbLLY6XdBK823KmAAgRjuRnA dP/D2JgcIt2veRWQ6nou8zwas+cYt3yBUa+K1kp5BjYsWAvBGNUaqyGOqiQnNTpp RA1OKoMnIovWB42l0sIim37fFtbPQYob2vw2X906km1fuefPXEBsuegfHapUoghr mZ/dFSXgqOt28/UMmyfGeo9Fs+IOoccB0r4C+noY8tQiaaxbArCidGWjS8aLA+X2 VvV9NnNWkx/lLpcZNIoBpC3BtTGz7aU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:10 2026 by rpki-client