$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa File: 0644af4e-9c64-3770-a0dd-44ccf9878f17.roa (raw, json) Hash identifier: xP4FHm//jigF/87T77acN1DPgl2nVgdATMI/hnnNxA4= Subject key identifier: 0D:30:EB:FE:BC:AD:42:2D:67:31:F5:18:BB:3E:C3:D1:6A:3B:A6:1E Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584D3077170DFD5E05E709C6E6A0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa Signing time: Mon 16 Mar 2026 16:40:20 +0000 ROA not before: Mon 16 Mar 2026 16:40:20 +0000 ROA not after: Sun 14 Jun 2026 16:40:20 +0000 asID: 13536 IP address blocks: 209.107.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:77:17:0d:fd:5e:05:e7:09:c6:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 16 16:40:20 2026 GMT Not After : Jun 14 16:40:20 2026 GMT Subject: CN=2004c9e9-96db-4f48-b2b1-6fee77f34890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:5e:2a:d8:0e:3b:89:42:ce:2b:4f:b5:c9: 3f:2a:e9:0c:32:8e:ab:99:c6:d5:2b:ff:32:a4:ec: 81:7d:d8:23:e0:ab:d0:57:d4:83:3e:e2:91:1e:72: 9d:75:1d:46:0c:6d:83:9b:cd:dc:ad:9e:84:d5:45: 65:88:c4:05:4b:35:0a:d6:3a:ac:e5:5d:34:e1:27: e0:6c:8a:2e:a9:da:ce:a0:38:7d:b8:15:9f:b5:2a: 71:34:d6:3b:d4:46:cb:64:e1:af:4b:61:d5:be:87: 10:9a:55:54:90:13:9c:de:3d:3b:4e:e5:80:91:3a: 55:bd:cb:27:c7:40:dc:d1:00:38:f2:84:6b:3f:d0: ff:d5:31:a1:fa:46:12:f8:80:3f:a4:5d:6f:ef:b0: 09:65:3a:0f:c4:d7:be:c5:e2:e7:6c:08:fb:b1:fd: 10:ef:31:92:21:df:58:7b:43:9b:3c:90:3c:1d:21: d5:8b:dc:4b:76:b0:ee:14:98:ae:22:a7:0f:d3:57: c5:78:ae:ae:2e:98:4c:ac:6d:09:9b:a4:78:aa:f6: c9:a5:de:c7:e0:cd:07:45:88:7e:87:17:34:c7:47: 21:9d:69:f9:75:11:a1:e4:c3:2f:f2:17:89:43:79: a3:a9:f7:38:3d:43:52:69:04:76:b9:8e:5c:24:32: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:30:EB:FE:BC:AD:42:2D:67:31:F5:18:BB:3E:C3:D1:6A:3B:A6:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fe:cc:22:e1:49:7f:33:d7:fb:57:55:c9:df:45:0c:0b:05: 6c:d1:54:47:57:f4:92:d1:2c:36:a3:5a:41:61:ae:bf:1b:28: bd:84:24:9f:14:92:d5:ea:51:37:9f:e5:d6:bd:d5:c9:7b:2f: ad:82:eb:83:a5:85:d1:df:86:47:4e:5b:7a:99:c6:e3:be:ed: 2e:8a:83:d7:f1:35:3b:44:15:6d:3d:3f:4f:a3:f5:7c:95:15: 30:d6:90:0a:d4:89:d1:40:d2:e8:8f:8a:e1:9d:68:78:f7:55: d5:0d:9f:c1:bc:3d:fb:19:d3:56:f3:e9:35:eb:f6:d5:eb:3e: 59:16:4f:6b:30:fe:f9:73:c9:86:8b:af:fe:f4:26:e8:5a:ca: 09:4f:e3:8e:44:8f:1c:9f:4f:52:85:5d:0b:e8:f2:c4:f1:65: e1:d6:05:2c:09:27:95:ff:f8:24:8c:48:90:64:fc:82:af:20: 90:08:ef:a0:dc:f3:75:d2:ed:c1:32:fa:44:53:b1:f6:16:00: a4:92:66:a5:d5:2a:59:74:c3:ff:4d:be:da:7c:60:31:86:0e: 1c:4c:87:e2:28:b8:39:47:53:12:6d:41:32:c7:75:a7:90:82: ca:22:b2:c1:c8:01:b0:dc:40:d8:ee:68:0f:6e:05:59:81:cf: 2d:d8:6e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wdxcN/V4F5wnG5qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDMxNjE2NDAyMFoXDTI2MDYxNDE2NDAyMFowLzEtMCsGA1UEAxMk MjAwNGM5ZTktOTZkYi00ZjQ4LWIyYjEtNmZlZTc3ZjM0ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwapeKtgOO4lCzitPtck/KukMMo6rmcbVK/8y pOyBfdgj4KvQV9SDPuKRHnKddR1GDG2Dm83crZ6E1UVliMQFSzUK1jqs5V004Sfg bIouqdrOoDh9uBWftSpxNNY71EbLZOGvS2HVvocQmlVUkBOc3j07TuWAkTpVvcsn x0Dc0QA48oRrP9D/1TGh+kYS+IA/pF1v77AJZToPxNe+xeLnbAj7sf0Q7zGSId9Y e0ObPJA8HSHVi9xLdrDuFJiuIqcP01fFeK6uLphMrG0Jm6R4qvbJpd7H4M0HRYh+ hxc0x0chnWn5dRGh5MMv8heJQ3mjqfc4PUNSaQR2uY5cJDLo0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0w6/68rUItZzH1GLs+w9FqO6YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMDY0NGFmNGUtOWM2NC0z NzcwLWEwZGQtNDRjY2Y5ODc4ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT+zCLhSX8z1/tXVcnfRQwLBWzRVEdX9JLRLDajWkFhrr8bKL2EJJ8U ktXqUTef5da91cl7L62C64OlhdHfhkdOW3qZxuO+7S6Kg9fxNTtEFW09P0+j9XyV FTDWkArUidFA0uiPiuGdaHj3VdUNn8G8PfsZ01bz6TXr9tXrPlkWT2sw/vlzyYaL r/70JuhayglP445EjxyfT1KFXQvo8sTxZeHWBSwJJ5X/+CSMSJBk/IKvIJAI76Dc 83XS7cEy+kRTsfYWAKSSZqXVKll0w/9Nvtp8YDGGDhxMh+IouDlHUxJtQTLHdaeQ gsoissHIAbDcQNjuaA9uBVmBzy3Ybgo= -----END CERTIFICATE-----Generated at Sat Mar 21 15:05:38 2026 by rpki-client