$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/224256e1-1ba5-3e28-9aac-0f1b7ea98f2a.roa File: 224256e1-1ba5-3e28-9aac-0f1b7ea98f2a.roa (raw, json) Hash identifier: WKBOofmI0ms5zw6ufP75U6o9OLqI1rARdKMy8MOBGO0= Subject key identifier: 99:B4:5E:47:B0:F8:2D:E6:34:43:3A:61:E7:0C:51:82:94:52:D8:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D46869392F9FDD2A2193D0A60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/224256e1-1ba5-3e28-9aac-0f1b7ea98f2a.roa Signing time: Tue 24 Mar 2026 14:19:19 +0000 ROA not before: Tue 24 Mar 2026 14:19:19 +0000 ROA not after: Mon 22 Jun 2026 14:19:19 +0000 asID: 32787 IP address blocks: 209.200.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:86:93:92:f9:fd:d2:a2:19:3d:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 24 14:19:19 2026 GMT Not After : Jun 22 14:19:19 2026 GMT Subject: CN=4e82d00f-edb1-4b10-bf8b-f1769b5c6a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:8f:9a:82:f9:cf:1d:3e:f4:9c:7d:e1:81: 47:8d:1e:27:a2:30:d2:e2:75:59:fd:35:0f:49:28: 8b:81:a2:3d:fe:d4:73:2a:10:1a:7c:a6:22:01:ab: 46:a9:93:77:90:8b:ef:5f:49:06:78:b2:bf:27:cf: 55:f1:44:ee:0e:09:f6:28:31:8e:71:32:15:0e:00: b9:d5:41:cf:ed:c3:2e:3e:5a:ce:91:a3:ee:d5:82: 06:44:78:68:32:63:b9:ed:ad:1e:78:19:d1:b3:2f: 58:55:88:1e:62:0e:70:09:47:5a:66:b7:88:29:fc: d7:d4:9b:0b:cd:90:d2:8e:4a:05:f6:d2:b8:7c:b2: 4d:4a:2b:e5:36:bf:f8:fd:73:d0:b5:33:ca:84:a6: 2d:03:c1:37:3d:fd:bc:df:e3:83:57:c1:04:bd:66: 17:1f:75:b7:35:2f:17:6c:bd:43:14:66:17:dd:dc: c1:40:1b:34:72:b1:b9:c6:26:55:60:41:1a:67:8c: 50:1b:f1:05:11:a0:70:86:9b:f5:4f:a6:60:56:09: f1:3c:b6:2f:9e:bf:ab:76:47:9a:e8:c4:a2:74:fb: 3b:84:3b:24:d5:64:be:02:1e:c3:91:05:a1:24:67: 52:3a:92:5d:c2:af:b8:62:a9:48:2b:9d:13:1b:ec: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B4:5E:47:B0:F8:2D:E6:34:43:3A:61:E7:0C:51:82:94:52:D8:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/224256e1-1ba5-3e28-9aac-0f1b7ea98f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d2:31:33:2f:b4:07:5c:e1:16:76:3b:f6:3f:9b:36:a6:84: 5e:42:8e:f0:af:86:3a:b0:42:8b:a0:51:ab:4c:d2:0c:7b:ff: 82:28:a4:0f:a6:87:9f:46:aa:4c:7b:d4:62:d6:57:c6:d2:3c: 4d:63:2e:fd:3e:b1:d4:ce:c7:aa:9d:1e:9e:c6:e5:6a:84:44: 84:63:88:14:ac:dc:c5:9a:3b:3f:11:cf:68:3a:11:70:51:06: 4b:a5:77:c6:ce:03:47:e4:af:31:17:50:f7:b9:f5:c8:3a:07: 61:80:99:b5:53:89:48:27:7f:e7:9b:2f:47:7b:f2:94:71:56: f6:ad:dd:84:3f:0c:27:be:35:47:54:c3:19:c2:23:6d:d6:ae: d8:e5:95:b6:6f:2a:4d:88:dd:f6:9e:00:f4:89:03:cb:d4:3b: 3f:be:c9:9f:a3:e4:3b:5c:ee:4d:38:da:61:3c:ae:3b:9c:77: d1:9e:a3:7d:b5:c5:aa:12:e2:f5:ed:d4:da:66:e4:38:00:ea: 01:24:4c:47:fd:89:06:14:25:6d:15:de:30:46:d7:9d:45:a6: e9:a2:09:00:80:dd:32:5c:be:4d:4c:79:11:31:58:5a:90:5a: 44:cc:26:fd:b9:5e:31:60:88:67:81:0a:94:32:86:77:f6:fc: f5:b1:d7:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GhpOS+f3Sohk9CmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyNDE0MTkxOVoXDTI2MDYyMjE0MTkxOVowLzEtMCsGA1UEAxMk NGU4MmQwMGYtZWRiMS00YjEwLWJmOGItZjE3NjliNWM2YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpGPmoL5zx0+9Jx94YFHjR4nojDS4nVZ/TUP SSiLgaI9/tRzKhAafKYiAatGqZN3kIvvX0kGeLK/J89V8UTuDgn2KDGOcTIVDgC5 1UHP7cMuPlrOkaPu1YIGRHhoMmO57a0eeBnRsy9YVYgeYg5wCUdaZreIKfzX1JsL zZDSjkoF9tK4fLJNSivlNr/4/XPQtTPKhKYtA8E3Pf283+ODV8EEvWYXH3W3NS8X bL1DFGYX3dzBQBs0crG5xiZVYEEaZ4xQG/EFEaBwhpv1T6ZgVgnxPLYvnr+rdkea 6MSidPs7hDsk1WS+Ah7DkQWhJGdSOpJdwq+4YqlIK50TG+yx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm0Xkew+C3mNEM6YecMUYKUUthqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI0MjU2ZTEtMWJhNS0z ZTI4LTlhYWMtMGYxYjdlYTk4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cibMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHSMTMvtAdc4RZ2O/Y/mzamhF5CjvCvhjqwQougUatM0gx7/4IopA+m h59Gqkx71GLWV8bSPE1jLv0+sdTOx6qdHp7G5WqERIRjiBSs3MWaOz8Rz2g6EXBR Bkuld8bOA0fkrzEXUPe59cg6B2GAmbVTiUgnf+ebL0d78pRxVvat3YQ/DCe+NUdU wxnCI23WrtjllbZvKk2I3faeAPSJA8vUOz++yZ+j5Dtc7k042mE8rjucd9Geo321 xaoS4vXt1Npm5DgA6gEkTEf9iQYUJW0V3jBG151FpumiCQCA3TJcvk1MeRExWFqQ WkTMJv25XjFgiGeBCpQyhnf2/PWx13M= -----END CERTIFICATE-----Generated at Thu Mar 26 10:42:18 2026 by rpki-client