$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa File: d9010bb7-b127-300d-8f26-9f8325848a6d.roa (raw, json) Hash identifier: SdlK32dZFBG6SAYnp2MavMyhPesr0ODM+d6cJPEfsTM= Subject key identifier: 25:BD:93:CB:FB:68:9D:B5:EE:C4:B5:F4:3C:76:AE:AA:07:FE:83:A7 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584D300A64537F8354A8B0C00000 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:64:53:7f:83:54:a8:b0:c0:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4956db40-1cbf-4026-a148-c78311c1480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:68:f2:98:10:75:48:a6:18:e2:64:c8:9f: 90:85:a7:4f:0e:64:f7:8c:e0:14:8b:05:a6:ef:47: 16:36:4b:69:5a:5d:54:11:6f:85:49:fb:4a:6a:e0: 68:67:61:64:ff:e7:22:b5:b1:c6:5e:28:35:00:7c: 29:d5:83:2f:2f:d1:02:5d:6b:b7:dd:71:78:91:94: 3d:d4:77:7c:11:51:51:f0:ff:e1:73:f8:9f:ae:e0: 9e:e2:09:10:08:73:21:8f:09:6d:cc:33:1a:2c:78: ad:52:ec:db:dc:0f:13:e7:b5:52:bc:07:8c:5a:a8: ec:1b:97:bc:1f:f1:e5:b9:b4:96:90:89:57:4d:82: de:36:cd:4f:3c:13:d5:48:5d:d0:77:90:0d:8c:04: 76:f6:ea:e0:32:a0:bb:c4:2d:a9:ea:bb:96:3d:92: da:c7:5c:63:1c:2a:c2:0a:cd:d3:7c:3c:ff:cd:87: 58:27:4d:bb:5a:c4:4b:58:ea:ab:43:0b:36:11:69: 6c:07:c4:12:3d:37:6e:da:63:fa:41:82:57:4c:1b: 49:e8:a1:9e:07:60:af:23:60:bf:b3:14:5c:26:b9: 75:c9:f7:d3:94:60:a1:ce:30:6e:9a:1b:76:8b:0b: 55:5e:bb:96:5d:d3:f2:18:d4:b4:80:5d:40:17:ad: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BD:93:CB:FB:68:9D:B5:EE:C4:B5:F4:3C:76:AE:AA:07:FE:83:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c9:11:65:53:64:5e:d8:d6:3d:77:e4:9e:b2:e3:26:da:48: 3c:d6:1e:2e:10:14:91:a3:a7:fd:5d:30:f2:81:2a:84:03:07: 98:56:7e:a2:69:53:6d:28:e4:5e:bf:48:1b:f0:5f:12:22:9f: c5:4f:de:bc:62:b9:ab:ce:48:86:c3:5c:d4:08:95:4d:6a:e6: 2c:dc:29:28:1f:4d:42:c5:42:c4:89:42:5b:8b:3d:5b:18:82: 42:f5:31:3a:50:2a:ef:b9:ad:c6:1a:1b:be:85:c2:de:94:43: d7:0c:d6:11:07:04:16:0e:06:46:af:12:9e:15:5d:9a:7d:4f: 4f:6d:ef:8a:7a:5c:83:d5:00:63:f4:49:6f:26:d1:69:25:80: 0a:6a:91:9e:9a:a5:d9:d0:f8:2f:5d:ae:e0:89:ac:7f:b1:b9: 8e:9f:e5:cd:fd:f7:3c:1e:55:d7:b9:10:9d:eb:8d:b3:0a:7d: 82:50:1c:06:f0:d6:ae:3a:cc:48:5a:09:d7:a6:d7:91:cc:42: 8b:02:56:3e:80:85:77:e4:b4:a9:b6:0c:68:ce:60:fb:d7:2a: e0:7f:d2:ed:50:05:56:a1:e6:c4:ce:df:6d:4b:e7:f2:90:a1: d5:6e:3b:8a:06:48:04:66:f5:51:86:64:33:fe:6f:24:34:ce: a5:6a:11:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmRTf4NUqLDAAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDk1NmRiNDAtMWNiZi00MDI2LWExNDgtYzc4MzExYzE0ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaNo8pgQdUimGOJkyJ+QhadPDmT3jOAUiwWm 70cWNktpWl1UEW+FSftKauBoZ2Fk/+citbHGXig1AHwp1YMvL9ECXWu33XF4kZQ9 1Hd8EVFR8P/hc/ifruCe4gkQCHMhjwltzDMaLHitUuzb3A8T57VSvAeMWqjsG5e8 H/HlubSWkIlXTYLeNs1PPBPVSF3Qd5ANjAR29urgMqC7xC2p6ruWPZLax1xjHCrC Cs3TfDz/zYdYJ027WsRLWOqrQws2EWlsB8QSPTdu2mP6QYJXTBtJ6KGeB2CvI2C/ sxRcJrl1yffTlGChzjBumht2iwtVXruWXdPyGNS0gF1AF62/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW9k8v7aJ217sS19Dx2rqoH/oOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvZDkwMTBiYjctYjEyNy0z MDBkLThmMjYtOWY4MzI1ODQ4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3JEWVTZF7Y1j135J6y4ybaSDzWHi4QFJGjp/1dMPKBKoQDB5hWfqJp U20o5F6/SBvwXxIin8VP3rxiuavOSIbDXNQIlU1q5izcKSgfTULFQsSJQluLPVsY gkL1MTpQKu+5rcYaG76Fwt6UQ9cM1hEHBBYOBkavEp4VXZp9T09t74p6XIPVAGP0 SW8m0WklgApqkZ6apdnQ+C9druCJrH+xuY6f5c399zweVde5EJ3rjbMKfYJQHAbw 1q46zEhaCdem15HMQosCVj6AhXfktKm2DGjOYPvXKuB/0u1QBVah5sTO321L5/KQ odVuO4oGSARm9VGGZDP+byQ0zqVqETU= -----END CERTIFICATE-----Generated at Thu Mar 19 12:34:00 2026 by rpki-client