$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa File: c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa (raw, json) Hash identifier: w5dcpcJS7qO06wb/3FWHPwRrK6VFNitm1wMVY/NpIcY= Subject key identifier: B6:87:B1:20:45:90:50:CC:C8:77:B2:AD:7B:32:33:70:8C:F3:BE:3E Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584D44FA3EB093064936D5704380 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 209.169.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3e:b0:93:06:49:36:d5:70:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=84df3a59-db19-4b0d-8c7f-bb2caba6ab8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:f9:29:7f:a8:c5:4e:2e:7e:98:20:75:95: fa:20:08:8a:eb:cd:39:17:03:bd:36:a8:de:be:bc: e4:b9:11:43:ad:34:17:46:b3:f8:e0:17:0e:14:c5: 9a:87:e7:91:d1:4c:11:bb:c4:e7:92:b9:2e:78:b5: c0:38:cf:77:20:f6:0d:36:c2:23:6c:8b:ee:3b:bf: c0:a9:89:40:9c:12:a1:23:63:af:4b:75:7d:02:38: ff:47:b7:61:b7:a6:08:5e:a8:89:71:22:9f:e6:d6: 38:09:bc:1a:76:47:6c:23:72:a9:8d:cb:af:e6:f6: d0:96:ac:bb:8b:25:9d:10:92:5c:0a:5c:c0:6b:fb: a4:60:d9:cc:46:e1:fe:30:d3:9a:67:ab:1e:a5:0e: b1:8f:03:47:7f:01:6b:60:5d:8d:c8:c2:01:e2:75: da:8b:0e:b2:a7:55:5d:72:dc:40:07:64:ea:63:49: 53:68:3a:7a:5b:58:b5:ac:33:77:8b:ce:56:63:2c: 62:d4:40:9f:6e:2f:61:86:89:29:51:1f:d6:e4:a3: a0:a1:7c:90:5c:46:75:11:8d:3f:f0:09:19:9b:94: 0a:80:c8:2c:65:71:f2:63:bb:76:73:6e:88:56:61: 38:86:8c:77:2c:02:ca:27:6e:86:bb:1a:1c:24:96: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:B1:20:45:90:50:CC:C8:77:B2:AD:7B:32:33:70:8C:F3:BE:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c94ec2ca-4cb3-3471-a1c9-2c5efae5da7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d4:99:37:d7:e0:4e:04:7a:d8:17:1d:8f:b2:df:ad:64:51: 94:54:2c:7c:03:07:2e:fe:6f:c7:37:50:af:fd:46:c7:57:92: e5:50:3c:ce:83:c2:c7:e1:99:82:40:35:f0:c0:bf:19:1e:13: 94:86:51:a7:18:39:f8:fc:2c:8c:b5:4f:a4:2e:55:96:5a:c3: c6:f5:01:20:91:e2:6c:4f:0c:c2:8a:4c:cc:e8:4a:7f:36:f3: 9d:dd:d8:ee:d3:c3:36:6c:07:58:d9:0e:e7:87:2e:c5:7d:73: e1:33:02:7f:59:2d:67:5a:8c:e4:84:a4:c6:5c:a5:96:90:7d: 19:d3:4d:13:10:5d:ab:12:74:fc:d9:54:7d:f0:7b:ce:cb:96: 60:22:7d:25:63:73:d0:2d:1b:f8:a1:24:dc:3c:9a:64:dd:c1: 61:d6:af:77:9a:b9:96:89:8f:97:63:91:c3:46:bc:d0:a0:77: 45:a4:02:d0:af:c1:d9:87:32:99:98:82:4a:4f:a7:9b:94:19: 0d:cc:a7:2e:3a:41:a7:2b:85:08:f6:50:3e:0e:17:a8:05:7b: 0b:f4:42:15:ef:1d:46:5e:ce:b4:62:71:89:db:a1:4f:2c:85: 2c:06:c1:f7:31:4a:3a:58:c2:2b:90:a7:1a:9c:f4:9e:7b:41: 70:81:d5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j6wkwZJNtVwQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODRkZjNhNTktZGIxOS00YjBkLThjN2YtYmIyY2FiYTZhYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij/5KX+oxU4ufpggdZX6IAiK6805FwO9Nqje vrzkuRFDrTQXRrP44BcOFMWah+eR0UwRu8TnkrkueLXAOM93IPYNNsIjbIvuO7/A qYlAnBKhI2OvS3V9Ajj/R7dht6YIXqiJcSKf5tY4CbwadkdsI3Kpjcuv5vbQlqy7 iyWdEJJcClzAa/ukYNnMRuH+MNOaZ6sepQ6xjwNHfwFrYF2NyMIB4nXaiw6yp1Vd ctxAB2TqY0lTaDp6W1i1rDN3i85WYyxi1ECfbi9hhokpUR/W5KOgoXyQXEZ1EY0/ 8AkZm5QKgMgsZXHyY7t2c26IVmE4hox3LALKJ26GuxocJJaSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaHsSBFkFDMyHeyrXsyM3CM874+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzk0ZWMyY2EtNGNiMy0z NDcxLWExYzktMmM1ZWZhZTVkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjUmTfX4E4EetgXHY+y361kUZRULHwDBy7+b8c3UK/9RsdXkuVQPM6D wsfhmYJANfDAvxkeE5SGUacYOfj8LIy1T6QuVZZaw8b1ASCR4mxPDMKKTMzoSn82 853d2O7TwzZsB1jZDueHLsV9c+EzAn9ZLWdajOSEpMZcpZaQfRnTTRMQXasSdPzZ VH3we87LlmAifSVjc9AtG/ihJNw8mmTdwWHWr3eauZaJj5djkcNGvNCgd0WkAtCv wdmHMpmYgkpPp5uUGQ3Mpy46QacrhQj2UD4OF6gFewv0QhXvHUZezrRicYnboU8s hSwGwfcxSjpYwiuQpxqc9J57QXCB1eI= -----END CERTIFICATE-----Generated at Thu Mar 26 03:38:52 2026 by rpki-client