$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa File: cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa (raw, json) Hash identifier: HvU0NYX0K54YbDqWrTCsBdqv7+NHgrpJN7tbxmPAQbM= Subject key identifier: 3B:1B:A5:34:B3:3F:22:9E:2F:F6:4F:AE:55:5B:15:27:68:C0:EF:E4 Certificate issuer: /CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Certificate serial: 010D0C9F4328584D1B1A61B8EB512EF49908C980 Authority key identifier: DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 396972 IP address blocks: 208.73.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:61:b8:eb:51:2e:f4:99:08:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=22c50950-26e7-4c24-8b70-b173de6788e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:d4:fe:cb:af:a5:ae:82:5e:76:78:e0:3a: a6:14:1f:a6:f0:7b:58:3b:00:31:8b:43:74:c6:d4: 31:d1:38:b6:96:a1:96:81:8a:a2:61:e8:fb:2b:5b: 8f:4b:f1:4e:7b:6a:b9:ab:b9:93:c3:e6:f2:60:c5: 12:f2:bc:04:f3:e7:02:c2:90:2f:01:5c:10:27:75: a2:29:74:16:de:ee:78:6f:f7:cf:81:7b:04:bc:6b: fa:d1:5b:59:b2:4e:65:50:bb:5f:38:58:da:ea:ff: 0d:89:a7:96:6e:bc:fa:53:13:cc:d8:ee:6c:ba:50: cd:e0:d8:4d:03:98:0b:d5:71:4c:df:13:a5:a2:75: d6:7b:29:a0:de:7b:f4:5f:d7:36:a9:23:41:d2:81: dd:06:dd:5e:b1:77:88:39:39:88:b2:d6:a3:39:e5: c6:4f:0e:46:aa:47:8b:c3:8f:ff:94:26:17:5c:20: ad:98:c4:b7:9e:ca:ef:f7:7f:e9:83:4f:87:65:02: 71:98:8c:eb:8a:01:ac:8e:fc:04:70:03:51:b8:66: 68:14:96:6b:fc:8b:a8:95:97:b1:06:a1:26:d9:ba: 79:d1:e0:18:d5:b8:3a:5b:6e:be:87:9b:38:24:43: 6c:56:1e:b3:01:d2:f7:34:a9:06:c1:c7:24:90:6f: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:A5:34:B3:3F:22:9E:2F:F6:4F:AE:55:5B:15:27:68:C0:EF:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl X509v3 Authority Key Identifier: keyid:DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer sbgp-ipAddrBlock: critical IPv4: 208.73.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:12:3b:53:17:63:23:70:55:c3:e2:48:0c:7c:bf:c7:24:3b: 9b:05:c1:73:6c:60:fb:aa:09:b6:f7:7f:53:d9:cd:c2:ad:f1: 89:18:7d:54:80:ee:63:2b:80:97:d7:47:d0:2f:05:86:55:54: f2:00:68:b0:4e:b8:90:32:b2:4d:df:3f:77:1a:69:aa:05:b3: 22:03:ce:d1:cd:c0:b7:3a:b0:53:6d:3f:2f:92:5b:0c:dc:a8: 9e:dd:e4:d6:16:d5:c1:c1:8e:d1:25:db:e1:3f:f0:31:1e:b5: e3:37:8d:9d:38:38:09:92:00:02:ed:6b:1e:2b:77:eb:20:51: de:31:5b:00:e0:d3:ee:5c:44:a6:a2:0d:45:24:cc:da:21:29: b0:31:68:1a:4e:89:fa:ee:35:73:b5:06:61:9a:8e:1a:44:c8: b2:b2:98:fc:39:7e:a9:70:b7:ec:fa:1f:4b:b4:c9:ce:f2:ca: 10:c0:57:f7:98:de:98:1e:5c:be:4f:d5:b3:cd:68:3b:ae:74: 5c:af:ee:bf:ed:06:22:43:6e:5d:08:59:42:a8:9e:ac:9e:69: d0:eb:a2:79:1d:a0:47:31:ca:96:c5:38:33:bb:3b:fd:2d:0e: 81:53:75:1a:2f:4e:1a:6f:10:dd:66:64:d5:25:d7:ab:44:64: 54:62:4e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmG461Eu9JkIyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljOGI2MTYtMWE5NS00YjFhLTg0OGYtZjc1NWZlZDVl MjNkMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjJjNTA5NTAtMjZlNy00YzI0LThiNzAtYjE3M2RlNjc4OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUzU/suvpa6CXnZ44DqmFB+m8HtYOwAxi0N0 xtQx0Ti2lqGWgYqiYej7K1uPS/FOe2q5q7mTw+byYMUS8rwE8+cCwpAvAVwQJ3Wi KXQW3u54b/fPgXsEvGv60VtZsk5lULtfOFja6v8NiaeWbrz6UxPM2O5sulDN4NhN A5gL1XFM3xOlonXWeymg3nv0X9c2qSNB0oHdBt1esXeIOTmIstajOeXGTw5GqkeL w4//lCYXXCCtmMS3nsrv93/pg0+HZQJxmIzrigGsjvwEcANRuGZoFJZr/IuolZex BqEm2bp50eAY1bg6W26+h5s4JENsVh6zAdL3NKkGwcckkG8aRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsbpTSzPyKeL/ZPrlVbFSdowO/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4 YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1ZmVkNWUyM2QvY2IwM2FiOTgtYTUyNy0z OTNhLThkYmEtYzU0ZjBiYmJkY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDljOGI2MTYtMWE5NS00YjFhLTg0 OGYtZjc1NWZlZDVlMjNkLzA5YzhiNjE2LTFhOTUtNGIxYS04NDhmLWY3NTVmZWQ1 ZTIzZC5jcmwwHwYDVR0jBBgwFoAU2pJIOTTSp/2qjQei997CgwpEsyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1 ZmVkNWUyM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0Em4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkSO1MXYyNwVcPiSAx8v8ckO5sFwXNsYPuqCbb3f1PZzcKt8YkYfVSA 7mMrgJfXR9AvBYZVVPIAaLBOuJAysk3fP3caaaoFsyIDztHNwLc6sFNtPy+SWwzc qJ7d5NYW1cHBjtEl2+E/8DEeteM3jZ04OAmSAALtax4rd+sgUd4xWwDg0+5cRKai DUUkzNohKbAxaBpOifruNXO1BmGajhpEyLKymPw5fqlwt+z6H0u0yc7yyhDAV/eY 3pgeXL5P1bPNaDuudFyv7r/tBiJDbl0IWUKonqyeadDronkdoEcxypbFODO7O/0t DoFTdRovThpvEN1mZNUl16tEZFRiTiA= -----END CERTIFICATE-----Generated at Fri Mar 27 02:08:20 2026 by rpki-client