$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797/9bc96e8e-4c49-3ad2-863b-d13343998451.roa File: 9bc96e8e-4c49-3ad2-863b-d13343998451.roa (raw, json) Hash identifier: mV2Go+0iUCbx7bXxiQwsS+1xsv5/bFxVYJ4m7xLbmDw= Subject key identifier: C6:DD:28:7F:32:5D:80:99:D0:F5:32:29:58:D6:9C:4D:40:E4:20:1B Certificate issuer: /CN=f8b26663-125a-4b8a-8368-945b44df4797 Certificate serial: 010D0C9F4328584D1608FFC3C07C568D2654D400 Authority key identifier: C7:A0:DC:95:48:56:D3:0C:16:4C:CE:0F:E1:88:20:20:CE:A6:68:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797/9bc96e8e-4c49-3ad2-863b-d13343998451.roa Signing time: Sat 07 Mar 2026 05:27:29 +0000 ROA not before: Sat 07 Mar 2026 05:27:29 +0000 ROA not after: Fri 05 Jun 2026 04:27:29 +0000 asID: 8075 IP address blocks: 204.137.21.0/24 maxlen: 24 204.137.22.0/24 maxlen: 24 204.137.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797/f8b26663-125a-4b8a-8368-945b44df4797.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797/f8b26663-125a-4b8a-8368-945b44df4797.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:16:08:ff:c3:c0:7c:56:8d:26:54:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b26663-125a-4b8a-8368-945b44df4797 Validity Not Before: Mar 7 05:27:29 2026 GMT Not After : Jun 5 04:27:29 2026 GMT Subject: CN=21f6040f-25f6-49fe-a561-13cfe887e879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:aa:bb:ad:92:9e:d0:fc:55:ea:a5:f4:d2: 12:1e:9d:26:74:87:ea:91:6c:18:b3:fd:5c:bd:a4: d9:d0:18:20:7d:a3:89:dd:f6:d5:35:0a:cb:37:9e: 45:9e:36:b8:a8:f5:09:1a:d9:4c:c5:4f:85:41:1b: 9f:2a:d0:9c:89:b1:2a:27:f6:c8:c2:2f:0a:0b:cf: 46:01:a2:75:c9:58:44:25:f1:6a:2a:9d:52:03:35: 4f:5d:08:4c:d0:8e:17:7c:9d:b9:2c:ca:6b:b2:36: 93:e1:22:c8:7d:06:4c:8b:34:e2:96:04:29:5f:e4: fe:5f:ff:3e:17:8f:81:4b:60:54:71:91:9a:c1:f0: 0b:f5:b3:33:a5:b0:45:07:ab:d8:5e:3b:c4:32:e7: 9b:c0:50:42:bd:dd:89:17:03:b1:a5:c4:a3:3b:e7: 37:c6:6f:c9:b1:72:c3:c8:40:67:89:40:af:37:71: cc:78:f3:bf:0c:b7:36:54:26:e2:bd:af:4b:0d:25: 79:75:b9:64:e4:56:30:04:45:98:3a:7a:3b:30:2f: 80:94:26:23:13:78:fa:e5:f6:f9:a3:6f:1e:0f:cc: 88:f7:5e:3c:e0:38:f9:70:39:52:0b:1c:ff:11:84: 53:ca:98:5e:80:99:3a:5e:4c:67:c8:0d:5f:0b:ca: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:28:7F:32:5D:80:99:D0:F5:32:29:58:D6:9C:4D:40:E4:20:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797/9bc96e8e-4c49-3ad2-863b-d13343998451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797/f8b26663-125a-4b8a-8368-945b44df4797.crl X509v3 Authority Key Identifier: keyid:C7:A0:DC:95:48:56:D3:0C:16:4C:CE:0F:E1:88:20:20:CE:A6:68:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f8b26663-125a-4b8a-8368-945b44df4797.cer sbgp-ipAddrBlock: critical IPv4: 204.137.21.0-204.137.23.