$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03386b3d-f357-38ca-9477-a17b49756beb.roa File: 03386b3d-f357-38ca-9477-a17b49756beb.roa (raw, json) Hash identifier: rJggJbonAhbl4lTZ1QICGrA0ZP+CQw0DtNzNDhzc5Ww= Subject key identifier: 2B:C4:23:7A:B3:13:3F:E9:BA:FE:B5:81:E1:C3:0F:11:9C:CC:03:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D93254B28B060F6BE46377C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03386b3d-f357-38ca-9477-a17b49756beb.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 213120 IP address blocks: 209.200.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4b:28:b0:60:f6:be:46:37:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=2d556006-35db-4691-b417-f442d1a2342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:0f:ec:8f:a3:ab:49:f4:06:43:c0:fc:4c: a2:55:f8:3d:ad:05:fe:4b:56:cb:35:7d:dd:ae:22: 3f:4b:e5:ed:9b:5f:aa:90:be:9e:6c:d9:ab:ea:1b: e9:ed:1b:b1:f6:a6:b6:e3:c1:3d:90:62:2a:6f:22: 65:87:5b:ab:43:d6:33:d6:51:2f:83:55:98:7d:b5: 8d:59:70:c4:f5:a4:b8:c3:1d:8c:29:b4:7d:60:4e: 5d:4e:15:1f:fc:d5:94:83:0d:69:6a:1c:2e:b6:7d: 56:c1:de:c8:8a:0a:80:d7:84:c2:b4:13:01:36:bb: 03:56:f7:b4:b8:2c:56:05:e3:d4:62:6a:81:02:5f: cf:12:ee:a2:e4:a0:38:56:58:b3:b2:97:0d:46:bc: b7:eb:d5:52:c4:d4:b5:31:7f:ad:3a:36:c4:11:b3: d4:6a:77:a3:f4:29:e2:01:f3:2c:62:cc:f4:78:d7: eb:32:b2:aa:85:69:4f:be:3d:13:34:e6:b0:7d:f6: 89:bc:70:f0:76:79:5f:30:ac:80:d8:ce:16:b9:17: cf:ad:5e:a0:08:ac:92:7c:71:28:4c:a3:fa:8a:34: ae:8c:47:48:52:71:f6:06:42:dd:e2:ba:29:5c:14: c4:b9:80:12:2f:cc:df:08:0e:30:5d:c9:43:08:ac: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:23:7A:B3:13:3F:E9:BA:FE:B5:81:E1:C3:0F:11:9C:CC:03:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03386b3d-f357-38ca-9477-a17b49756beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2f:05:67:c6:c7:05:40:db:7a:d8:b1:4c:36:8b:08:61:84: 89:55:b0:4a:22:98:a9:4b:29:0c:34:42:42:51:3d:8d:10:37: e5:2c:c1:59:84:c8:d5:af:7d:e4:54:c8:5a:9e:a7:3f:ce:5c: c0:94:5a:b2:77:4c:4e:3c:bb:16:8e:37:a1:e6:a9:98:bf:5d: 21:56:7c:bf:a8:3d:d7:85:ee:71:3c:2b:88:f4:af:97:dd:c0: d4:f9:7d:2f:d3:66:96:aa:99:78:2e:20:a3:f1:6e:81:38:6d: 12:d6:3d:0c:06:fe:43:82:5f:66:ea:91:97:81:cd:5b:27:15: 85:0f:d8:5e:65:52:a9:92:ee:f4:6a:db:5b:76:c3:0b:71:9c: 2e:de:24:70:fc:65:dd:6f:de:ea:b1:dd:94:0d:23:f6:54:25: f9:c8:f0:fa:38:8a:5e:fc:6c:51:f6:48:39:04:77:fb:b0:cc: 6d:63:23:dc:51:6c:1d:00:7a:8d:7a:1a:f3:b5:0b:b4:47:b8: ad:d2:74:c4:f4:d2:36:94:36:ef:9d:b4:01:a3:e2:e6:15:42: 1e:e0:62:f8:6a:ac:34:76:da:02:1e:98:ad:77:16:9a:24:d8: f5:71:2c:88:0b:2f:d6:c4:f0:6b:39:4e:ff:39:70:0d:b3:4f: 6b:7e:59:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUsosGD2vkY3fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MmQ1NTYwMDYtMzVkYi00NjkxLWI0MTctZjQ0MmQxYTIzNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH0P7I+jq0n0BkPA/EyiVfg9rQX+S1bLNX3d riI/S+Xtm1+qkL6ebNmr6hvp7Rux9qa248E9kGIqbyJlh1urQ9Yz1lEvg1WYfbWN WXDE9aS4wx2MKbR9YE5dThUf/NWUgw1pahwutn1Wwd7IigqA14TCtBMBNrsDVve0 uCxWBePUYmqBAl/PEu6i5KA4VlizspcNRry369VSxNS1MX+tOjbEEbPUanej9Cni AfMsYsz0eNfrMrKqhWlPvj0TNOawffaJvHDwdnlfMKyA2M4WuRfPrV6gCKySfHEo TKP6ijSujEdIUnH2BkLd4ropXBTEuYASL8zfCA4wXclDCKw4xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvEI3qzEz/puv61geHDDxGczAP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDMzODZiM2QtZjM1Ny0z OGNhLTk0NzctYTE3YjQ5NzU2YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0vBWfGxwVA23rYsUw2iwhhhIlVsEoimKlLKQw0QkJRPY0QN+UswVmE yNWvfeRUyFqepz/OXMCUWrJ3TE48uxaON6HmqZi/XSFWfL+oPdeF7nE8K4j0r5fd wNT5fS/TZpaqmXguIKPxboE4bRLWPQwG/kOCX2bqkZeBzVsnFYUP2F5lUqmS7vRq 21t2wwtxnC7eJHD8Zd1v3uqx3ZQNI/ZUJfnI8Po4il78bFH2SDkEd/uwzG1jI9xR bB0Aeo16GvO1C7RHuK3SdMT00jaUNu+dtAGj4uYVQh7gYvhqrDR22gIemK13Fpok 2PVxLIgLL9bE8Gs5Tv85cA2zT2t+WVA= -----END CERTIFICATE-----Generated at Tue Apr 21 20:43:48 2026 by rpki-client