$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0daaf9b-e2ff-3a1f-82b7-7fda0f2f15c4.roa File: f0daaf9b-e2ff-3a1f-82b7-7fda0f2f15c4.roa (raw, json) Hash identifier: oN9azsm3Yj5REfuXmiPX7hHQemYskU+Ae2JAB9vXvsw= Subject key identifier: 17:70:6C:E9:CE:0B:C8:19:2D:76:74:8C:59:6C:D5:35:7C:51:A6:77 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584D30714203DE10D33B40C50B40 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0daaf9b-e2ff-3a1f-82b7-7fda0f2f15c4.roa Signing time: Mon 16 Mar 2026 16:28:35 +0000 ROA not before: Mon 16 Mar 2026 16:28:35 +0000 ROA not after: Sun 14 Jun 2026 16:28:35 +0000 asID: 402203 IP address blocks: 209.137.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:71:42:03:de:10:d3:3b:40:c5:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Mar 16 16:28:35 2026 GMT Not After : Jun 14 16:28:35 2026 GMT Subject: CN=e4ccc837-07e0-47de-b315-8728d2c2727b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:58:81:b9:c4:ef:e1:22:96:06:29:5d:1c: 16:bb:5b:02:62:83:cf:35:fb:2f:36:cb:60:52:77: e5:0f:de:ee:3e:22:a3:6d:f7:4d:89:76:bf:31:10: 73:18:d2:28:2e:8b:96:2c:12:a8:c5:3e:0a:d4:24: 74:85:d3:ab:65:03:82:6a:c8:30:c5:99:4c:0a:56: 01:6f:96:14:34:62:26:5d:f3:09:9e:65:44:05:f7: 97:f6:1c:01:ca:f5:e3:10:43:4b:4b:7d:a6:62:4e: e4:df:72:da:93:ed:1e:3b:eb:bf:35:5f:94:91:9a: 43:c4:ed:e5:eb:a8:1e:df:4a:47:a5:db:10:97:2b: ea:4c:af:f2:8c:64:e9:e4:bb:f5:47:49:ec:08:e3: b6:b4:de:64:eb:5e:28:2c:28:d4:7f:47:f1:cd:c6: f7:95:24:02:f2:d3:5a:ac:32:49:a9:80:5a:44:07: 93:b8:c8:b6:a2:5f:b0:04:75:e5:e8:03:99:10:c1: 2b:e0:8e:10:14:5b:40:21:2f:d7:9a:a6:70:86:06: ce:86:cb:f3:b2:27:bc:12:a4:4c:21:26:cc:a5:9b: ba:f3:9f:f0:ad:e5:2b:27:3f:0e:b7:54:98:77:6a: 28:ff:c9:5f:c5:13:37:a1:ca:c2:1b:d3:43:ae:f5: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:6C:E9:CE:0B:C8:19:2D:76:74:8C:59:6C:D5:35:7C:51:A6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0daaf9b-e2ff-3a1f-82b7-7fda0f2f15c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.137.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fa:dd:94:3a:76:55:f7:6f:c4:bc:3d:c2:46:b7:93:e0:30: 7f:2f:f8:bf:71:00:fd:b9:de:34:9c:0a:44:03:e5:6e:e5:47: 6a:0c:2e:2f:9b:dc:f3:c8:fc:87:aa:9c:f3:af:1a:3e:37:7e: 57:35:8c:1b:eb:cc:93:38:d4:90:f6:02:ad:9f:d0:65:0b:90: 6d:6f:42:24:79:08:82:ab:5b:2b:80:f8:26:b5:0c:20:f4:29: fd:09:f3:d8:1a:19:ac:94:32:18:22:c1:61:5c:85:87:e5:e3: eb:ca:a8:94:0c:a4:b4:43:97:e2:2b:a5:83:5b:ef:97:06:c0: 65:27:25:a1:7f:f4:7a:50:a4:21:30:cc:89:e8:5d:14:1f:58: cb:c7:99:72:b6:0b:0b:f4:e0:e8:07:61:e1:b4:99:93:b8:6f: 55:41:49:99:a1:17:72:06:81:c3:27:43:73:f5:90:d4:df:d2: c9:df:6d:cb:0b:22:8f:4b:91:7b:9f:5b:29:da:2a:fc:b6:49: a8:06:23:b6:41:3f:c2:f3:3b:b6:1e:56:a3:54:bb:9f:b6:de: a1:78:2a:dd:ea:1c:14:e2:39:06:11:68:fc:44:b5:9d:0b:91: d2:3c:92:71:26:fe:eb:63:75:1d:92:4d:07:19:a8:b1:69:fc: 6d:11:39:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wcUID3hDTO0DFC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDMxNjE2MjgzNVoXDTI2MDYxNDE2MjgzNVowLzEtMCsGA1UEAxMk ZTRjY2M4MzctMDdlMC00N2RlLWIzMTUtODcyOGQyYzI3MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1RYgbnE7+EilgYpXRwWu1sCYoPPNfsvNstg UnflD97uPiKjbfdNiXa/MRBzGNIoLouWLBKoxT4K1CR0hdOrZQOCasgwxZlMClYB b5YUNGImXfMJnmVEBfeX9hwByvXjEENLS32mYk7k33Lak+0eO+u/NV+UkZpDxO3l 66ge30pHpdsQlyvqTK/yjGTp5Lv1R0nsCOO2tN5k614oLCjUf0fxzcb3lSQC8tNa rDJJqYBaRAeTuMi2ol+wBHXl6AOZEMEr4I4QFFtAIS/XmqZwhgbOhsvzsie8EqRM ISbMpZu685/wreUrJz8Ot1SYd2oo/8lfxRM3ocrCG9NDrvVCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdwbOnOC8gZLXZ0jFls1TV8UaZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZjBkYWFmOWItZTJmZi0z YTFmLTgyYjctN2ZkYTBmMmYxNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/63ZQ6dlX3b8S8PcJGt5PgMH8v+L9xAP253jScCkQD5W7lR2oMLi+b 3PPI/IeqnPOvGj43flc1jBvrzJM41JD2Aq2f0GULkG1vQiR5CIKrWyuA+Ca1DCD0 Kf0J89gaGayUMhgiwWFchYfl4+vKqJQMpLRDl+IrpYNb75cGwGUnJaF/9HpQpCEw zInoXRQfWMvHmXK2Cwv04OgHYeG0mZO4b1VBSZmhF3IGgcMnQ3P1kNTf0snfbcsL Io9LkXufWynaKvy2SagGI7ZBP8LzO7YeVqNUu5+23qF4Kt3qHBTiOQYRaPxEtZ0L kdI8knEm/utjdR2STQcZqLFp/G0ROdE= -----END CERTIFICATE-----Generated at Sat Mar 21 04:06:06 2026 by rpki-client