$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa File: 3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa (raw, json) Hash identifier: 7c6HUR79z/qWTzvUZ4Y6+oBfnFdi7pobZhobGkLAH2E= Subject key identifier: BF:8E:8F:F5:A9:EA:C1:1E:1A:8C:56:BB:B2:DA:1B:49:22:39:4C:31 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584D300A61CF7D5CA3170816E2C0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 62651 IP address blocks: 209.107.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:61:cf:7d:5c:a3:17:08:16:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f426b677-51b3-4639-8cd2-8aab9795445b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:34:b2:a0:07:d2:c7:68:3b:b2:00:2b:94: ac:c7:e4:41:da:a3:cc:5c:03:07:0f:d4:8d:a6:7d: d8:3a:17:cc:c9:87:3d:5e:25:84:ba:71:71:43:7a: de:3f:39:f4:0a:de:59:84:90:7e:23:74:7e:3e:63: 2b:f2:25:71:3f:24:f4:40:9a:7e:75:8e:e9:37:3b: 0c:cd:d1:77:8c:44:4e:6c:06:92:97:af:1b:f5:e3: 74:69:33:de:e5:20:7a:39:41:16:62:bb:0f:cd:03: f8:96:15:89:79:4e:55:33:db:54:b5:9e:e0:45:e8: e3:5c:a3:df:2f:4b:de:ab:f8:cb:e1:92:43:9c:3b: e2:54:59:ff:d9:82:64:c1:2e:09:54:77:9d:2c:94: 35:93:56:f4:26:8f:df:84:38:2e:99:82:bc:be:39: ff:66:5c:e9:b8:ca:06:ad:10:07:7f:b7:2f:e1:4e: 04:5b:c9:69:fa:a0:24:b4:93:4e:47:3d:35:35:11: a8:d6:0d:24:15:b9:a6:7e:e4:91:b2:9e:5d:55:1b: 6a:df:52:9b:b2:1f:4a:0d:7a:f6:6b:c9:80:72:61: 66:13:35:9e:8c:56:c7:b0:99:be:b8:60:16:1f:ef: 10:0f:5d:bb:ed:fb:da:6a:59:4c:4f:39:c1:c1:b3: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:8F:F5:A9:EA:C1:1E:1A:8C:56:BB:B2:DA:1B:49:22:39:4C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3b:a2:88:4e:12:44:99:21:49:d8:ee:a5:7b:df:54:5e:c4: e0:fc:28:8a:61:49:96:5a:4c:d3:2d:4a:03:9d:b9:84:67:da: 22:55:d6:64:51:7f:ed:57:42:eb:94:87:6d:14:8f:79:c0:ab: 69:de:70:fc:11:38:cd:e6:d5:99:16:d1:a1:61:5f:27:af:6c: 8c:6c:c6:59:12:29:06:8f:6c:c3:b1:58:df:9c:18:f7:2c:f3: 1a:79:c1:7c:84:1c:b7:e3:99:29:2f:ef:47:29:16:59:e2:d5: 4b:ed:d5:1c:61:8f:22:3d:5c:2f:2b:35:57:1b:4c:68:94:59: f0:a1:60:ba:ea:23:17:53:06:26:92:63:b2:32:bd:ac:9b:52: aa:3b:95:fb:1a:59:61:cf:91:e8:f8:46:18:33:b1:0a:c9:95: 29:f9:5a:d7:f1:c2:2e:ac:c1:94:90:a4:20:af:a9:bd:ff:f0: 6e:58:76:09:37:b1:08:47:88:c5:45:c0:0e:ca:6c:0b:37:3a: ae:8f:3c:55:41:cc:2e:b1:f0:92:bd:d7:77:f7:fb:a0:a1:ed: 93:8b:9e:a0:26:5a:85:5b:f2:07:33:5c:89:eb:55:a1:01:ac: 92:30:58:23:7c:53:01:33:dc:05:02:3c:5c:6e:10:74:0b:b2: 3e:7d:d9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmHPfVyjFwgW4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjQyNmI2NzctNTFiMy00NjM5LThjZDItOGFhYjk3OTU0NDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFg0sqAH0sdoO7IAK5Ssx+RB2qPMXAMHD9SN pn3YOhfMyYc9XiWEunFxQ3rePzn0Ct5ZhJB+I3R+PmMr8iVxPyT0QJp+dY7pNzsM zdF3jERObAaSl68b9eN0aTPe5SB6OUEWYrsPzQP4lhWJeU5VM9tUtZ7gRejjXKPf L0veq/jL4ZJDnDviVFn/2YJkwS4JVHedLJQ1k1b0Jo/fhDgumYK8vjn/ZlzpuMoG rRAHf7cv4U4EW8lp+qAktJNORz01NRGo1g0kFbmmfuSRsp5dVRtq31Kbsh9KDXr2 a8mAcmFmEzWejFbHsJm+uGAWH+8QD1277fvaallMTznBwbMC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+Oj/Wp6sEeGoxWu7LaG0kiOUwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvM2IxYTRlZDItYjY5Yi0z OTJhLThkZGMtZjM3ZDk1NWZhNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs7oohOEkSZIUnY7qV731RexOD8KIphSZZaTNMtSgOduYRn2iJV1mRR f+1XQuuUh20Uj3nAq2necPwROM3m1ZkW0aFhXyevbIxsxlkSKQaPbMOxWN+cGPcs 8xp5wXyEHLfjmSkv70cpFlni1Uvt1RxhjyI9XC8rNVcbTGiUWfChYLrqIxdTBiaS Y7IyvaybUqo7lfsaWWHPkej4RhgzsQrJlSn5Wtfxwi6swZSQpCCvqb3/8G5Ydgk3 sQhHiMVFwA7KbAs3Oq6PPFVBzC6x8JK913f3+6Ch7ZOLnqAmWoVb8gczXInrVaEB rJIwWCN8UwEz3AUCPFxuEHQLsj592bA= -----END CERTIFICATE-----Generated at Sat Mar 21 12:18:19 2026 by rpki-client