$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb5cfa1-f296-3040-8331-1e871d24498a.roa File: bfb5cfa1-f296-3040-8331-1e871d24498a.roa (raw, json) Hash identifier: b3+EFY5bY5UGovvGhu7jhOqqnDoQA1JTYjI27W3MHoQ= Subject key identifier: DF:02:8A:4F:84:62:B8:2E:A5:6D:8A:11:A0:97:3B:2E:82:56:31:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D667A568B6750DB41ACA3E300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb5cfa1-f296-3040-8331-1e871d24498a.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 209.200.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:56:8b:67:50:db:41:ac:a3:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=35186eca-5ae5-45df-aa30-f4767dac0b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:21:74:fa:47:94:da:2b:b6:05:78:f3:0b: 4b:eb:fc:0f:dd:c7:43:85:ad:7d:16:fa:12:23:d0: 81:4a:72:17:83:af:e1:2a:9a:a3:1b:55:dd:f9:bb: 9a:86:e1:3e:16:73:7f:48:6b:1e:e1:06:77:54:83: 8a:9b:e1:32:18:54:c9:49:8f:b4:89:23:8c:ae:39: 06:3f:fb:35:b4:93:14:5e:5f:2c:7e:9c:01:8f:03: 0b:b3:3a:cf:52:63:74:4a:f0:f5:9c:82:9c:49:4f: 6e:5a:dc:37:a8:84:ed:02:b7:59:bc:ca:b1:85:ff: e6:46:5d:be:af:4f:31:32:82:30:d6:76:71:8a:b2: 3d:3e:d6:83:3c:40:80:32:0f:a6:86:64:6e:6d:c1: 3b:8e:57:38:87:5f:cc:ea:b3:5b:2c:a1:bc:03:9c: 3e:a4:8b:a6:fe:b2:4f:0d:bb:4e:12:7c:88:a7:ae: 9b:99:9f:92:85:b6:a1:2e:a1:9e:67:07:57:1e:9b: 62:52:c3:1b:e0:29:4b:12:14:ba:e8:5f:bb:6a:b2: f0:9d:a2:2e:77:b0:24:c2:bf:a3:a4:31:40:9a:3b: 91:3f:7f:a8:51:57:69:ef:7d:bf:df:c2:01:cb:ac: 70:bd:02:85:8d:cb:49:1e:55:58:d7:ae:77:b1:19: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:02:8A:4F:84:62:B8:2E:A5:6D:8A:11:A0:97:3B:2E:82:56:31:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb5cfa1-f296-3040-8331-1e871d24498a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ef:be:57:6a:81:2e:6e:94:ea:e4:48:9a:42:6e:3b:84:6d: ff:90:31:f5:63:45:11:bd:c6:fa:6a:77:73:df:8e:8b:23:3e: 2f:e6:ca:4b:ee:a5:bb:69:73:66:d7:f2:f1:b4:d1:9e:dc:f9: 13:cf:7c:49:b9:1a:08:f1:51:e3:a5:70:d8:43:ff:86:3f:61: 77:df:47:38:ad:55:32:52:14:80:d1:ee:a2:36:ef:07:60:99: 01:b6:72:87:6c:fb:09:d2:30:43:65:a6:25:a7:dd:5f:3b:92: 32:94:24:f4:e7:3f:fe:70:ae:b0:5e:b0:52:5e:2f:ea:da:6b: 3d:90:40:0c:51:d2:f9:51:74:ec:f2:cd:e9:48:8b:91:32:0a: 55:a1:c1:4c:c3:42:a3:05:b2:14:bc:f2:e4:4b:78:19:3c:dd: 71:90:54:6c:17:06:2f:0e:c5:b2:fb:c7:a0:50:01:47:41:2f: c3:9f:f5:1c:17:64:b4:b8:ff:79:7b:e8:59:e2:d2:90:d2:0b: 21:51:59:d7:ae:b0:0f:13:fe:f2:53:d0:b7:c6:e3:fa:73:25: b7:26:b7:dc:ac:33:44:2f:3c:fb:f7:7f:fc:2f:c6:f8:5d:08: ef:6c:83:1b:7d:2f:56:0d:47:ec:0b:d0:d9:c7:a6:ef:32:38: 1f:58:e3:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melaLZ1DbQayj4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MzUxODZlY2EtNWFlNS00NWRmLWFhMzAtZjQ3NjdkYWMwYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo58hdPpHlNortgV48wtL6/wP3cdDha19FvoS I9CBSnIXg6/hKpqjG1Xd+buahuE+FnN/SGse4QZ3VIOKm+EyGFTJSY+0iSOMrjkG P/s1tJMUXl8sfpwBjwMLszrPUmN0SvD1nIKcSU9uWtw3qITtArdZvMqxhf/mRl2+ r08xMoIw1nZxirI9PtaDPECAMg+mhmRubcE7jlc4h1/M6rNbLKG8A5w+pIum/rJP DbtOEnyIp66bmZ+ShbahLqGeZwdXHptiUsMb4ClLEhS66F+7arLwnaIud7Akwr+j pDFAmjuRP3+oUVdp732/38IBy6xwvQKFjctJHlVY1653sRkQ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8Cik+EYrgupW2KEaCXOy6CVjE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZiNWNmYTEtZjI5Ni0z MDQwLTgzMzEtMWU4NzFkMjQ0OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/vvldqgS5ulOrkSJpCbjuEbf+QMfVjRRG9xvpqd3PfjosjPi/mykvu pbtpc2bX8vG00Z7c+RPPfEm5GgjxUeOlcNhD/4Y/YXffRzitVTJSFIDR7qI27wdg mQG2cods+wnSMENlpiWn3V87kjKUJPTnP/5wrrBesFJeL+raaz2QQAxR0vlRdOzy zelIi5EyClWhwUzDQqMFshS88uRLeBk83XGQVGwXBi8OxbL7x6BQAUdBL8Of9RwX ZLS4/3l76Fni0pDSCyFRWdeusA8T/vJT0LfG4/pzJbcmt9ysM0QvPPv3f/wvxvhd CO9sgxt9L1YNR+wL0NnHpu8yOB9Y4yA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:57 2026 by rpki-client