$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: ibXkshyFCWwMqetSqTSFftYaZHHyqtBkZW4hRcwROog= Subject key identifier: 5B:AD:8F:4C:16:C6:9D:75:4E:AD:72:49:DF:51:2A:B4:54:5D:E4:43 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0D4250D80FF8E91AF2006300 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:50:d8:0f:f8:e9:1a:f2:00:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=7f056d5a-bc74-491d-b1f2-975170bd6146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:03:37:0a:d9:59:80:e9:f7:f7:49:43:ca: d2:d7:81:8a:f4:8c:32:fe:d6:0f:7f:6c:d7:9f:23: 56:f0:0f:4d:d7:b3:d8:02:a6:cf:b8:f0:85:21:62: 86:31:0c:13:9f:e4:c5:a6:54:0a:6d:7c:86:53:09: 8d:d1:59:9a:cc:26:f1:4d:75:05:d1:4d:c8:14:49: 3a:62:ef:66:8b:52:20:36:69:f9:12:32:4b:cb:f3: 1a:91:ef:1a:a9:64:a5:7b:24:2d:68:1c:8f:63:dc: 66:4d:39:aa:03:ec:2f:67:70:3f:24:cc:2c:d6:f7: f2:bc:a6:06:d6:29:09:15:4f:aa:e0:b4:a8:f5:45: 65:7a:61:d9:ef:7d:36:ae:c8:fc:1f:23:dd:b6:f6: e1:ad:42:36:36:32:98:2d:3f:1b:8e:22:15:74:f8: 2e:54:e6:64:5c:3d:e5:2b:b4:2f:78:9e:0f:19:bd: 24:38:8b:33:79:71:8e:b0:a5:0f:fe:73:61:c0:71: 3a:b7:8a:c6:b2:97:bb:bc:a7:1c:69:7a:41:f2:f9: 78:3b:91:34:7b:51:35:ef:44:92:cf:b6:88:24:80: 2a:59:15:02:6a:3c:c9:5d:ea:f8:0c:d2:8e:96:de: e3:ad:d9:57:b8:02:08:45:60:f4:3a:15:4f:dd:39: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AD:8F:4C:16:C6:9D:75:4E:AD:72:49:DF:51:2A:B4:54:5D:E4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7f:ca:eb:cb:82:5f:91:b9:d0:b5:07:49:30:9b:0d:a5:f3: 74:95:e1:5f:12:82:83:12:e2:2b:b8:da:c5:76:7e:5c:61:f2: d7:cd:a6:81:c3:53:f1:2b:13:7f:fb:72:6c:45:fb:f0:21:27: c2:15:4c:76:75:a7:24:04:68:ec:af:d3:12:a7:0e:2a:47:43: 99:21:1c:48:8f:57:17:bd:26:48:51:6f:62:55:5b:83:a7:6a: 1f:5b:5e:d2:3b:26:b4:ae:2f:f2:5c:7d:c7:0d:49:20:ef:5e: cf:ef:cc:55:8d:be:24:79:d0:a8:f7:d6:93:aa:ac:4d:a4:3b: 84:94:55:91:1c:5d:6d:45:86:85:14:5d:4b:26:60:94:a3:dd: aa:2f:1b:33:5d:58:e8:4b:e9:5a:f0:e3:99:43:6e:64:b7:5a: 54:90:55:46:92:a4:84:47:76:f5:11:ad:dd:c2:1f:e3:e4:0c: 39:9c:89:03:53:15:5c:c3:40:09:38:46:6a:09:e2:b6:35:dd: 81:64:98:93:23:45:91:e2:0f:17:0b:80:fe:3c:e8:1c:35:a8: c5:7a:4f:47:c4:e5:ff:0e:55:03:10:c5:3e:6b:cc:4f:74:60: a5:cc:26:8a:ec:4b:7e:8e:32:6b:14:ae:0c:56:ce:93:8a:66: cf:59:29:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlDYD/jpGvIAYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk N2YwNTZkNWEtYmM3NC00OTFkLWIxZjItOTc1MTcwYmQ2MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCADNwrZWYDp9/dJQ8rS14GK9Iwy/tYPf2zX nyNW8A9N17PYAqbPuPCFIWKGMQwTn+TFplQKbXyGUwmN0VmazCbxTXUF0U3IFEk6 Yu9mi1IgNmn5EjJLy/Make8aqWSleyQtaByPY9xmTTmqA+wvZ3A/JMws1vfyvKYG 1ikJFU+q4LSo9UVlemHZ7302rsj8HyPdtvbhrUI2NjKYLT8bjiIVdPguVOZkXD3l K7QveJ4PGb0kOIszeXGOsKUP/nNhwHE6t4rGspe7vKccaXpB8vl4O5E0e1E170SS z7aIJIAqWRUCajzJXer4DNKOlt7jrdlXuAIIRWD0OhVP3TkBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFutj0wWxp11Tq1ySd9RKrRUXeRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ/yuvLgl+RudC1B0kwmw2l83SV4V8SgoMS4iu42sV2flxh8tfNpoHD U/ErE3/7cmxF+/AhJ8IVTHZ1pyQEaOyv0xKnDipHQ5khHEiPVxe9JkhRb2JVW4On ah9bXtI7JrSuL/JcfccNSSDvXs/vzFWNviR50Kj31pOqrE2kO4SUVZEcXW1FhoUU XUsmYJSj3aovGzNdWOhL6Vrw45lDbmS3WlSQVUaSpIRHdvURrd3CH+PkDDmciQNT FVzDQAk4RmoJ4rY13YFkmJMjRZHiDxcLgP486Bw1qMV6T0fE5f8OVQMQxT5rzE90 YKXMJorsS36OMmsUrgxWzpOKZs9ZKbw= -----END CERTIFICATE-----Generated at Fri Mar 13 13:15:41 2026 by rpki-client