$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa File: bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa (raw, json) Hash identifier: UeTuH2rIcdOW+8yXvsVz4xcUI1YNw/Rw4eYQVKH+RJ8= Subject key identifier: 16:18:42:36:70:71:38:A1:BF:D4:D8:7E:83:12:5F:8E:42:E3:04:00 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584D07ACF8F1385F07FF9650F400 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 6327 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f8:f1:38:5f:07:ff:96:50:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=aa250af7-5c01-419f-9f12-e8816d55da18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:eb:86:b0:99:6f:5a:5a:36:2f:8d:25:48: 1d:c1:ff:ce:7d:04:ed:f8:e2:66:b4:68:fb:54:c2: 53:89:f6:42:6a:a4:2c:5d:4b:db:3b:50:f3:37:02: 73:f2:bb:ba:71:58:8d:06:9a:84:1a:ae:a2:cb:32: 8b:5e:3e:49:fe:c2:27:99:59:80:27:5e:90:a4:de: aa:59:df:c6:d1:90:28:50:76:0d:fb:27:bd:8d:ab: ef:32:d9:e7:9d:84:b2:58:65:e3:af:f6:60:ae:6b: 2d:48:30:25:68:65:5a:92:46:66:a0:1d:a0:1e:d0: 1b:55:5b:59:3b:82:10:8f:7e:75:c5:11:dc:00:c9: 0b:e2:f9:3a:ce:6d:72:97:d7:00:7c:e8:65:d3:08: 7e:cf:e9:85:ac:a8:05:15:79:cc:a0:38:b1:bb:36: a5:08:e8:2b:f6:59:64:03:4e:ad:85:8d:58:3b:bd: 62:eb:26:df:d2:a6:75:c8:dc:3e:d0:46:62:83:77: 56:e5:32:d1:86:0e:bd:43:68:7d:20:1c:e7:83:31: 79:74:e9:2f:7d:be:ac:5d:09:f1:ca:7f:41:6a:cf: 4d:35:c9:90:96:94:6e:ec:c3:f0:01:3e:b5:d3:69: 5e:97:72:c2:2e:84:de:79:7c:15:84:6f:31:c7:89: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:18:42:36:70:71:38:A1:BF:D4:D8:7E:83:12:5F:8E:42:E3:04:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:30:ea:15:cf:2d:6e:65:2b:01:82:8c:d3:f4:ee:93:3d:9e: 2e:70:88:78:37:e9:e2:2b:37:15:1d:54:0b:07:e2:e3:31:c0: a7:cb:c0:93:3a:f2:3d:94:1e:bf:b4:53:80:8e:e3:52:86:27: 3c:29:f5:09:4c:e2:62:e4:5c:d8:6f:ad:b9:35:9d:94:79:a7: 3d:72:59:a2:78:20:d2:86:1b:b8:6e:38:ff:d6:21:c2:09:15: cb:74:fc:ff:63:e0:1f:55:57:c5:44:b8:48:32:9b:fe:d8:77: 45:72:b4:c2:fc:c5:ed:ed:79:3d:5f:49:c3:76:eb:6f:5b:a9: 8a:71:02:c6:68:e0:04:d3:3f:54:ac:cc:06:7d:bc:ed:c6:c0: 10:69:dd:31:81:9c:40:cc:a5:27:e6:e1:15:ef:aa:c3:52:84: 09:b3:28:44:1d:01:ac:d6:6f:e4:d0:46:d0:d6:34:25:77:87: 27:3f:d1:9f:ce:96:2f:5c:f9:c4:e9:a2:2c:a6:47:20:ad:22: 30:91:d8:1e:28:17:fe:26:f5:f9:65:75:fb:ef:8f:85:17:85: b1:52:ca:e9:6c:ba:73:67:ae:b5:7b:2f:eb:99:49:3c:b1:fd: 09:14:9c:17:05:a4:ca:33:17:01:3a:d0:79:c7:0d:76:09:89: b0:1a:64:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPjxOF8H/5ZQ9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YWEyNTBhZjctNWMwMS00MTlmLTlmMTItZTg4MTZkNTVkYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NrrhrCZb1paNi+NJUgdwf/OfQTt+OJmtGj7 VMJTifZCaqQsXUvbO1DzNwJz8ru6cViNBpqEGq6iyzKLXj5J/sInmVmAJ16QpN6q Wd/G0ZAoUHYN+ye9javvMtnnnYSyWGXjr/ZgrmstSDAlaGVakkZmoB2gHtAbVVtZ O4IQj351xRHcAMkL4vk6zm1yl9cAfOhl0wh+z+mFrKgFFXnMoDixuzalCOgr9llk A06thY1YO71i6ybf0qZ1yNw+0EZig3dW5TLRhg69Q2h9IBzngzF5dOkvfb6sXQnx yn9Bas9NNcmQlpRu7MPwAT6102lel3LCLoTeeXwVhG8xx4mcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYYQjZwcTihv9TYfoMSX45C4wQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvYmRiMmZjZGYtMWUwNC0z Y2IyLTkwODMtYjIxMWQ5YjU2NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADww6hXPLW5lKwGCjNP07pM9ni5wiHg36eIrNxUdVAsH4uMxwKfLwJM6 8j2UHr+0U4CO41KGJzwp9QlM4mLkXNhvrbk1nZR5pz1yWaJ4INKGG7huOP/WIcIJ Fct0/P9j4B9VV8VEuEgym/7Yd0VytML8xe3teT1fScN2629bqYpxAsZo4ATTP1Ss zAZ9vO3GwBBp3TGBnEDMpSfm4RXvqsNShAmzKEQdAazWb+TQRtDWNCV3hyc/0Z/O li9c+cTpoiymRyCtIjCR2B4oF/4m9flldfvvj4UXhbFSyulsunNnrrV7L+uZSTyx /QkUnBcFpMozFwE60HnHDXYJibAaZFQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:52 2026 by rpki-client