$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa File: 43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa (raw, json) Hash identifier: pYXJmCsWkx92vY1f1LhhAmYIPNp62gOOjTkUFiV1mTQ= Subject key identifier: 98:02:35:B8:7C:F1:10:3E:61:90:0E:04:67:AA:A9:70:46:18:EB:1C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D0A77BC1E67A717B8F40FF560 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 17119 IP address blocks: 209.4.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bc:1e:67:a7:17:b8:f4:0f:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=a9929c05-88bb-43c6-9027-adfa231f59d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:0e:70:da:ad:eb:65:34:88:87:3b:17:6d: c8:c7:78:b9:82:44:a2:22:ff:be:9a:f4:f2:e9:0f: a5:31:03:15:63:3f:ae:bf:e1:28:01:30:c8:d3:86: 98:31:6f:5f:38:1e:4a:20:40:70:56:e8:c4:86:c5: e2:32:49:4b:fc:b5:30:e7:43:0d:8d:78:03:f9:c8: 0a:a0:70:08:e6:15:67:d0:c8:21:bd:cd:5f:2d:a6: 08:5b:40:3f:8c:26:b2:62:28:93:fc:b4:5b:a3:e8: 4c:b4:30:91:3e:1d:3e:cc:96:ff:48:a9:93:b6:b1: 57:7c:23:6c:54:49:dc:af:bc:f2:5c:61:61:39:99: 11:54:ab:13:8c:66:a0:25:6b:ad:fe:fa:bc:49:f4: b1:f2:26:42:98:6d:df:27:1c:1a:5c:81:ea:8f:9d: 85:b6:14:79:64:a5:d3:99:8d:1a:1c:46:e3:b9:98: 31:c7:c0:e5:d1:64:8c:69:b6:51:38:0d:c6:20:f9: 1c:ce:89:40:a0:9f:7c:4a:a2:c8:df:70:a9:1a:ab: 57:c6:ca:ec:e9:ba:39:84:04:92:ba:d0:aa:97:a3: 07:cd:fc:94:19:a4:3c:42:d7:fa:c6:0d:36:6a:07: 20:d1:7d:1d:b3:03:90:33:58:49:eb:78:19:e4:39: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:02:35:B8:7C:F1:10:3E:61:90:0E:04:67:AA:A9:70:46:18:EB:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.4.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bb:ff:03:2b:2c:9a:b9:27:b7:6a:5d:e2:43:fa:54:e5:6c: 03:fe:c7:64:67:27:5f:ec:27:19:71:06:b2:c8:ff:68:f1:9e: e5:0e:30:df:42:26:1f:6c:5d:58:12:a0:ac:ec:19:00:df:c8: c7:1e:f8:21:5f:d6:bb:7c:08:b4:5c:a7:6e:8a:76:56:c5:d3: 8e:31:56:be:4d:67:f9:ad:36:cf:66:64:8f:63:4c:7a:50:db: 44:4f:73:dd:a8:4c:6c:06:fa:e3:b3:c3:5b:ef:0d:b9:79:6a: bf:5e:c4:c3:61:68:9a:eb:24:94:a8:90:7e:79:37:c7:76:d7: 17:b9:f4:69:38:82:89:60:6c:bf:57:dd:5d:1d:50:63:cd:57: 51:e5:42:5b:94:bf:7e:3d:32:12:39:40:8d:de:e0:b5:1f:96: d8:7e:fd:37:da:8f:71:73:fa:cb:ca:95:b7:96:8f:85:64:ce: 9a:65:89:6a:e4:ef:04:5b:c9:cb:e3:71:44:83:6f:89:99:a1: e9:a9:69:11:5c:51:f4:4e:d2:67:17:10:f0:06:2c:be:6d:f2: cc:aa:8f:83:f4:05:bc:c9:e4:0b:a6:42:63:21:f2:09:ec:33: ff:25:b0:7d:78:db:f6:d6:e0:cc:f9:c6:d6:ae:e7:25:9e:90: 37:ce:29:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd7weZ6cXuPQP9WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YTk5MjljMDUtODhiYi00M2M2LTkwMjctYWRmYTIzMWY1OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrYOcNqt62U0iIc7F23Ix3i5gkSiIv++mvTy 6Q+lMQMVYz+uv+EoATDI04aYMW9fOB5KIEBwVujEhsXiMklL/LUw50MNjXgD+cgK oHAI5hVn0Mghvc1fLaYIW0A/jCayYiiT/LRbo+hMtDCRPh0+zJb/SKmTtrFXfCNs VEncr7zyXGFhOZkRVKsTjGagJWut/vq8SfSx8iZCmG3fJxwaXIHqj52FthR5ZKXT mY0aHEbjuZgxx8Dl0WSMabZROA3GIPkczolAoJ98SqLI33CpGqtXxsrs6bo5hASS utCql6MHzfyUGaQ8Qtf6xg02agcg0X0dswOQM1hJ63gZ5DnpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgCNbh88RA+YZAOBGeqqXBGGOscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDNiZWJhOGEtZTQ1My0z Y2IwLWE3N2QtYWFiZDZjMWFkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QS7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq7/wMrLJq5J7dqXeJD+lTlbAP+x2RnJ1/sJxlxBrLI/2jxnuUOMN9C Jh9sXVgSoKzsGQDfyMce+CFf1rt8CLRcp26KdlbF044xVr5NZ/mtNs9mZI9jTHpQ 20RPc92oTGwG+uOzw1vvDbl5ar9exMNhaJrrJJSokH55N8d21xe59Gk4golgbL9X 3V0dUGPNV1HlQluUv349MhI5QI3e4LUflth+/Tfaj3Fz+svKlbeWj4VkzppliWrk 7wRbycvjcUSDb4mZoempaRFcUfRO0mcXEPAGLL5t8syqj4P0BbzJ5AumQmMh8gns M/8lsH142/bW4Mz5xtau5yWekDfOKag= -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:39 2026 by rpki-client