$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa File: e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa (raw, json) Hash identifier: 4wVav00VwcJsUQPzNCrrGYCweAOXHGEy1winXSfEJUU= Subject key identifier: FC:09:A6:C9:8D:E4:24:E2:02:E1:C1:E5:BA:AD:59:15:78:50:DC:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D667A564A5C0E720E6096F280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 209.200.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:56:4a:5c:0e:72:0e:60:96:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=b8d5037a-edf1-4f32-9989-700de6522ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:85:67:cc:76:2f:09:6f:ce:aa:5f:21:72: 8f:3f:5b:d9:18:6a:fb:8d:67:2c:ab:c0:1c:49:ef: 34:49:6f:fe:57:ac:ae:a3:e6:bd:15:89:ff:38:b7: 33:05:28:40:cc:2e:e4:d1:f0:ff:11:e8:71:04:04: ad:cb:a9:a1:d8:ce:89:85:2f:ec:6c:69:6b:f4:8c: 27:d6:ad:fd:06:d4:f5:0e:0c:68:6b:b2:93:b6:b8: 30:6c:66:4f:2b:26:3e:ad:be:eb:ff:2f:d0:f8:13: ed:21:2d:08:d2:ab:1c:62:ed:49:e0:7a:0f:c9:1f: 8f:c2:31:8b:77:83:69:35:54:50:c0:a2:0d:7c:2d: 0e:8e:4f:3e:66:a0:6d:c7:f8:96:1e:3e:7d:72:cf: f9:2c:7f:52:f8:2e:3d:04:f7:d4:80:d8:68:82:4a: fb:b0:be:1b:bc:40:35:34:b2:bc:a6:9c:d6:91:91: 6f:94:6d:3e:11:3a:42:22:63:0f:5d:16:83:c3:a3: fd:a0:5f:f0:0c:a4:ed:16:9a:ea:55:26:32:a0:d1: 86:1e:b9:0f:e6:4a:56:a7:a0:99:58:d1:e0:6c:5c: 5a:42:27:86:e1:94:cc:25:28:26:15:fc:a3:28:8d: 1b:f5:cb:cf:d9:2a:96:3e:6b:b1:f7:e9:5f:c5:32: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:09:A6:C9:8D:E4:24:E2:02:E1:C1:E5:BA:AD:59:15:78:50:DC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cf:22:6c:46:2b:5b:91:40:0f:68:45:ba:e1:3f:7a:e7:c3: 75:ff:06:73:1f:95:35:cd:2c:80:a7:eb:3c:d4:6f:16:2d:6a: b0:eb:95:36:90:21:54:85:0a:be:bc:6b:e9:92:43:3c:5c:09: 87:ce:67:c9:5d:42:fd:1a:81:0b:3a:7f:77:82:c1:fa:ef:5d: eb:8f:e0:50:8d:21:cd:60:ce:01:57:39:50:de:d5:27:8d:35: d0:f5:4b:03:ad:e0:f4:72:13:d4:d2:08:5d:fc:55:b0:bc:bf: c5:37:05:2a:19:19:04:90:42:ac:0b:e3:e2:c3:7c:66:96:e3: 25:1a:98:d0:88:6a:1d:e5:2b:d4:cb:fa:75:22:b7:ba:d7:5d: 5d:cb:b1:16:b9:71:b5:27:2b:b0:95:fa:26:6c:32:36:f3:43: 4b:0b:b6:2e:54:24:f3:bd:62:38:1f:2f:bd:c1:e7:05:a6:b3: 1a:72:8e:77:99:76:d5:da:63:7c:91:f1:e2:a2:b1:13:dc:53: ee:c9:33:d2:6b:da:e8:7d:18:2f:5d:ec:0a:57:8b:da:07:a0: ad:46:70:fd:22:21:8f:1f:c6:01:a2:33:8b:a6:bc:70:eb:55: 59:fb:0e:05:5b:b7:4d:f7:da:50:96:06:f8:55:ef:fd:e7:48: f3:88:35:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melZKXA5yDmCW8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk YjhkNTAzN2EtZWRmMS00ZjMyLTk5ODktNzAwZGU2NTIyYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr+FZ8x2LwlvzqpfIXKPP1vZGGr7jWcsq8Ac Se80SW/+V6yuo+a9FYn/OLczBShAzC7k0fD/EehxBASty6mh2M6JhS/sbGlr9Iwn 1q39BtT1Dgxoa7KTtrgwbGZPKyY+rb7r/y/Q+BPtIS0I0qscYu1J4HoPyR+PwjGL d4NpNVRQwKINfC0Ojk8+ZqBtx/iWHj59cs/5LH9S+C49BPfUgNhogkr7sL4bvEA1 NLK8ppzWkZFvlG0+ETpCImMPXRaDw6P9oF/wDKTtFprqVSYyoNGGHrkP5kpWp6CZ WNHgbFxaQieG4ZTMJSgmFfyjKI0b9cvP2SqWPmux9+lfxTIsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwJpsmN5CTiAuHB5bqtWRV4UNwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTBkY2JkMjAtMTMyOC0z ZjZlLTgwNmYtYjZlNjY3NGY4MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTPImxGK1uRQA9oRbrhP3rnw3X/BnMflTXNLICn6zzUbxYtarDrlTaQ IVSFCr68a+mSQzxcCYfOZ8ldQv0agQs6f3eCwfrvXeuP4FCNIc1gzgFXOVDe1SeN NdD1SwOt4PRyE9TSCF38VbC8v8U3BSoZGQSQQqwL4+LDfGaW4yUamNCIah3lK9TL +nUit7rXXV3LsRa5cbUnK7CV+iZsMjbzQ0sLti5UJPO9YjgfL73B5wWmsxpyjneZ dtXaY3yR8eKisRPcU+7JM9Jr2uh9GC9d7ApXi9oHoK1GcP0iIY8fxgGiM4umvHDr VVn7DgVbt0332lCWBvhV7/3nSPOINQo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:36 2026 by rpki-client