$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/035ad01e-49b8-3d7e-9903-088cefabd294.roa File: 035ad01e-49b8-3d7e-9903-088cefabd294.roa (raw, json) Hash identifier: KWQJDXKHHLNQI3qv3oF2fTPG0w4lokQpx7lA0wm1Cb8= Subject key identifier: AD:44:8D:7A:71:3A:D6:19:37:C4:27:BE:6A:1C:34:6B:89:80:94:5B Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584D3151AD7CF5388CC56F9F6280 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/035ad01e-49b8-3d7e-9903-088cefabd294.roa Signing time: Tue 17 Mar 2026 00:00:45 +0000 ROA not before: Tue 17 Mar 2026 00:00:45 +0000 ROA not after: Mon 15 Jun 2026 00:00:45 +0000 asID: 33146 IP address blocks: 209.222.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:51:ad:7c:f5:38:8c:c5:6f:9f:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Mar 17 00:00:45 2026 GMT Not After : Jun 15 00:00:45 2026 GMT Subject: CN=144c16ea-04d4-4135-8bf1-9cb7bdb8e1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:6f:98:5e:41:22:50:70:aa:3b:ac:89:20: ee:31:f9:ef:a0:63:3a:21:3c:7a:9f:81:9f:19:0e: 58:cf:e1:70:62:f6:06:aa:b1:d4:29:3e:91:bf:0a: 70:b0:69:8f:2b:94:13:25:d7:a1:38:91:26:62:63: ed:f4:26:2d:4b:c8:b5:e8:52:7d:a1:5e:2b:ff:4f: d5:ce:49:6a:70:46:84:08:4a:e0:22:c0:97:64:26: 90:d2:e9:5e:91:c1:bb:64:2b:d1:3b:30:ef:22:f5: be:92:e1:3c:f0:38:fb:14:3e:72:58:08:e1:f5:af: a8:4c:d1:2a:1a:e3:56:ab:39:8f:85:71:a2:4d:54: 69:f8:fd:9f:4d:31:d5:05:9d:e5:4d:56:26:01:f1: 3d:c0:ad:b9:73:67:e0:b8:1c:8a:b6:1e:b7:fb:4c: 92:03:ba:2d:e5:ea:ce:de:c1:fb:17:13:cb:af:40: 8a:0d:d7:28:fb:50:32:54:e9:2b:88:4e:09:b6:f1: ec:c4:31:f7:2c:51:44:ed:63:e4:7f:ee:57:da:65: df:39:52:26:50:02:40:7e:0e:eb:28:6e:d2:dd:76: e0:0b:22:5d:72:5d:2d:d2:e9:7e:4c:28:34:3a:55: cf:59:d3:a0:57:54:99:35:5c:3b:d7:4a:1f:46:6c: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:44:8D:7A:71:3A:D6:19:37:C4:27:BE:6A:1C:34:6B:89:80:94:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/035ad01e-49b8-3d7e-9903-088cefabd294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d4:73:82:04:77:fe:0e:8d:f6:ec:40:90:c7:fd:71:7b:80: 29:46:f7:80:09:8d:23:db:1a:4a:9d:76:be:a5:b3:d2:b0:e1: 66:57:d5:b2:b9:e1:50:79:4f:e4:36:16:ff:14:d5:a0:b2:90: 08:89:57:00:79:53:4a:02:e1:74:77:58:ae:58:19:3c:8d:fd: 65:9b:fd:53:f9:cd:a0:1e:41:a2:03:1a:12:46:f5:dc:10:5b: f2:7c:c4:a2:8c:f5:c5:9f:34:f8:b3:39:53:bf:c4:56:2b:23: c6:1b:5d:cb:53:f0:56:4c:2f:60:98:29:66:31:e8:d2:26:49: 56:68:b2:c7:de:be:38:f8:34:8f:46:54:84:37:21:64:fc:cb: 3d:60:ad:14:58:0f:96:22:dd:11:8d:53:c0:2f:3c:e5:41:f5: f4:06:15:6a:e2:cc:73:a4:17:5f:86:81:a6:78:be:b9:8b:47: 39:b5:a8:86:94:52:b8:07:3b:78:74:17:17:3e:96:71:62:8c: 4a:22:6f:6e:2a:27:f4:53:11:20:a4:56:3a:27:60:6f:f2:cb: 6a:dc:c7:b1:3f:5b:56:3b:77:62:48:ad:a6:a6:45:4a:aa:9d: e6:81:0a:4d:38:74:39:39:ff:27:ef:aa:25:e2:85:a5:05:85: 5d:d2:73:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xUa189TiMxW+fYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI2MDMxNzAwMDA0NVoXDTI2MDYxNTAwMDA0NVowLzEtMCsGA1UEAxMk MTQ0YzE2ZWEtMDRkNC00MTM1LThiZjEtOWNiN2JkYjhlMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP1vmF5BIlBwqjusiSDuMfnvoGM6ITx6n4Gf GQ5Yz+FwYvYGqrHUKT6RvwpwsGmPK5QTJdehOJEmYmPt9CYtS8i16FJ9oV4r/0/V zklqcEaECErgIsCXZCaQ0ulekcG7ZCvROzDvIvW+kuE88Dj7FD5yWAjh9a+oTNEq GuNWqzmPhXGiTVRp+P2fTTHVBZ3lTVYmAfE9wK25c2fguByKth63+0ySA7ot5erO 3sH7FxPLr0CKDdco+1AyVOkriE4JtvHsxDH3LFFE7WPkf+5X2mXfOVImUAJAfg7r KG7S3XbgCyJdcl0t0ul+TCg0OlXPWdOgV1SZNVw710ofRmzS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1EjXpxOtYZN8QnvmocNGuJgJRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvMDM1YWQwMWUtNDliOC0z ZDdlLTk5MDMtMDg4Y2VmYWJkMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzUc4IEd/4OjfbsQJDH/XF7gClG94AJjSPbGkqddr6ls9Kw4WZX1bK5 4VB5T+Q2Fv8U1aCykAiJVwB5U0oC4XR3WK5YGTyN/WWb/VP5zaAeQaIDGhJG9dwQ W/J8xKKM9cWfNPizOVO/xFYrI8YbXctT8FZML2CYKWYx6NImSVZossfevjj4NI9G VIQ3IWT8yz1grRRYD5Yi3RGNU8AvPOVB9fQGFWrizHOkF1+GgaZ4vrmLRzm1qIaU UrgHO3h0Fxc+lnFijEoib24qJ/RTESCkVjonYG/yy2rcx7E/W1Y7d2JIraamRUqq neaBCk04dDk5/yfvqiXihaUFhV3Sc9o= -----END CERTIFICATE-----Generated at Fri Mar 20 17:19:39 2026 by rpki-client