$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa File: ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa (raw, json) Hash identifier: D28MxXHsxmlVkoCyncgQF75gaM/JzT6Cyn/d4S/uCGI= Subject key identifier: BB:99:2F:0A:E0:D9:F6:2B:ED:F0:9A:02:6E:5F:67:8E:69:C6:FE:D9 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584D07ACF8A9AECDC9E9DCC324C0 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 10482 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f8:a9:ae:cd:c9:e9:dc:c3:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=439bff33-7b3b-45cb-822e-8f3ca4d0d006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:6f:b1:52:9b:81:da:11:b0:a1:e3:7f:24: 98:e2:f2:c0:dc:a9:a3:cf:06:d2:14:e5:32:93:33: 69:f5:10:84:8d:b3:f8:7f:25:a0:db:dd:c3:c4:58: 89:78:17:62:96:27:ff:d9:1d:b2:67:37:e3:9d:6c: 5b:25:a4:30:53:59:12:38:08:cf:e1:d2:3d:b2:ce: 08:1b:81:82:05:f1:d0:a2:52:d3:28:ea:cc:81:b1: b5:68:a2:3c:a2:99:d2:80:6f:1f:ec:ec:cd:b2:da: 1e:1b:75:65:c4:54:81:be:85:09:a3:31:2d:81:a2: 4a:52:3c:d5:f8:3f:7e:21:26:aa:6a:ad:1d:76:08: d8:c8:91:f0:12:95:a1:2a:8b:61:ea:7f:9d:bc:61: 9f:aa:28:04:03:ec:ef:14:53:1d:20:ac:b0:4e:78: fb:51:9c:73:43:74:e8:f1:da:e2:9e:2c:d0:6c:1f: 05:63:22:6c:91:27:b0:f0:61:71:e2:50:23:f5:e1: 42:ce:47:c6:2a:ad:2a:1a:6a:0b:95:98:f7:50:ae: 54:93:aa:9f:8b:68:31:88:76:f2:59:a6:8c:b5:7f: ff:36:8b:31:58:d4:ee:6f:98:2d:fd:7c:e2:ca:65: b4:db:44:98:c9:00:9d:fa:60:11:1a:ac:6e:61:d5: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:99:2F:0A:E0:D9:F6:2B:ED:F0:9A:02:6E:5F:67:8E:69:C6:FE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:fe:47:1a:eb:7d:23:a0:3c:4f:b6:82:ae:1f:cf:9f:c4: c8:a3:ef:3c:4b:56:81:47:1b:de:4c:b7:6f:f0:f0:69:d5:9a: 65:77:9b:b2:54:51:51:02:f4:33:86:32:50:0c:8a:11:b3:93: 7f:c1:44:19:3d:41:54:ac:bb:6d:e4:5c:f0:ce:e4:1b:85:37: 5f:7a:fe:e3:2a:69:8a:1e:d7:93:80:b6:f5:10:d2:d2:5a:a3: e5:34:01:88:e3:80:fd:3f:bc:16:94:19:83:eb:65:fd:f6:cd: 6c:ae:50:69:a7:b4:2c:27:3d:e2:32:15:0c:ba:9c:49:ab:1e: 80:e0:fa:dd:c1:74:ed:ca:b8:28:f5:9b:7b:0b:15:30:e8:20: 13:ae:1c:2f:23:57:ae:0f:64:ae:a4:04:39:46:a2:34:19:08: 20:08:f8:87:35:21:35:f3:98:fb:63:ff:c9:03:14:4e:b8:0e: ed:13:b7:d3:d8:64:d5:c5:2d:22:04:52:0f:ee:79:8f:4b:9d: ab:ac:5d:80:4d:46:a3:8e:35:83:64:75:b1:8f:d8:b0:fc:e1: 3e:50:1a:32:82:cd:df:07:22:75:1a:fb:b2:22:95:bc:2a:53: c6:7c:dc:ef:4e:d1:26:d1:c3:ad:54:93:20:b0:99:d0:bb:2f: 5a:cb:32:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPiprs3J6dzDJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NDM5YmZmMzMtN2IzYi00NWNiLTgyMmUtOGYzY2E0ZDBkMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui5vsVKbgdoRsKHjfySY4vLA3KmjzwbSFOUy kzNp9RCEjbP4fyWg293DxFiJeBdilif/2R2yZzfjnWxbJaQwU1kSOAjP4dI9ss4I G4GCBfHQolLTKOrMgbG1aKI8opnSgG8f7OzNstoeG3VlxFSBvoUJozEtgaJKUjzV +D9+ISaqaq0ddgjYyJHwEpWhKoth6n+dvGGfqigEA+zvFFMdIKywTnj7UZxzQ3To 8drinizQbB8FYyJskSew8GFx4lAj9eFCzkfGKq0qGmoLlZj3UK5Uk6qfi2gxiHby WaaMtX//NosxWNTub5gt/XziymW020SYyQCd+mARGqxuYdWopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuZLwrg2fYr7fCaAm5fZ45pxv7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvZmY2ZmFjZGUtNmNmNy0z YjRjLThmMmUtM2Q5NzVmNWZlNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuH/kca630joDxPtoKuH8+fxMij7zxLVoFHG95Mt2/w8GnVmmV3m7JU UVEC9DOGMlAMihGzk3/BRBk9QVSsu23kXPDO5BuFN196/uMqaYoe15OAtvUQ0tJa o+U0AYjjgP0/vBaUGYPrZf32zWyuUGmntCwnPeIyFQy6nEmrHoDg+t3BdO3KuCj1 m3sLFTDoIBOuHC8jV64PZK6kBDlGojQZCCAI+Ic1ITXzmPtj/8kDFE64Du0Tt9PY ZNXFLSIEUg/ueY9LnausXYBNRqOONYNkdbGP2LD84T5QGjKCzd8HInUa+7Iilbwq U8Z83O9O0SbRw61UkyCwmdC7L1rLMtg= -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:03 2026 by rpki-client