$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa File: 929941d8-be63-3be5-89d7-62a997289367.roa (raw, json) Hash identifier: eVLr4U/SfIiKiZO4BniU0tBHFypScnCG1uEjeRRqK2k= Subject key identifier: 71:7E:2D:FA:25:FD:B5:A9:2B:D8:86:EB:AC:09:C0:D2:B0:4A:6B:9A Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584D300A6464E1C97DB038B0DA80 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:64:64:e1:c9:7d:b0:38:b0:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=112aba98-4d3a-4359-8772-02488a9c8694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:2b:64:08:d4:e4:09:b5:9e:83:78:a0:df: 22:27:7b:02:98:3b:51:97:09:85:f2:64:b4:4e:c1: 1b:b6:19:c5:ba:1c:0e:a1:ec:f2:40:4d:b2:e1:a5: 28:d7:6f:9d:98:f8:5f:1a:c7:3d:69:a6:de:19:6f: 04:ce:eb:70:7f:36:5c:09:a1:82:fd:71:ce:50:7e: c5:0a:52:59:66:e6:d1:37:bf:c7:b5:22:66:cf:c9: a0:e1:33:db:8e:22:d5:a8:c4:07:9e:d5:b1:18:ef: 05:77:0d:4b:41:35:06:c7:98:88:a1:14:43:21:e1: 90:04:99:41:75:57:17:1c:f9:b2:dd:df:43:93:ec: ce:a9:0f:f8:91:3a:4e:da:ae:47:43:f4:1e:33:a7: 0c:fe:e4:ab:1b:73:8b:d9:aa:0d:b9:fb:6e:78:3e: 7f:91:3d:a7:ec:99:f1:aa:f8:b1:0c:6b:51:42:25: 9e:fe:e1:7b:5e:6c:e5:d8:08:8a:1d:3a:f3:4a:90: a9:5e:18:08:c9:6c:97:5f:83:c6:10:b7:6d:fa:bb: 5b:de:9a:19:e1:70:8d:b0:c2:cc:c8:8c:16:00:e1: 24:41:b6:96:e7:1a:b6:7c:f7:03:e8:33:b8:79:0c: 90:5a:88:1e:85:ed:57:e2:6e:1a:96:aa:18:9a:0c: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7E:2D:FA:25:FD:B5:A9:2B:D8:86:EB:AC:09:C0:D2:B0:4A:6B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4d:58:e8:e3:b6:81:41:80:5b:f9:cc:4f:f5:08:2c:14:d0: f8:d9:43:3d:4d:18:8c:aa:f7:32:2c:c0:9e:ab:ca:97:00:c3: e9:77:61:d6:31:de:56:fd:a9:80:7a:53:8a:15:12:67:00:f6: 05:a7:dc:1c:04:9b:40:11:ed:86:4a:77:c9:e7:52:03:69:87: d8:11:a6:48:01:24:32:6a:2a:b2:0e:8e:ba:13:fb:b1:ba:b0: 1b:6d:1d:df:58:93:89:57:25:9e:80:04:24:69:7a:1c:56:5d: 81:08:75:74:47:78:57:c5:63:3d:62:87:c7:8f:4e:70:58:9f: 97:b4:91:7d:29:38:1f:a1:01:78:66:00:23:9a:5e:6f:21:39: 84:8c:02:60:2d:ae:8b:2d:60:10:24:47:75:b1:1b:b8:3d:7a: 40:54:ba:31:55:d5:3b:69:ae:06:5b:a6:38:0c:ab:60:cc:d5: c2:13:59:95:f6:fa:05:37:cf:17:c5:26:d5:b2:03:61:f6:d3: 97:86:c4:a6:96:64:7e:88:7d:4f:6e:f4:43:c3:b5:7c:ef:c0: 3e:51:24:87:d8:79:5e:7b:d7:72:10:ed:3b:9f:05:17:4b:72: 66:c7:7d:bd:1d:86:11:89:24:29:46:99:4f:92:b0:24:5f:1f: ed:30:77:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmRk4cl9sDiw2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTEyYWJhOTgtNGQzYS00MzU5LTg3NzItMDI0ODhhOWM4Njk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4orZAjU5Am1noN4oN8iJ3sCmDtRlwmF8mS0 TsEbthnFuhwOoezyQE2y4aUo12+dmPhfGsc9aabeGW8EzutwfzZcCaGC/XHOUH7F ClJZZubRN7/HtSJmz8mg4TPbjiLVqMQHntWxGO8Fdw1LQTUGx5iIoRRDIeGQBJlB dVcXHPmy3d9Dk+zOqQ/4kTpO2q5HQ/QeM6cM/uSrG3OL2aoNuftueD5/kT2n7Jnx qvixDGtRQiWe/uF7Xmzl2AiKHTrzSpCpXhgIyWyXX4PGELdt+rtb3poZ4XCNsMLM yIwWAOEkQbaW5xq2fPcD6DO4eQyQWogehe1X4m4alqoYmgxZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF+Lfol/bWpK9iG66wJwNKwSmuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvOTI5OTQxZDgtYmU2My0z YmU1LTg5ZDctNjJhOTk3Mjg5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhNWOjjtoFBgFv5zE/1CCwU0PjZQz1NGIyq9zIswJ6rypcAw+l3YdYx 3lb9qYB6U4oVEmcA9gWn3BwEm0AR7YZKd8nnUgNph9gRpkgBJDJqKrIOjroT+7G6 sBttHd9Yk4lXJZ6ABCRpehxWXYEIdXRHeFfFYz1ih8ePTnBYn5e0kX0pOB+hAXhm ACOaXm8hOYSMAmAtrostYBAkR3WxG7g9ekBUujFV1TtprgZbpjgMq2DM1cITWZX2 +gU3zxfFJtWyA2H205eGxKaWZH6IfU9u9EPDtXzvwD5RJIfYeV5713IQ7TufBRdL cmbHfb0dhhGJJClGmU+SsCRfH+0wdyg= -----END CERTIFICATE-----Generated at Thu Mar 19 15:36:51 2026 by rpki-client