$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa File: 2a3871dd-5224-3aba-89af-880506c8bbf0.roa (raw, json) Hash identifier: YimcrsyES2rLYbShIU9b2QVP/BhDfx9g1OkcVIjZQhE= Subject key identifier: 5B:04:AE:C0:BA:7C:B0:58:4B:79:1D:5A:1B:D7:B7:65:97:8F:62:3D Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584D44FA39C91413AD82BE77FF00 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 6169 IP address blocks: 209.50.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:39:c9:14:13:ad:82:be:77:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1acea5f1-8045-4121-a46f-c328a0ca5de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:b3:0a:89:0c:40:f1:78:10:69:4c:8f:58: 85:84:23:b9:99:04:5d:b6:0d:33:a3:6c:b1:55:59: 27:a5:a2:1b:a9:f4:56:6d:a7:ef:cd:35:35:a0:03: 22:be:40:d0:7d:12:43:f0:b6:5b:c2:9e:86:eb:65: 6a:a0:54:c2:31:c7:a1:8f:fc:b4:31:aa:11:3c:ae: 49:cc:b6:fe:35:3e:5d:4e:89:82:2b:9a:65:1d:99: 84:53:df:c8:de:2c:f6:e0:9d:93:59:7b:a5:1d:ed: 61:1e:81:84:07:e8:9d:ef:f9:1e:29:02:07:64:fc: 5e:65:83:3e:7d:e1:d9:81:53:f4:e9:bd:d7:95:3f: 82:57:09:3e:74:39:ab:52:5f:e2:91:18:89:15:89: 1b:24:c4:72:d0:ae:ba:39:ff:08:a4:3f:a3:8f:74: b7:81:03:9e:f9:14:d1:ba:46:1e:dd:16:40:48:83: cb:14:22:e5:93:c9:9b:43:de:44:44:3f:7c:cb:bb: 83:1b:ab:44:49:84:ff:d8:ae:bf:82:2c:4e:c5:f6: b9:e2:ae:6f:12:a8:c6:1a:ba:6f:b1:3a:7b:7e:94: cc:a2:8b:d9:ee:ca:36:a5:99:6f:01:ac:92:ff:75: 83:42:8b:bf:65:fc:fc:d9:40:82:68:f2:d7:89:bf: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:04:AE:C0:BA:7C:B0:58:4B:79:1D:5A:1B:D7:B7:65:97:8F:62:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:74:1a:83:7c:ab:9b:b5:66:c9:63:ce:ef:6b:9e:72:8a:37: 7a:65:ac:2c:45:17:2f:a3:7e:b6:85:24:a4:70:c2:3d:0b:ce: a4:cc:7f:29:8f:af:7e:ed:19:fd:7a:3a:45:3e:15:73:2b:9d: 68:57:40:93:b5:cc:b9:c2:f8:ef:7d:55:2d:09:d8:c3:6e:79: 4f:51:2e:41:b9:4d:e9:1e:95:e4:62:2e:53:5b:86:02:1c:e7: 65:be:39:92:db:46:49:b7:4b:a9:7b:9d:d7:71:c5:53:90:f9: 35:70:f7:f7:12:4a:61:dc:54:59:1a:fb:dc:d6:cf:03:b6:1e: 01:af:e0:86:b8:03:fd:67:1c:3d:ba:2e:c5:80:8a:cb:1c:d0: e9:48:8d:8f:7b:f8:29:8c:5b:ae:8e:41:ae:de:ec:e8:76:42: b0:9b:29:00:03:62:5f:26:67:c9:e5:af:28:23:93:1d:59:ab: 56:3d:a3:c4:55:f6:cb:a0:6f:ca:15:62:24:72:de:56:1a:e8: b1:32:af:09:4e:c8:bd:01:a2:24:c5:69:ba:76:18:29:57:7b: b5:a1:b8:58:fc:a3:8b:ae:d1:03:59:dc:43:19:2b:e4:d9:14: cb:d8:51:8b:89:14:13:66:c7:fe:7f:09:d4:18:29:ed:37:67: 2b:5c:da:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jnJFBOtgr53/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MWFjZWE1ZjEtODA0NS00MTIxLWE0NmYtYzMyOGEwY2E1ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5ezCokMQPF4EGlMj1iFhCO5mQRdtg0zo2yx VVknpaIbqfRWbafvzTU1oAMivkDQfRJD8LZbwp6G62VqoFTCMcehj/y0MaoRPK5J zLb+NT5dTomCK5plHZmEU9/I3iz24J2TWXulHe1hHoGEB+id7/keKQIHZPxeZYM+ feHZgVP06b3XlT+CVwk+dDmrUl/ikRiJFYkbJMRy0K66Of8IpD+jj3S3gQOe+RTR ukYe3RZASIPLFCLlk8mbQ95ERD98y7uDG6tESYT/2K6/gixOxfa54q5vEqjGGrpv sTp7fpTMoovZ7so2pZlvAayS/3WDQou/Zfz82UCCaPLXib+V5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsErsC6fLBYS3kdWhvXt2WXj2I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMmEzODcxZGQtNTIyNC0z YWJhLTg5YWYtODgwNTA2YzhiYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId0GoN8q5u1Zsljzu9rnnKKN3plrCxFFy+jfraFJKRwwj0LzqTMfymP r37tGf16OkU+FXMrnWhXQJO1zLnC+O99VS0J2MNueU9RLkG5TekeleRiLlNbhgIc 52W+OZLbRkm3S6l7nddxxVOQ+TVw9/cSSmHcVFka+9zWzwO2HgGv4Ia4A/1nHD26 LsWAissc0OlIjY97+CmMW66OQa7e7Oh2QrCbKQADYl8mZ8nlrygjkx1Zq1Y9o8RV 9sugb8oVYiRy3lYa6LEyrwlOyL0BoiTFabp2GClXe7WhuFj8o4uu0QNZ3EMZK+TZ FMvYUYuJFBNmx/5/CdQYKe03Zytc2ro= -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:01 2026 by rpki-client