$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa File: efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json) Hash identifier: 9OrKZJBHbrWaXCe5RvcMY13+Qh4UqvcWMI9VGRq8TF8= Subject key identifier: FB:AF:0B:66:25:42:44:AD:AA:90:71:4F:CC:DF:77:B0:5D:28:A3:4B Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0D425A7420CC79973DCA7600 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 40836 IP address blocks: 209.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5a:74:20:cc:79:97:3d:ca:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=040af0a2-ca92-4058-8982-c0d07b200f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:04:21:e3:9b:02:8b:23:03:3e:b6:8d:e1: b5:56:91:4c:73:4a:0d:b8:b4:f2:28:dd:cd:8d:f8: ac:18:52:2d:11:65:a8:58:52:04:91:e1:f2:7c:5f: a4:45:88:cf:f2:08:f7:ef:2e:d4:37:51:8b:28:15: 6b:f7:c8:0e:fd:b2:75:c0:4e:3b:d5:ae:87:1e:c5: 6d:0e:80:25:83:62:b4:d7:99:e6:42:75:d4:f3:02: e3:79:a8:69:9d:9e:0a:89:78:bb:44:47:c2:71:df: 70:e6:e2:28:8d:be:21:b1:ff:3e:13:9e:3e:32:66: 98:3b:f8:4b:79:76:81:6d:4b:df:f9:41:1d:46:8e: 48:7a:31:a6:37:74:f9:73:aa:9f:75:40:29:56:14: 8f:b6:bd:8a:11:97:15:4c:7b:d2:50:19:a4:fb:fc: 86:27:38:18:5e:61:fd:ba:36:1c:7c:c1:77:40:c3: 6a:98:e9:3e:cb:cc:2a:22:50:89:e0:33:bc:a2:85: 49:70:7d:d7:9f:bc:7a:eb:83:12:d3:29:f5:80:5e: 08:ec:45:66:6c:f5:70:e0:c2:76:38:58:78:e3:ed: d8:87:4b:2c:fd:e2:34:d7:fe:9a:7f:4e:88:1f:1f: b7:89:3f:0a:a3:10:79:ab:0b:73:18:49:17:87:6d: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:0B:66:25:42:44:AD:AA:90:71:4F:CC:DF:77:B0:5D:28:A3:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.114.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d0:a3:a7:12:b8:c5:fd:4c:79:e0:34:86:47:19:52:eb:64: 26:cd:78:4d:6d:52:ff:8c:fb:18:48:3c:29:b1:b5:90:82:44: 71:1c:a9:48:ce:e2:cc:7d:e9:c8:85:26:c0:93:83:1e:00:59: d8:88:b0:04:15:dd:c8:2a:18:1c:5a:4f:2a:3a:a4:c4:a5:c1: 2e:28:55:2a:bd:1a:f2:99:d5:71:21:d2:de:29:83:1a:e4:90: d1:dd:d5:5d:13:1f:2a:02:97:18:0f:fd:35:dc:ed:37:70:94: 37:66:3f:b8:cd:0b:bd:30:20:c1:14:ae:f2:fb:3f:22:eb:53: 6c:3e:af:8b:d9:be:ea:3d:20:76:7a:c5:b4:29:4e:91:8c:78: 1c:aa:4c:51:90:43:68:c1:35:fb:5d:c6:dc:5c:59:d2:db:fb: 4f:26:b0:e7:34:03:d4:83:0d:3d:dd:8a:15:37:18:4d:0d:c6: f9:a8:22:5b:58:6f:9f:a7:c3:4c:06:cc:07:2d:a5:03:eb:b5: c9:53:7d:d9:5f:7a:b9:22:f1:e2:2f:6f:71:2d:dd:4d:e5:90: e4:b6:f9:7f:a8:62:a8:99:a9:fb:81:d4:1b:8b:c6:24:82:a8: 1b:95:42:ab:38:42:54:15:35:29:1e:ab:2a:70:8b:3a:71:21: 4a:37:42:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlp0IMx5lz3KdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDQwYWYwYTItY2E5Mi00MDU4LTg5ODItYzBkMDdiMjAwZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpgEIeObAosjAz62jeG1VpFMc0oNuLTyKN3N jfisGFItEWWoWFIEkeHyfF+kRYjP8gj37y7UN1GLKBVr98gO/bJ1wE471a6HHsVt DoAlg2K015nmQnXU8wLjeahpnZ4KiXi7REfCcd9w5uIojb4hsf8+E54+MmaYO/hL eXaBbUvf+UEdRo5IejGmN3T5c6qfdUApVhSPtr2KEZcVTHvSUBmk+/yGJzgYXmH9 ujYcfMF3QMNqmOk+y8wqIlCJ4DO8ooVJcH3Xn7x664MS0yn1gF4I7EVmbPVw4MJ2 OFh44+3Yh0ss/eI01/6af06IHx+3iT8KoxB5qwtzGEkXh20+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuvC2YlQkStqpBxT8zfd7BdKKNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZWZkNDhmZWEtZmJiMS0z MjY4LWE5YTEtNGY5Y2FhMDgxYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHQo6cSuMX9THngNIZHGVLrZCbNeE1tUv+M+xhIPCmxtZCCRHEcqUjO 4sx96ciFJsCTgx4AWdiIsAQV3cgqGBxaTyo6pMSlwS4oVSq9GvKZ1XEh0t4pgxrk kNHd1V0THyoClxgP/TXc7TdwlDdmP7jNC70wIMEUrvL7PyLrU2w+r4vZvuo9IHZ6 xbQpTpGMeByqTFGQQ2jBNftdxtxcWdLb+08msOc0A9SDDT3dihU3GE0NxvmoIltY b5+nw0wGzActpQPrtclTfdlferki8eIvb3Et3U3lkOS2+X+oYqiZqfuB1BuLxiSC qBuVQqs4QlQVNSkeqypwizpxIUo3QiA= -----END CERTIFICATE-----Generated at Fri Mar 13 13:15:44 2026 by rpki-client