$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa File: 34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa (raw, json) Hash identifier: svb4axge6wP2rbCb8ZzTY6wf5028nVOBEn8XOsPzpEw= Subject key identifier: 78:1E:38:3C:4E:EB:BA:E2:73:53:B7:0B:76:B9:01:1F:26:49:D7:04 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584D667A53502C042CDA22CB8580 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 3257 IP address blocks: 204.9.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:53:50:2c:04:2c:da:22:cb:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=978100a9-5d24-4531-b9bb-ac90fa8a908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:05:c4:cc:29:4e:d6:6a:7a:6d:3d:c0:41:80: 8d:57:96:25:00:5c:9b:1a:46:dc:8c:c6:c5:00:e8: a9:e9:b9:7b:e1:71:9f:e8:14:9e:53:62:15:9a:28: 92:16:10:4b:96:30:07:a2:97:36:7a:83:fd:62:4c: f2:56:50:ef:76:f1:52:f5:38:15:c0:b1:e5:5c:95: fe:5f:81:64:48:c5:8d:c1:29:3b:8e:f0:1e:79:fc: 8d:55:be:4a:19:d2:49:c9:f4:4e:c8:10:62:6f:39: 08:21:4f:b3:db:9d:e3:72:ac:50:62:eb:5f:b4:bf: 10:da:68:aa:b9:27:b1:e6:7c:aa:10:a4:e9:0d:01: 00:a6:95:49:15:9c:b1:fc:de:84:b6:33:18:82:4f: ee:d2:53:6c:8b:5c:95:2b:e7:3a:62:0a:c6:cb:88: 08:10:d1:62:a4:d9:ef:bd:20:3e:f2:f8:84:9e:a6: 1f:a5:3f:26:a0:39:20:ae:2c:c5:16:75:8e:5f:aa: cb:63:bc:c5:00:15:7a:2b:64:ab:65:f3:97:ca:23: a2:98:6c:79:5c:3e:c0:56:8b:a8:02:ec:89:c6:32: 24:84:e7:f0:2b:f7:e7:48:ec:be:11:b2:30:a3:57: 52:ef:47:b9:52:f0:35:b0:c4:b3:77:57:49:9b:fe: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:38:3C:4E:EB:BA:E2:73:53:B7:0B:76:B9:01:1F:26:49:D7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 204.9.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:36:65:5f:6e:4d:7d:db:8f:67:f6:fb:1a:3a:70:15:be:58: b8:8e:5a:7c:d6:6c:6a:36:7e:c3:c2:4f:d9:d9:34:14:5c:9b: d2:4f:e0:c3:8b:03:1d:39:8a:13:dc:92:e8:c8:82:32:d8:c9: 4d:be:b6:84:8d:12:ff:d2:d9:59:93:cb:a6:d4:a7:79:e0:80: 9a:08:b1:06:f6:6e:d1:bc:e5:cc:f9:d9:28:c1:e1:99:46:1d: 06:b9:7d:34:73:2f:96:80:ea:26:f7:c9:52:f7:46:f4:06:67: ca:54:9a:e1:73:82:5f:ec:43:f1:9b:c1:bd:88:57:6d:14:92: d4:e2:7b:b6:58:35:49:c3:af:9b:c6:4f:d5:9d:8a:28:bf:d4: a6:86:c3:5d:41:6c:dc:9a:66:7b:33:88:22:06:e2:95:db:11: e2:fd:69:c5:00:52:25:37:00:82:a6:a5:dc:3e:5c:5c:9a:23: a3:2d:d9:29:a5:a6:c8:d2:56:ea:22:05:89:5c:77:2e:cd:96: e3:ed:cd:e5:00:d2:05:41:73:24:ff:f1:4f:4b:6a:e8:0e:44: 45:6a:28:e3:7b:f0:91:55:cd:8b:e7:1a:2f:7f:27:52:c5:c4: 15:ea:e3:04:16:11:ef:18:22:d8:bc:2e:55:59:2c:6a:e8:88: 6f:ed:bd:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melNQLAQs2iLLhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk OTc4MTAwYTktNWQyNC00NTMxLWI5YmItYWM5MGZhOGE5MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAXEzClO1mp6bT3AQYCNV5YlAFybGkbcjMbF AOip6bl74XGf6BSeU2IVmiiSFhBLljAHopc2eoP9YkzyVlDvdvFS9TgVwLHlXJX+ X4FkSMWNwSk7jvAeefyNVb5KGdJJyfROyBBibzkIIU+z253jcqxQYutftL8Q2miq uSex5nyqEKTpDQEAppVJFZyx/N6EtjMYgk/u0lNsi1yVK+c6YgrGy4gIENFipNnv vSA+8viEnqYfpT8moDkgrizFFnWOX6rLY7zFABV6K2SrZfOXyiOimGx5XD7AVouo AuyJxjIkhOfwK/fnSOy+EbIwo1dS70e5UvA1sMSzd1dJm/52HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgeODxO67ric1O3C3a5AR8mSdcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMzRhN2VlZWEtODAzMC0z MmViLWJkMzYtY2FmYTQ0YTFlNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAk7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALg2ZV9uTX3bj2f2+xo6cBW+WLiOWnzWbGo2fsPCT9nZNBRcm9JP4MOL Ax05ihPckujIgjLYyU2+toSNEv/S2VmTy6bUp3nggJoIsQb2btG85cz52SjB4ZlG HQa5fTRzL5aA6ib3yVL3RvQGZ8pUmuFzgl/sQ/Gbwb2IV20UktTie7ZYNUnDr5vG T9Wdiii/1KaGw11BbNyaZnsziCIG4pXbEeL9acUAUiU3AIKmpdw+XFyaI6Mt2Sml psjSVuoiBYlcdy7NluPtzeUA0gVBcyT/8U9LaugOREVqKON78JFVzYvnGi9/J1LF xBXq4wQWEe8YIti8LlVZLGroiG/tvXE= -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:08 2026 by rpki-client