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:df:d8:ed:75:5a:21:00:4c:b8:16:c0:75:13:d4:70:a8:6f: 99:6c:c4:52:de:1b:da:dd:77:30:c2:58:26:4c:53:ad:15:5b: fd:68:80:ea:61:dc:73:18:d0:8c:df:9b:6b:1c:2f:bb:48:db: 11:62:37:d8:b1:f1:6b:08:38:d0:0e:b1:b6:42:38:d6:55:4e: d3:7f:6a:85:b9:de:f0:41:59:aa:b7:3a:1c:b9:92:b3:c9:b1: b5:3a:3c:e4:ca:78:03:73:ba:be:c3:09:d9:00:34:ae:92:79: 3e:c4:9c:46:1e:0d:45:56:0b:5d:98:78:e9:e5:ad:25:2c:be: 35:fd:b6:52:8e:a8:a7:bc:db:1b:3c:b6:3d:56:48:a5:04:27: 4a:db:68:13:dc:8d:6f:fb:86:ca:b6:59:c6:9d:6c:0d:38:f4: 47:33:21:e3:b4:60:bb:08:da:4d:62:ee:0a:1f:70:a1:0e:5a: e8:f5:3a:6d:e8:4a:73:fd:ae:31:0d:58:65:bd:a7:3d:ec:b0: 4c:2f:92:67:00:2a:d0:02:ee:c7:6b:db:e6:71:2b:ef:c4:8c: fe:d2:5e:94:82:c1:a1:c2:5a:9a:49:f5:9e:79:5b:ae:94:1d: 1c:24:6b:83:a4:1f:84:37:25:95:58:26:67:ac:e8:6e:b9:6c: d8:e5:5e:5b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0WCP/DwHxWjSZU1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiMjY2NjMtMTI1YS00YjhhLTgzNjgtOTQ1YjQ0ZGY0 Nzk3MB4XDTI2MDMwNzA1MjcyOVoXDTI2MDYwNTA0MjcyOVowLzEtMCsGA1UEAxMk MjFmNjA0MGYtMjVmNi00OWZlLWE1NjEtMTNjZmU4ODdlODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3+qu62SntD8Veql9NISHp0mdIfqkWwYs/1c vaTZ0BggfaOJ3fbVNQrLN55Fnja4qPUJGtlMxU+FQRufKtCcibEqJ/bIwi8KC89G AaJ1yVhEJfFqKp1SAzVPXQhM0I4XfJ25LMprsjaT4SLIfQZMizTilgQpX+T+X/8+ F4+BS2BUcZGawfAL9bMzpbBFB6vYXjvEMuebwFBCvd2JFwOxpcSjO+c3xm/JsXLD yEBniUCvN3HMePO/DLc2VCbiva9LDSV5dblk5FYwBEWYOno7MC+AlCYjE3j65fb5 o28eD8yI91484Dj5cDlSCxz/EYRTyphegJk6XkxnyA1fC8r+yQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMbdKH8yXYCZ0PUyKVjWnE1A5CAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOGIy NjY2My0xMjVhLTRiOGEtODM2OC05NDViNDRkZjQ3OTcvOWJjOTZlOGUtNGM0OS0z YWQyLTg2M2ItZDEzMzQzOTk4NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjhiMjY2NjMtMTI1YS00YjhhLTgz NjgtOTQ1YjQ0ZGY0Nzk3L2Y4YjI2NjYzLTEyNWEtNGI4YS04MzY4LTk0NWI0NGRm NDc5Ny5jcmwwHwYDVR0jBBgwFoAUx6DclUhW0wwWTM4P4YggIM6maDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mOGIyNjY2My0xMjVhLTRiOGEtODM2OC05NDVi NDRkZjQ3OTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMiRUD BAPMiRAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAl9/Y7XVaIQBMuBbAdRPUcKhvmWzEUt4b2t13MMJYJkxT rRVb/WiA6mHccxjQjN+baxwvu0jbEWI32LHxawg40A6xtkI41lVO039qhbne8EFZ qrc6HLmSs8mxtTo85Mp4A3O6vsMJ2QA0rpJ5PsScRh4NRVYLXZh46eWtJSy+Nf22 Uo6op7zbGzy2PVZIpQQnSttoE9yNb/uGyrZZxp1sDTj0RzMh47RguwjaTWLuCh9w oQ5a6PU6behKc/2uMQ1YZb2nPeywTC+SZwAq0ALux2vb5nEr78SM/tJelILBocJa mkn1nnlbrpQdHCRrg6QfhDcllVgmZ6zobrls2OVeWw== -----END CERTIFICATE-----Generated at Tue Mar 10 08:28:04 2026 by rpki-client