$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa File: a98302e0-6fdd-34c6-ae18-5ecfece042af.roa (raw, json) Hash identifier: QRq65gIb8fz5qhYE2OnvadCngPjJJxv9eXtx7EYlc48= Subject key identifier: 09:3A:5A:9D:BC:FC:05:35:0B:B6:FB:37:AA:5E:35:6B:3A:73:CF:7B Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584D4D5A543C1297F5A16727C700 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7782 IP address blocks: 204.17.139.0/24 maxlen: 24 204.17.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:54:3c:12:97:f5:a1:67:27:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=0b542d7f-d404-4ad5-b89f-2cd20e593955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:7c:7b:84:dd:74:b8:ce:db:9c:77:33:a7: 36:97:30:50:5e:b1:85:69:8d:9f:e7:43:8f:5f:6e: cc:20:1f:d4:b3:56:50:84:ce:35:54:18:a0:58:5f: e2:75:26:9f:89:c2:2b:19:24:35:7b:8b:2c:50:33: 82:2e:ab:ff:02:c3:62:19:ca:87:f2:db:a3:7b:19: c7:00:7b:92:9a:6a:d3:fb:6d:61:b3:55:c5:3e:e2: 78:91:fc:21:7d:f6:52:5f:0b:08:26:1d:a9:1a:85: e9:6d:9d:49:57:11:0f:17:91:c4:de:7c:1f:05:9c: 22:b2:85:c3:15:8c:d8:7d:63:9e:11:d2:cc:f0:6e: 0c:66:7c:c5:a6:27:b6:c7:86:4b:72:88:0b:e0:69: 66:f0:8f:04:6f:a2:c0:b7:84:9b:23:c1:cb:c4:2b: 78:89:64:27:a2:a4:63:dd:07:1f:d7:a9:c6:2c:1e: b9:a6:f7:d6:c0:b8:dd:ba:65:af:c5:11:fe:95:0d: a1:d2:60:0b:72:53:b5:72:73:17:f5:d8:08:a0:87: 8a:76:36:ba:00:3c:4e:cf:f6:a8:fd:1d:d7:53:6e: a6:c5:51:b5:17:db:3b:32:a8:68:0a:d3:32:38:0f: db:c1:bd:75:0b:3a:28:91:69:01:17:1d:ce:17:78: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:5A:9D:BC:FC:05:35:0B:B6:FB:37:AA:5E:35:6B:3A:73:CF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 204.17.139.0-204.17.140.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cf:2c:27:a7:34:08:0d:9e:33:a7:c0:4e:b7:fd:70:a1:3a: a0:9a:52:98:69:fe:e2:1f:28:32:74:a2:d5:0c:fc:0d:8f:cc: 07:fb:1e:a5:92:03:bf:d0:b6:08:29:03:ab:45:57:89:68:79: 72:d1:33:93:9a:f4:cf:50:9c:74:06:ee:bf:06:9e:85:c5:8b: 9c:76:b1:94:fb:f4:df:97:7d:2e:b0:a1:a1:80:67:93:83:9d: bd:dd:fd:71:0f:1d:6f:65:5b:25:06:02:07:a8:23:f2:0a:3a: f8:e0:8a:dc:1f:2d:d9:13:c8:29:4b:20:87:ff:ca:de:4b:18: 92:e4:d4:2e:26:27:60:a9:ba:6c:ab:61:09:d2:6a:bf:2a:1d: 2b:6c:b7:68:aa:d2:9a:46:6c:af:21:0e:21:39:ba:db:18:3a: e9:a3:98:0c:3b:02:10:42:40:85:41:ce:b0:96:2d:da:ea:cf: dd:85:6f:83:d9:d7:e7:bb:06:89:62:19:1c:cd:3a:3c:3c:0b: 28:65:be:98:5f:87:58:8d:27:30:42:be:49:e3:48:51:52:38: 99:35:f6:02:45:47:1b:d9:a2:c7:8e:9e:d8:f1:76:99:c1:b5: 55:e1:87:bd:0b:19:c1:86:42:97:b8:67:74:7e:40:c0:cd:29: b4:9b:de:f2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1NWlQ8Epf1oWcnxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MGI1NDJkN2YtZDQwNC00YWQ1LWI4OWYtMmNkMjBlNTkzOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38t8e4TddLjO25x3M6c2lzBQXrGFaY2f50OP X27MIB/Us1ZQhM41VBigWF/idSaficIrGSQ1e4ssUDOCLqv/AsNiGcqH8tujexnH AHuSmmrT+21hs1XFPuJ4kfwhffZSXwsIJh2pGoXpbZ1JVxEPF5HE3nwfBZwisoXD FYzYfWOeEdLM8G4MZnzFpie2x4ZLcogL4Glm8I8Eb6LAt4SbI8HLxCt4iWQnoqRj 3Qcf16nGLB65pvfWwLjdumWvxRH+lQ2h0mALclO1cnMX9dgIoIeKdja6ADxOz/ao /R3XU26mxVG1F9s7MqhoCtMyOA/bwb11CzookWkBFx3OF3guRQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAk6Wp28/AU1C7b7N6peNWs6c897MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYTk4MzAyZTAtNmZkZC0z NGM2LWFlMTgtNWVjZmVjZTA0MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMEYsD BADMEYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZs8sJ6c0CA2eM6fATrf9cKE6oJpSmGn+4h8oMnSi1Qz8 DY/MB/sepZIDv9C2CCkDq0VXiWh5ctEzk5r0z1CcdAbuvwaehcWLnHaxlPv035d9 LrChoYBnk4Odvd39cQ8db2VbJQYCB6gj8go6+OCK3B8t2RPIKUsgh//K3ksYkuTU LiYnYKm6bKthCdJqvyodK2y3aKrSmkZsryEOITm62xg66aOYDDsCEEJAhUHOsJYt 2urP3YVvg9nX57sGiWIZHM06PDwLKGW+mF+HWI0nMEK+SeNIUVI4mTX2AkVHG9mi x46e2PF2mcG1VeGHvQsZwYZCl7hndH5AwM0ptJve8g== -----END CERTIFICATE-----Generated at Fri Apr 17 15:03:40 2026 by rpki-client