$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa File: d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa (raw, json) Hash identifier: BGOJXnsOgWc++VhrlVsHpA8tr1K5WVgG2m/mbajW6qs= Subject key identifier: A6:F9:F0:F9:FE:1C:6C:63:7F:3F:9C:41:64:DD:FF:FB:B0:AE:B0:11 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CCA57F507FB225B777A0 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 209.152.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cc:a5:7f:50:7f:b2:25:b7:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=cde46886-7cd2-4b54-b12a-76e1ac5193f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:50:ff:81:b6:7a:4c:b3:a6:ba:b9:c6:d3: c4:03:11:f1:8e:1a:be:3f:b1:38:24:9f:5b:8c:ac: da:63:b0:10:09:b6:7d:14:cb:ea:79:60:d6:58:3d: f6:18:c4:e2:9c:54:db:dd:73:2a:a3:d0:c6:f2:ad: 13:0e:01:cd:bc:75:19:be:bd:c1:df:f4:22:d8:88: e8:e8:40:39:b2:6e:4c:92:5e:5a:a4:28:f1:7a:0c: 84:49:e9:ba:7c:be:2b:b5:7d:a8:9b:56:2a:39:42: e3:9a:b0:72:fe:45:48:fd:fc:98:d3:2a:12:4c:39: f4:30:b4:5c:a0:c1:1d:be:29:2a:66:03:5c:1f:77: 79:29:ed:45:72:33:8b:d2:aa:b2:89:d1:2d:b8:1a: a1:ed:39:ae:f2:75:70:a6:cc:66:ef:39:e1:84:72: e1:ba:18:d7:83:64:47:8e:45:f8:03:c8:11:e1:29: d5:25:0f:d8:dc:91:90:80:cc:d1:f4:5d:ed:61:05: 33:86:a3:ba:da:cd:c8:ce:60:79:d4:84:9a:fb:e7: 8f:b8:a8:10:98:5b:34:f2:d1:83:6c:4c:d0:91:63: 83:f7:94:3a:0e:de:20:87:cf:6d:42:a9:41:83:37: 87:7c:6d:4e:fc:a2:22:f7:86:6e:79:6a:1c:11:b3: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F9:F0:F9:FE:1C:6C:63:7F:3F:9C:41:64:DD:FF:FB:B0:AE:B0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c7:64:ee:fe:dd:4d:1f:05:7a:de:d7:7f:c5:8b:d5:05:c2: b6:74:23:f0:c3:14:f6:f6:84:20:56:41:14:3d:63:69:7c:ec: 7d:d8:4d:66:d3:d8:29:aa:b6:b7:44:0e:52:b7:cd:a8:a0:5e: 98:1a:42:48:d9:d6:fe:b9:6a:c1:5f:c6:c7:c9:8d:35:f9:ac: 54:94:b9:c5:0e:77:6c:3b:3a:47:a8:31:90:59:bc:37:df:5d: 63:6b:99:02:e4:20:96:a7:ed:52:a9:c4:b9:32:48:9d:9e:ce: ff:cd:31:3e:95:26:95:45:66:08:51:bf:a4:2a:4f:e1:c6:7d: 94:e8:9e:47:f4:f6:6b:76:7b:f1:83:c9:35:cc:36:fe:85:0d: 26:5c:61:f0:25:07:25:63:0b:9f:c6:df:f4:74:fb:51:07:a6: 77:86:7a:fa:ea:ef:30:12:76:f2:63:d1:f8:6d:1e:d7:30:04: 93:0d:91:d5:5b:55:e7:82:3f:d4:34:a2:c0:8d:bd:5d:65:8c: 87:82:02:86:46:4a:bb:33:e3:a2:b1:03:d4:0a:55:5f:34:78: 6b:f0:44:43:e0:96:ee:00:76:fc:27:ab:90:d7:ec:33:e6:9e: 67:2f:21:38:e7:4e:cd:6a:8e:4e:d2:62:3d:ec:73:56:cb:94: 19:39:dc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMylf1B/siW3d6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2RlNDY4ODYtN2NkMi00YjU0LWIxMmEtNzZlMWFjNTE5M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lhQ/4G2ekyzprq5xtPEAxHxjhq+P7E4JJ9b jKzaY7AQCbZ9FMvqeWDWWD32GMTinFTb3XMqo9DG8q0TDgHNvHUZvr3B3/Qi2Ijo 6EA5sm5Mkl5apCjxegyESem6fL4rtX2om1YqOULjmrBy/kVI/fyY0yoSTDn0MLRc oMEdvikqZgNcH3d5Ke1FcjOL0qqyidEtuBqh7Tmu8nVwpsxm7znhhHLhuhjXg2RH jkX4A8gR4SnVJQ/Y3JGQgMzR9F3tYQUzhqO62s3IzmB51ISa++ePuKgQmFs08tGD bEzQkWOD95Q6Dt4gh89tQqlBgzeHfG1O/KIi94ZueWocEbOm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb58Pn+HGxjfz+cQWTd//uwrrARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZDhmNzRlYTQtZDZjNy0z Y2UxLWJkNDEtNGJkNmNlYjg4MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbHZO7+3U0fBXre13/Fi9UFwrZ0I/DDFPb2hCBWQRQ9Y2l87H3YTWbT 2CmqtrdEDlK3zaigXpgaQkjZ1v65asFfxsfJjTX5rFSUucUOd2w7OkeoMZBZvDff XWNrmQLkIJan7VKpxLkySJ2ezv/NMT6VJpVFZghRv6QqT+HGfZTonkf09mt2e/GD yTXMNv6FDSZcYfAlByVjC5/G3/R0+1EHpneGevrq7zASdvJj0fhtHtcwBJMNkdVb VeeCP9Q0osCNvV1ljIeCAoZGSrsz46KxA9QKVV80eGvwREPglu4Advwnq5DX7DPm nmcvITjnTs1qjk7SYj3sc1bLlBk53HI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:39 2026 by rpki-client