$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ab69eefc-d487-3a61-8252-5562c84033db.roa File: ab69eefc-d487-3a61-8252-5562c84033db.roa (raw, json) Hash identifier: 7jSfpHHYqrPHB9f24+4oFAEFkDkCrCUA0iM8tHBISrY= Subject key identifier: 38:A4:D6:75:85:40:81:D6:5E:D5:9C:0E:96:B8:FD:BF:34:67:B7:07 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CCF30DAF5B0C3D8E4D00 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ab69eefc-d487-3a61-8252-5562c84033db.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 209.152.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cc:f3:0d:af:5b:0c:3d:8e:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=17ee1f52-98e0-4429-964a-daccf5d117e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:f9:42:56:e2:a3:f9:45:58:3a:5d:49:d9: b4:25:58:fe:40:29:77:7a:9c:9f:dc:1a:2e:82:c9: 40:38:63:df:ad:03:ae:fa:94:d6:11:f5:20:52:bb: a8:c6:47:48:05:38:12:50:d4:58:e1:b3:c1:5c:f8: 62:9a:a3:d3:18:d6:5a:97:cf:5d:c9:48:c3:a7:37: 2f:ab:12:45:81:60:54:ff:73:59:b0:6b:12:53:61: a5:0e:72:11:13:d2:8c:53:65:37:76:32:95:29:c3: 11:a5:af:c1:01:93:24:89:ec:3f:03:d6:97:c1:ee: 27:dc:0d:2b:4f:64:9b:9b:c9:db:2b:1d:4d:73:9b: 1c:1e:9e:7d:f4:c8:8b:1c:0a:9b:4b:40:f6:f7:fb: f9:8d:74:6d:b4:1e:5c:20:c6:4d:3c:aa:7e:be:c8: eb:6e:03:f3:49:55:10:9a:ac:b2:61:cd:bc:c4:f5: b9:39:05:31:b5:15:9e:83:db:82:45:b2:5f:f2:dd: 08:9f:a8:87:2f:c3:3b:d8:fb:5e:db:5b:17:27:ed: 60:51:7d:ef:59:7a:58:93:bc:ad:56:c9:bc:9a:34: 1b:5d:01:c8:31:0d:22:cd:fe:f4:bb:f3:c0:11:71: 54:8f:0d:e3:b2:4d:4a:3f:21:e8:56:16:1e:ef:a8: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:D6:75:85:40:81:D6:5E:D5:9C:0E:96:B8:FD:BF:34:67:B7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ab69eefc-d487-3a61-8252-5562c84033db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ed:6b:1f:36:ea:43:f3:bb:96:2b:2c:6e:1f:35:89:62:6d: af:41:d1:13:4a:33:42:13:e9:95:62:2e:68:33:e6:e0:86:12: de:8f:c0:ff:ff:78:d6:ae:51:6c:38:fd:2d:0e:60:bb:ef:a5: 32:11:cc:bd:a9:88:91:d8:16:53:61:71:b8:b5:9a:c0:ad:23: 00:3f:59:cd:2a:d5:98:3e:e5:75:51:27:d6:de:4e:14:6b:b9: 4f:b9:fb:ae:49:0e:f5:c6:0b:9a:7a:29:e6:ad:f8:df:2c:3c: 1b:b1:3d:52:f9:db:e7:c9:84:9e:45:d5:c6:7c:6a:f9:73:90: 2f:9c:f7:67:e7:44:f4:ff:38:7e:1c:f6:f2:f5:ed:43:d7:e0: 9f:8b:9b:89:0c:ea:58:8d:cc:7c:7d:b6:f4:36:63:86:f9:d0: 5b:d5:79:c2:ee:5a:b4:c7:39:5a:0f:b6:a1:e2:75:b1:1d:66: b6:b0:d7:e3:5d:b7:ba:ea:38:fd:d6:62:76:d1:9d:d9:2f:08: 2d:c9:31:e2:89:70:d3:44:cc:f3:25:00:91:5e:06:e4:74:26: c1:c1:bf:86:fc:76:90:4d:68:fc:45:93:34:29:d0:55:0c:61: 61:48:1d:44:84:bf:b2:95:c1:d0:ee:47:09:11:04:25:02:37: 52:73:94:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMzzDa9bDD2OTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MTdlZTFmNTItOThlMC00NDI5LTk2NGEtZGFjY2Y1ZDExN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxL5Qlbio/lFWDpdSdm0JVj+QCl3epyf3Bou gslAOGPfrQOu+pTWEfUgUruoxkdIBTgSUNRY4bPBXPhimqPTGNZal89dyUjDpzcv qxJFgWBU/3NZsGsSU2GlDnIRE9KMU2U3djKVKcMRpa/BAZMkiew/A9aXwe4n3A0r T2Sbm8nbKx1Nc5scHp599MiLHAqbS0D29/v5jXRttB5cIMZNPKp+vsjrbgPzSVUQ mqyyYc28xPW5OQUxtRWeg9uCRbJf8t0In6iHL8M72Pte21sXJ+1gUX3vWXpYk7yt Vsm8mjQbXQHIMQ0izf70u/PAEXFUjw3jsk1KPyHoVhYe76iyHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDik1nWFQIHWXtWcDpa4/b80Z7cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYWI2OWVlZmMtZDQ4Ny0z YTYxLTgyNTItNTU2MmM4NDAzM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZiDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHtax826kPzu5YrLG4fNYliba9B0RNKM0IT6ZViLmgz5uCGEt6PwP// eNauUWw4/S0OYLvvpTIRzL2piJHYFlNhcbi1msCtIwA/Wc0q1Zg+5XVRJ9beThRr uU+5+65JDvXGC5p6Keat+N8sPBuxPVL52+fJhJ5F1cZ8avlzkC+c92fnRPT/OH4c 9vL17UPX4J+Lm4kM6liNzHx9tvQ2Y4b50FvVecLuWrTHOVoPtqHidbEdZraw1+Nd t7rqOP3WYnbRndkvCC3JMeKJcNNEzPMlAJFeBuR0JsHBv4b8dpBNaPxFkzQp0FUM YWFIHUSEv7KVwdDuRwkRBCUCN1JzlFk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:59 2026 by rpki-client