$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa File: 80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa (raw, json) Hash identifier: ceQMe82dFQJoOXzpoonOUOH2dhNrndwCfJ4rHrT9kBQ= Subject key identifier: FE:FF:F0:72:13:6B:0F:99:99:57:96:82:0F:7E:C2:9E:E4:4B:74:98 Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Certificate serial: 010D0C9F4328584CBF1729C83DE5F8307F20C4C8 Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 209.127.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:29:c8:3d:e5:f8:30:7f:20:c4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=39e4cd67-8442-4fcd-9888-ac4a3ba44a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:63:51:d4:0a:5a:04:1b:26:d5:8a:42:4e: 6e:4d:51:43:be:93:15:52:71:ea:39:3c:d5:4f:19: fe:c1:af:21:0d:f5:b5:b2:12:58:fd:78:de:76:23: e4:3e:36:0a:7a:48:e7:8f:42:ec:cf:99:77:76:6b: 09:8a:1b:76:e0:0f:f8:95:7b:2b:5f:03:29:1e:38: 36:33:b5:79:b2:25:45:71:88:9b:85:68:23:21:e0: 2f:89:89:37:09:0d:14:ac:cb:4d:63:93:95:7e:2d: d5:d4:77:6b:ca:05:a1:23:72:34:95:06:cd:6b:2a: 75:06:9a:78:dc:10:50:86:f4:bb:89:f0:22:c4:c6: 25:df:3a:35:12:18:d8:b6:c9:b8:cd:0a:f1:d1:e6: 25:f6:b6:0d:14:41:8f:41:80:0c:d9:21:65:8c:1a: 1e:e0:e6:ab:a4:fb:6b:eb:22:87:98:f8:e1:67:bd: 91:89:67:37:dd:23:c5:b3:47:64:14:e1:f2:1f:91: 44:37:ba:58:a8:98:2c:34:74:77:e1:30:f2:74:36: 92:09:b3:ef:c5:b0:06:b7:0b:f7:3f:ea:48:9b:3b: a8:4e:df:f5:7b:b6:ab:1d:ad:2f:d2:90:de:a0:74: 9c:f9:87:a9:12:0c:ba:b5:b0:40:2b:2e:10:8a:40: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FF:F0:72:13:6B:0F:99:99:57:96:82:0F:7E:C2:9E:E4:4B:74:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl X509v3 Authority Key Identifier: keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6b:71:a6:7b:ed:6c:27:e6:c6:34:d3:8c:a3:4a:7b:9e:ca: 77:dc:54:62:29:88:2f:49:03:25:1b:72:80:ec:3b:e4:86:62: 3a:99:8a:15:31:a0:54:7a:1e:7a:e0:76:ef:dd:93:63:12:d8: c1:6f:3e:32:98:0b:08:ae:f8:fb:de:f3:7f:44:b9:5c:c7:20: cd:ff:37:95:30:d1:5a:7f:d8:d6:10:16:3c:be:f1:57:18:0b: f3:f9:84:37:66:b4:2a:48:cb:6c:9b:e7:0a:9d:94:3c:26:f6: 4a:24:8f:d7:ab:3d:84:77:9f:60:5d:04:de:f6:30:43:72:4f: 11:ee:b3:1e:a3:78:e3:26:e7:d9:8b:55:29:1b:86:f0:42:29: cf:8f:6d:01:73:1e:c7:d0:ec:fe:ec:cb:b1:78:ec:68:7a:e1: c6:b7:7d:37:3c:c6:7f:cf:97:4c:f0:0e:c5:01:d8:19:a1:f8: fd:62:21:c7:49:96:30:15:06:22:57:07:b1:0a:7c:fc:a4:4a: c8:55:ad:c6:e4:d0:3e:a9:a9:07:43:07:51:3a:60:2a:0a:aa: fa:12:52:59:2d:95:c3:75:d6:90:08:86:66:ab:20:0d:e4:a8: a7:e5:7c:d7:52:9e:bb:66:b0:79:80:a4:ef:48:05:56:b7:c1: 1d:41:0b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/FynIPeX4MH8gxMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj M2Y1MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk MzllNGNkNjctODQ0Mi00ZmNkLTk4ODgtYWM0YTNiYTQ0YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S9jUdQKWgQbJtWKQk5uTVFDvpMVUnHqOTzV Txn+wa8hDfW1shJY/XjediPkPjYKekjnj0Lsz5l3dmsJiht24A/4lXsrXwMpHjg2 M7V5siVFcYibhWgjIeAviYk3CQ0UrMtNY5OVfi3V1HdrygWhI3I0lQbNayp1Bpp4 3BBQhvS7ifAixMYl3zo1EhjYtsm4zQrx0eYl9rYNFEGPQYAM2SFljBoe4OarpPtr 6yKHmPjhZ72RiWc33SPFs0dkFOHyH5FEN7pYqJgsNHR34TDydDaSCbPvxbAGtwv3 P+pImzuoTt/1e7arHa0v0pDeoHSc+YepEgy6tbBAKy4QikDkxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7/8HITaw+ZmVeWgg9+wp7kS3SYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvODBhYWQ2M2MtNTUxMC0z MGNlLThjNDUtYTljMWEwMmYyNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3 NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4 YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw Zjc4OGMzZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINrcaZ77Wwn5sY004yjSnueynfcVGIpiC9JAyUbcoDsO+SGYjqZihUx oFR6Hnrgdu/dk2MS2MFvPjKYCwiu+Pve839EuVzHIM3/N5Uw0Vp/2NYQFjy+8VcY C/P5hDdmtCpIy2yb5wqdlDwm9kokj9erPYR3n2BdBN72MENyTxHusx6jeOMm59mL VSkbhvBCKc+PbQFzHsfQ7P7sy7F47Gh64ca3fTc8xn/Pl0zwDsUB2Bmh+P1iIcdJ ljAVBiJXB7EKfPykSshVrcbk0D6pqQdDB1E6YCoKqvoSUlktlcN11pAIhmarIA3k qKflfNdSnrtmsHmApO9IBVa3wR1BC6A= -----END CERTIFICATE-----Generated at Mon Mar 2 13:55:11 2026 by rpki-client