$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa File: 47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (raw, json) Hash identifier: 7feFXZNY5tg/i9edI/qOs8IhJDNZZLA5q0Z1j9f0jq4= Subject key identifier: B0:00:51:9C:B4:66:8C:55:FD:29:AE:BC:4B:7A:AF:76:93:0C:B4:41 Certificate issuer: /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Certificate serial: 010D0C9F4328584D19B4F12CA85B9E369B705E80 Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11507 IP address blocks: 192.139.34.0/24 maxlen: 24 204.209.40.0/23 maxlen: 23 204.209.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:f1:2c:a8:5b:9e:36:9b:70:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=b6fd26e0-1e07-4155-a1eb-5b27d3647716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:9b:87:86:84:22:be:4e:f9:3f:4b:62:25: c7:f1:ed:68:4e:7a:bb:3d:b6:26:1b:e8:6c:20:13: 1f:7b:e9:5b:9e:c4:f2:5d:b5:63:0c:3f:68:ac:f1: 35:c5:d0:80:1a:a2:4a:2e:9e:5f:bc:41:a0:eb:5b: a7:48:7e:b8:7a:1b:66:f3:df:f7:b4:30:47:c5:7b: 83:9b:f7:45:a0:e6:d1:84:21:a4:e6:7a:53:3b:46: 5b:f0:f5:fc:ce:5d:9c:6c:67:73:d9:88:6a:2c:7a: aa:2d:7b:53:95:1b:d7:cb:26:f5:b4:6b:cd:52:eb: db:6b:d8:58:bd:77:fc:14:ea:63:9f:23:10:5a:6d: f7:f2:90:a7:2c:90:64:95:6a:e7:f9:10:54:c3:79: a7:9e:aa:df:9b:51:0b:07:4c:75:07:99:9f:48:ff: 3f:4f:e5:90:20:56:11:62:a9:4d:06:da:f7:f6:af: 81:38:3e:11:98:4d:ad:4a:37:d4:87:10:75:89:2e: 96:a7:f9:ea:bf:c3:e1:ac:c9:9a:fd:83:31:98:56: a2:cd:44:3c:2b:ce:fc:69:cc:9f:aa:dc:97:53:42: 72:9d:44:26:b0:ff:6e:94:ce:6f:98:90:3d:6f:06: 1b:fd:ba:27:bf:02:db:e1:51:96:9c:3b:f7:59:89: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:51:9C:B4:66:8C:55:FD:29:AE:BC:4B:7A:AF:76:93:0C:B4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl X509v3 Authority Key Identifier: keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer sbgp-ipAddrBlock: critical IPv4: 192.139.34.0/24 204.209.40.0-204.209.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c2:f7:3c:2b:a0:77:60:c6:bd:7b:31:8b:cb:57:9d:e2:d7: 75:c1:cc:22:b1:f4:f3:4b:6a:c8:fd:78:2f:49:13:9b:3b:27: df:f9:37:da:51:d2:05:1f:b0:48:ee:85:23:c9:ee:ce:3c:f5: 64:9b:12:a3:b2:55:e4:69:05:2b:88:6a:a1:ac:d7:71:c9:d0: 26:d8:ae:3a:e7:c9:4e:cf:72:67:07:06:d6:53:31:bd:18:65: ac:08:3f:bc:32:30:16:eb:72:83:06:c6:f0:9e:c2:89:9d:4d: e8:78:c7:6c:83:6d:84:6a:93:3b:cb:5c:70:71:13:e5:82:75: bd:e2:cb:a2:1e:a3:47:c7:54:59:c6:83:c4:a6:82:d4:02:3b: 9a:19:34:c0:7e:ad:f1:e7:ef:65:41:5c:b1:61:8a:a6:87:3e: 34:05:54:02:62:0b:af:3b:02:6e:25:be:5f:f2:75:2b:80:62: 97:24:e9:28:f9:af:00:df:1c:c4:ba:28:24:da:10:c3:d9:c8: d2:03:28:e1:2a:ff:8a:83:57:bb:44:50:18:77:a9:58:39:f2: d7:06:be:b1:a3:b6:c9:39:9f:dc:6a:9a:9d:72:25:bc:21:5a: 22:57:08:a8:a1:f7:a7:f8:35:ce:91:f8:f4:27:f3:28:4c:68: bf:2e:7f:14 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE0ZtPEsqFueNptwXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzOWJmYTctZWQ1MS00ZDE3LTljZTUtNTM2YTRiOTBh NjJmMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YjZmZDI2ZTAtMWUwNy00MTU1LWExZWItNWIyN2QzNjQ3NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI6bh4aEIr5O+T9LYiXH8e1oTnq7PbYmG+hs IBMfe+lbnsTyXbVjDD9orPE1xdCAGqJKLp5fvEGg61unSH64ehtm89/3tDBHxXuD m/dFoObRhCGk5npTO0Zb8PX8zl2cbGdz2YhqLHqqLXtTlRvXyyb1tGvNUuvba9hY vXf8FOpjnyMQWm338pCnLJBklWrn+RBUw3mnnqrfm1ELB0x1B5mfSP8/T+WQIFYR YqlNBtr39q+BOD4RmE2tSjfUhxB1iS6Wp/nqv8PhrMma/YMxmFaizUQ8K878acyf qtyXU0JynUQmsP9ulM5vmJA9bwYb/bonvwLb4VGWnDv3WYl9GwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFLAAUZy0ZoxV/SmuvEt6r3aTDLRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5 YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5MGE2MmYvNDc3NTQ0MDMtNzE5Yy0z MmJiLWEzYTgtOGVkMmFjNjhhOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2UzOWJmYTctZWQ1MS00ZDE3LTlj ZTUtNTM2YTRiOTBhNjJmLzNlMzliZmE3LWVkNTEtNGQxNy05Y2U1LTUzNmE0Yjkw YTYyZi5jcmwwHwYDVR0jBBgwFoAUcWui+aDPLJNZzNxUg3FABNoMzCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZh NGI5MGE2MmYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwIsiMAwD BAPM0SgDBADM0SowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEATsL3PCugd2DGvXsxi8tXneLXdcHMIrH080tq yP14L0kTmzsn3/k32lHSBR+wSO6FI8nuzjz1ZJsSo7JV5GkFK4hqoazXccnQJtiu OufJTs9yZwcG1lMxvRhlrAg/vDIwFutygwbG8J7CiZ1N6HjHbINthGqTO8tccHET 5YJ1veLLoh6jR8dUWcaDxKaC1AI7mhk0wH6t8efvZUFcsWGKpoc+NAVUAmILrzsC biW+X/J1K4BilyTpKPmvAN8cxLooJNoQw9nI0gMo4Sr/ioNXu0RQGHepWDny1wa+ saO2yTmf3GqanXIlvCFaIlcIqKH3p/g1zpH49CfzKExovy5/FA== -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:18 2026 by rpki-client