$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa File: 698d328a-2f41-3d33-9f83-c58dfe76a12e.roa (raw, json) Hash identifier: l33lCxb9yQHG2O5S1Bmj1ahLNYHPE36F1/OvzPlNLY8= Subject key identifier: D7:97:2B:69:EA:1C:CD:0C:7D:9F:C4:A8:A9:EB:F5:C4:94:CE:90:79 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CC4D280D5D162608CC40 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 209.152.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cc:4d:28:0d:5d:16:26:08:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=9c489e2f-36d9-4a94-824f-6e68522e2cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:31:3f:a3:be:c0:a1:d6:82:3e:64:48:77: 6c:66:4b:a5:31:b1:2c:df:6d:7b:f8:7b:10:1b:58: 99:44:f3:3e:58:7e:77:09:d2:23:27:ac:b1:c1:a9: e2:94:35:94:b6:8d:17:62:5e:3b:bd:84:dc:fa:47: 14:08:58:38:05:ec:26:ed:d0:72:52:6c:a4:7a:35: ae:76:1c:0d:5b:dd:3f:ee:9f:bd:70:94:dd:56:e6: b0:8d:6f:d2:74:99:0e:16:1c:82:4d:18:ff:7c:1e: 17:d8:8c:b6:2e:3c:bb:87:f3:cf:1f:d1:dd:c5:fd: ac:4c:c3:d8:d0:a2:28:a5:4f:45:7f:ca:84:84:67: 16:d2:3a:d6:27:4a:b3:0b:a6:6a:96:b0:ae:07:a4: 48:c9:54:32:d6:6d:89:aa:2b:5f:b3:f0:1e:2c:0a: ca:ca:db:84:57:cb:95:f1:fe:8d:80:96:3a:3f:3f: a6:1f:bf:5a:e9:37:f1:5b:0c:a3:20:30:52:ef:b5: ae:36:f1:f7:3e:5a:d5:05:47:10:2a:d3:aa:96:90: 9c:09:1e:aa:c0:20:78:fa:b5:5a:88:93:10:68:ca: 47:0e:69:a7:cc:93:67:a0:45:14:68:50:c3:ab:05: b4:cc:0a:24:50:34:66:9d:d2:87:78:3f:30:bf:ce: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:97:2B:69:EA:1C:CD:0C:7D:9F:C4:A8:A9:EB:F5:C4:94:CE:90:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1e:da:2b:ba:4d:2f:ee:16:09:d6:ef:10:41:cb:e9:1c:b4: 4b:f3:cb:1d:df:53:ae:bd:f7:a7:0f:5c:ab:36:27:f4:58:f7: 3a:10:1f:79:16:54:76:15:1e:5e:42:1b:07:cf:39:75:74:8b: 33:e7:aa:0a:3a:c6:8f:02:18:7c:91:47:a7:74:26:5d:d6:93: 22:4e:a3:0f:90:ee:63:63:5f:77:d2:26:00:55:13:38:30:f6: 5a:40:4a:95:4e:43:4f:df:ce:b9:8f:6e:f9:4a:b9:a5:e3:17: 7c:5f:05:85:c5:6d:fc:bd:84:06:a3:a1:40:1a:4c:83:fc:cb: 49:44:e4:3f:1f:af:e7:eb:ee:64:fb:cb:5c:05:05:d4:c0:6b: 52:d8:cf:4c:a9:09:59:7e:0b:bb:55:db:70:30:e7:cd:0a:10: b3:50:9b:af:24:2d:6d:96:e0:24:7b:3b:e7:04:6d:84:61:37: 54:ea:e9:bf:7a:c4:7e:cc:a7:d2:08:73:2f:14:1e:1c:66:84: aa:23:39:a7:59:93:e1:40:a6:32:ba:9a:fb:99:4c:ad:68:2c: cb:e2:7f:9d:5e:01:27:51:f9:cd:1f:46:9c:ed:67:a4:1d:b2: 00:8d:9b:0f:c4:72:1d:3a:c6:4d:97:0e:f4:38:1f:7b:d6:79: f3:57:96:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMxNKA1dFiYIzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OWM0ODllMmYtMzZkOS00YTk0LTgyNGYtNmU2ODUyMmUyY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQoxP6O+wKHWgj5kSHdsZkulMbEs3217+HsQ G1iZRPM+WH53CdIjJ6yxwanilDWUto0XYl47vYTc+kcUCFg4Bewm7dByUmykejWu dhwNW90/7p+9cJTdVuawjW/SdJkOFhyCTRj/fB4X2Iy2Ljy7h/PPH9Hdxf2sTMPY 0KIopU9Ff8qEhGcW0jrWJ0qzC6ZqlrCuB6RIyVQy1m2Jqitfs/AeLArKytuEV8uV 8f6NgJY6Pz+mH79a6TfxWwyjIDBS77WuNvH3PlrVBUcQKtOqlpCcCR6qwCB4+rVa iJMQaMpHDmmnzJNnoEUUaFDDqwW0zAokUDRmndKHeD8wv87pKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeXK2nqHM0MfZ/EqKnr9cSUzpB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvNjk4ZDMyOGEtMmY0MS0z ZDMzLTlmODMtYzU4ZGZlNzZhMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEe2iu6TS/uFgnW7xBBy+kctEvzyx3fU66996cPXKs2J/RY9zoQH3kW VHYVHl5CGwfPOXV0izPnqgo6xo8CGHyRR6d0Jl3WkyJOow+Q7mNjX3fSJgBVEzgw 9lpASpVOQ0/fzrmPbvlKuaXjF3xfBYXFbfy9hAajoUAaTIP8y0lE5D8fr+fr7mT7 y1wFBdTAa1LYz0ypCVl+C7tV23Aw580KELNQm68kLW2W4CR7O+cEbYRhN1Tq6b96 xH7Mp9IIcy8UHhxmhKojOadZk+FApjK6mvuZTK1oLMvif51eASdR+c0fRpztZ6Qd sgCNmw/Ech06xk2XDvQ4H3vWefNXlk0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:36 2026 by rpki-client