$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa File: be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json) Hash identifier: D0VkYSM5/juUlfAPsoQY4w6xFQJw1k7a+zQSC8fIeE4= Subject key identifier: AA:7A:A3:EB:9B:EF:D9:E2:38:BA:64:76:4F:20:FC:C2:71:B7:BF:85 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0D425A4FCDFB05494A036500 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 31813 IP address blocks: 209.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5a:4f:cd:fb:05:49:4a:03:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=61686d27-91b9-41b7-b623-20ccf1c708d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:78:30:c6:af:70:62:cc:a8:94:06:d0:4c:aa: 00:1e:2d:d8:24:d5:1e:9a:68:71:73:20:77:58:f8: f0:b8:1c:4d:ca:a6:1f:ca:1f:2f:f5:b8:5f:51:ee: eb:28:7e:38:42:c9:6c:0f:34:c0:33:04:2a:ee:ef: ca:c4:19:5d:42:16:d6:06:14:2e:09:01:0a:1e:a5: d6:af:c5:7f:7c:fb:55:6b:6c:83:2f:e1:9f:ab:c3: dd:e7:ab:c8:bc:9f:e5:09:e3:bf:67:6e:14:62:87: a2:a8:a7:ff:cb:5f:be:b3:53:ad:36:7f:b7:c3:2d: 0a:24:ae:d3:5d:47:85:24:d9:37:fc:a1:a1:f5:ca: d5:7e:5b:7d:4a:5e:61:2a:29:33:54:de:ac:0b:53: 1b:51:cf:18:13:f5:3b:db:a1:8e:9c:d5:4b:97:53: 13:40:48:7a:1d:57:19:c7:8a:eb:34:84:a4:b9:36: db:69:f8:a5:d5:be:58:2c:19:e5:c2:3b:ae:aa:34: c3:c6:f9:9a:76:64:80:ea:a3:01:90:71:fc:2c:ae: 7c:da:76:86:53:62:78:a0:41:ed:a3:8b:87:48:17: b4:3a:65:68:68:bf:f5:9a:89:22:f3:43:46:91:25: 3e:4f:cc:d9:14:c3:99:2d:fa:fd:72:5f:e9:c1:62: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7A:A3:EB:9B:EF:D9:E2:38:BA:64:76:4F:20:FC:C2:71:B7:BF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:77:3e:b3:34:d5:d2:25:18:ee:15:04:ce:5e:40:e1:7d:5b: fc:a8:ef:f8:17:f2:64:41:bc:a5:27:81:5e:87:0d:7d:a0:23: 51:04:a5:1c:10:88:7e:20:81:50:31:d5:18:16:c6:26:3d:d4: b7:dc:94:f8:dd:6f:6a:c3:0a:04:40:78:7b:ec:63:a9:b3:e1: 81:6a:9a:54:07:81:97:2f:db:6f:0b:96:83:64:1f:be:7a:ac: f7:ed:b0:68:5e:b9:f6:27:67:eb:b8:c5:e2:c5:44:0f:2d:2d: 0e:ca:cb:e9:2c:b1:95:a2:1a:c2:58:88:d7:53:55:d6:d2:31: 10:6c:1a:c5:b6:28:d2:e6:c4:26:dd:10:d0:82:ac:32:3f:c1: 22:9e:c6:b1:da:2b:fe:e6:1e:81:03:00:c2:72:8f:77:ab:d0: b8:dc:2a:99:6b:d7:c4:02:2b:5c:e0:56:3e:97:7e:83:14:1e: b6:4f:27:56:77:ec:b9:ce:1f:95:62:e0:03:8a:b7:8d:3a:96: 0c:30:e1:05:85:4b:12:62:a5:37:ac:33:ae:0e:ef:a5:82:1b: d8:5e:b7:f7:fc:f0:56:00:a5:4b:77:25:17:03:75:a1:d4:1b: 11:08:d8:44:e8:46:60:38:91:15:6e:32:45:b3:4e:ad:1e:dc: 51:4d:a2:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlpPzfsFSUoDZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjE2ODZkMjctOTFiOS00MWI3LWI2MjMtMjBjY2YxYzcwOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53gwxq9wYsyolAbQTKoAHi3YJNUemmhxcyB3 WPjwuBxNyqYfyh8v9bhfUe7rKH44QslsDzTAMwQq7u/KxBldQhbWBhQuCQEKHqXW r8V/fPtVa2yDL+Gfq8Pd56vIvJ/lCeO/Z24UYoeiqKf/y1++s1OtNn+3wy0KJK7T XUeFJNk3/KGh9crVflt9Sl5hKikzVN6sC1MbUc8YE/U726GOnNVLl1MTQEh6HVcZ x4rrNISkuTbbafil1b5YLBnlwjuuqjTDxvmadmSA6qMBkHH8LK582naGU2J4oEHt o4uHSBe0OmVoaL/1moki80NGkSU+T8zZFMOZLfr9cl/pwWLqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp6o+ub79niOLpkdk8g/MJxt7+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYmU2MDNiY2UtZDcwMi0z YTM4LWE1NDctZGFlMjBiNWRlMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN3PrM01dIlGO4VBM5eQOF9W/yo7/gX8mRBvKUngV6HDX2gI1EEpRwQ iH4ggVAx1RgWxiY91LfclPjdb2rDCgRAeHvsY6mz4YFqmlQHgZcv228LloNkH756 rPftsGheufYnZ+u4xeLFRA8tLQ7Ky+kssZWiGsJYiNdTVdbSMRBsGsW2KNLmxCbd ENCCrDI/wSKexrHaK/7mHoEDAMJyj3er0LjcKplr18QCK1zgVj6XfoMUHrZPJ1Z3 7LnOH5Vi4AOKt406lgww4QWFSxJipTesM64O76WCG9het/f88FYApUt3JRcDdaHU GxEI2EToRmA4kRVuMkWzTq0e3FFNopY= -----END CERTIFICATE-----Generated at Fri Mar 13 13:15:45 2026 by rpki-client