$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f3962d16-3b7a-33d9-bc0c-4ff4a6848cf2.roa File: f3962d16-3b7a-33d9-bc0c-4ff4a6848cf2.roa (raw, json) Hash identifier: xPKCVEQ6BCFRV8bx80B625sLJXzRwPpEwu90vcBnbtA= Subject key identifier: 4A:C0:5A:AD:46:2C:77:04:64:23:1D:28:FF:7A:FF:48:E4:F9:EB:CF Certificate issuer: /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e Certificate serial: 010D0C9F4328584D3F64C9EDFDD02609426F8BE0 Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f3962d16-3b7a-33d9-bc0c-4ff4a6848cf2.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 209.196.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c9:ed:fd:d0:26:09:42:6f:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=dbb06fb3-22dd-47cd-ba90-345e7a7388ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:cf:3c:3c:4c:61:4b:21:a8:b6:e3:e4:32: d2:16:93:50:86:30:d3:0a:bb:d1:1b:2f:e5:9f:fd: c2:fc:e2:0a:93:01:10:f0:4f:a9:91:29:f7:b7:21: a8:d5:df:ce:20:d1:82:14:c0:a2:fc:15:ca:c0:c9: 2e:b4:3a:9a:f5:47:f7:a1:4d:23:bc:20:0e:ba:66: b0:99:71:ba:3b:9b:61:30:0f:fc:e8:c0:27:ef:c5: e6:d1:82:85:93:5c:7a:6f:91:50:8e:37:a0:54:4a: de:97:0a:e7:27:73:55:00:15:d9:11:3c:6e:fc:5c: b1:63:0e:fe:d5:33:88:d0:b1:c2:9d:86:7b:0b:87: cd:46:9f:87:47:8d:dd:35:9b:eb:18:e7:7c:ba:c1: 0f:d5:95:11:d7:06:60:de:0b:8f:db:77:47:36:aa: 27:22:1d:42:cd:af:7f:e2:e5:ec:c5:a1:88:b7:a1: 8c:ee:ae:2c:df:9f:4d:a6:cd:ab:e4:3c:e4:15:cc: d1:b9:36:d8:b8:30:aa:a0:e2:d3:f2:1f:48:b1:21: 22:9c:a8:4c:3f:6a:7b:f7:a1:57:c1:e0:d4:8c:e6: 43:26:9b:89:41:a4:c8:45:7a:24:d9:3d:dd:a7:4f: 87:be:73:fe:09:b9:df:32:62:31:d7:fe:5f:2b:fc: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:5A:AD:46:2C:77:04:64:23:1D:28:FF:7A:FF:48:E4:F9:EB:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f3962d16-3b7a-33d9-bc0c-4ff4a6848cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl X509v3 Authority Key Identifier: keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer sbgp-ipAddrBlock: critical IPv4: 209.196.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:81:63:14:6e:7d:db:04:84:cc:e6:39:b2:ee:8d:c9:cd:34: e0:6a:7c:8b:7e:33:55:71:e7:a4:bf:68:a7:e4:7d:93:18:20: 5a:0b:d5:56:36:75:ad:4e:31:a6:8e:1b:70:bd:a5:66:3b:0c: f2:60:68:70:fe:cd:2d:34:58:e3:4b:0a:22:ae:9f:ee:b0:9e: 42:74:29:41:38:b6:b8:f0:c6:a2:13:1a:e9:26:54:86:3a:cd: 38:e0:63:b4:2b:01:86:77:e7:aa:8e:61:63:43:5d:40:f8:c7: cb:ab:94:58:b0:fe:d4:d7:1f:1e:6d:23:b8:47:f9:45:7f:0a: c9:5c:1a:e3:ba:f0:2b:d0:69:5a:c1:8d:8e:85:7d:6f:10:5c: 88:60:05:6b:74:24:a8:0f:ef:29:d4:4c:0e:c3:d5:68:47:61: 86:f8:b9:22:60:7b:49:4a:3a:3a:96:05:a7:2d:41:5e:4f:1b: d9:3e:d8:c6:96:06:8d:dc:bb:c4:6f:a2:0a:e8:f8:3d:13:03: e9:f0:9d:05:aa:0d:a2:61:80:e3:e8:8c:d7:42:2b:fc:61:94: e0:a7:af:6e:92:97:de:ee:a0:14:43:f2:a2:01:c6:52:e2:2b: b1:0f:8f:e7:51:9b:bc:fd:c7:88:c4:2b:5c:64:18:0c:a6:9a: 31:55:58:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMnt/dAmCUJvi+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZWM1MTUtMWM2NC00ZWQyLTk2ZDQtNzI5ZmI1YTAx MDdlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGJiMDZmYjMtMjJkZC00N2NkLWJhOTAtMzQ1ZTdhNzM4OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRfPPDxMYUshqLbj5DLSFpNQhjDTCrvRGy/l n/3C/OIKkwEQ8E+pkSn3tyGo1d/OINGCFMCi/BXKwMkutDqa9Uf3oU0jvCAOumaw mXG6O5thMA/86MAn78Xm0YKFk1x6b5FQjjegVErelwrnJ3NVABXZETxu/FyxYw7+ 1TOI0LHCnYZ7C4fNRp+HR43dNZvrGOd8usEP1ZUR1wZg3guP23dHNqonIh1Cza9/ 4uXsxaGIt6GM7q4s359Nps2r5DzkFczRuTbYuDCqoOLT8h9IsSEinKhMP2p796FX weDUjOZDJpuJQaTIRXok2T3dp0+HvnP+CbnfMmIx1/5fK/xnvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErAWq1GLHcEZCMdKP96/0jk+evPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTll YzUxNS0xYzY0LTRlZDItOTZkNC03MjlmYjVhMDEwN2UvZjM5NjJkMTYtM2I3YS0z M2Q5LWJjMGMtNGZmNGE2ODQ4Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjU5ZWM1MTUtMWM2NC00ZWQyLTk2 ZDQtNzI5ZmI1YTAxMDdlLzI1OWVjNTE1LTFjNjQtNGVkMi05NmQ0LTcyOWZiNWEw MTA3ZS5jcmwwHwYDVR0jBBgwFoAUH5MuyB1RLxgvGWjc1yRS2dRKADowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTllYzUxNS0xYzY0LTRlZDItOTZkNC03Mjlm YjVhMDEwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6BYxRufdsEhMzmObLujcnNNOBqfIt+M1Vx56S/aKfkfZMYIFoL1VY2 da1OMaaOG3C9pWY7DPJgaHD+zS00WONLCiKun+6wnkJ0KUE4trjwxqITGukmVIY6 zTjgY7QrAYZ356qOYWNDXUD4x8urlFiw/tTXHx5tI7hH+UV/CslcGuO68CvQaVrB jY6FfW8QXIhgBWt0JKgP7ynUTA7D1WhHYYb4uSJge0lKOjqWBactQV5PG9k+2MaW Bo3cu8Rvogro+D0TA+nwnQWqDaJhgOPojNdCK/xhlOCnr26Sl97uoBRD8qIBxlLi K7EPj+dRm7z9x4jEK1xkGAymmjFVWLE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:12 2026 by rpki-client