$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json) Hash identifier: K0x1T8NvSRebSgBYFa8w7FquFHCLDoqpkudKfvatkVM= Subject key identifier: 88:FB:17:69:A0:3F:8F:55:9E:C7:2E:7F:9E:02:77:17:65:15:6C:6E Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584CF6ECDB720598E1B19DE9DAC0 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 13627 IP address blocks: 209.112.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:db:72:05:98:e1:b1:9d:e9:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=c8b39add-7570-4b7b-96ba-474641409eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:41:26:9f:de:08:2f:2a:88:42:2d:d2:f8: 0a:4d:5c:5c:95:18:03:70:5f:1e:9f:78:c4:8b:96: 8f:56:77:38:c7:07:ee:f1:f8:40:b0:ef:4e:66:6c: 23:7b:b5:98:e8:c3:37:25:60:27:b9:49:b7:73:a6: 0f:09:8b:0f:6d:cf:99:59:33:b1:d7:a1:58:30:34: 21:70:17:4d:80:36:56:c0:f6:0c:a5:68:ad:b2:36: 77:aa:24:7a:aa:9d:d6:c0:70:19:18:a4:e3:08:50: e6:73:f1:ef:ef:0b:31:e9:bb:e7:fd:54:1c:82:ba: 9a:b4:06:1f:7e:33:95:32:70:18:2c:f9:38:f3:67: 21:21:3b:c3:75:54:91:f2:31:1c:80:2e:be:cc:b2: b8:05:08:be:cb:48:21:fa:d2:f5:90:ba:89:6a:e9: c3:fa:e2:f7:72:02:ce:db:da:bc:9e:a7:67:9b:36: 39:57:a5:c7:be:93:94:6b:82:bb:2f:0a:fa:75:0b: b3:6b:a8:ff:b9:40:0c:b8:0f:39:c6:3e:6c:17:7a: c9:70:a2:76:ff:59:12:a8:a1:bf:77:39:07:e6:48: 9f:82:07:73:af:d7:9d:91:a2:bb:f5:87:57:e5:7e: aa:78:03:96:8e:08:0c:07:f0:59:b1:1f:01:67:6d: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:17:69:A0:3F:8F:55:9E:C7:2E:7F:9E:02:77:17:65:15:6C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2c:ab:05:d0:2b:bf:2b:67:1a:ad:7f:6c:b3:a7:42:88:7b: 8f:05:bb:d9:08:62:2a:7c:9f:50:2d:3f:79:42:04:ce:e7:5a: cc:cb:e3:2c:79:e1:3f:25:d3:d3:c9:05:72:d8:33:d5:f1:c5: 4d:9f:00:06:0c:97:9a:87:6f:a0:1d:7e:46:9b:9d:8e:54:a1: 29:28:1e:d4:75:c1:68:6d:57:bd:35:e5:14:f6:69:11:45:b0: 56:bf:4d:2c:5b:bb:5c:b2:d0:f3:df:a2:b3:41:c7:50:ce:81: 8f:35:ce:8d:c9:6f:6e:93:7e:a2:99:d2:05:2d:34:a7:30:94: d5:53:ad:23:52:ab:66:49:cd:f9:ab:01:08:ab:43:37:cb:1f: 8a:b4:fc:f3:0c:64:65:c2:24:09:59:5f:26:e4:54:61:79:3f: cc:54:76:04:a5:09:60:3b:7b:f5:9a:1c:09:26:9f:0c:02:71: b0:1d:3b:7d:8d:85:c0:e0:80:9b:43:2a:9a:85:fb:77:6f:6a: ea:3d:04:67:17:df:88:ee:11:d4:09:1e:5b:8d:7b:99:0e:81: 7e:94:4c:fa:ea:a4:89:38:29:9e:35:09:51:65:3d:d9:fe:a6: 89:a3:2c:3c:a4:7d:2c:75:c1:cf:eb:82:ac:65:ef:17:fc:8f: 17:f2:e3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NtyBZjhsZ3p2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk YzhiMzlhZGQtNzU3MC00YjdiLTk2YmEtNDc0NjQxNDA5ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTFBJp/eCC8qiEIt0vgKTVxclRgDcF8en3jE i5aPVnc4xwfu8fhAsO9OZmwje7WY6MM3JWAnuUm3c6YPCYsPbc+ZWTOx16FYMDQh cBdNgDZWwPYMpWitsjZ3qiR6qp3WwHAZGKTjCFDmc/Hv7wsx6bvn/VQcgrqatAYf fjOVMnAYLPk482chITvDdVSR8jEcgC6+zLK4BQi+y0gh+tL1kLqJaunD+uL3cgLO 29q8nqdnmzY5V6XHvpOUa4K7Lwr6dQuza6j/uUAMuA85xj5sF3rJcKJ2/1kSqKG/ dzkH5kifggdzr9edkaK79YdX5X6qeAOWjggMB/BZsR8BZ229tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj7F2mgP49Vnscuf54CdxdlFWxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNDc2YzcxNGUtMmNmOS0z YjBkLWExNzktZjgzODcyNGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0sqwXQK78rZxqtf2yzp0KIe48Fu9kIYip8n1AtP3lCBM7nWszL4yx5 4T8l09PJBXLYM9XxxU2fAAYMl5qHb6AdfkabnY5UoSkoHtR1wWhtV7015RT2aRFF sFa/TSxbu1yy0PPforNBx1DOgY81zo3Jb26TfqKZ0gUtNKcwlNVTrSNSq2ZJzfmr AQirQzfLH4q0/PMMZGXCJAlZXybkVGF5P8xUdgSlCWA7e/WaHAkmnwwCcbAdO32N hcDggJtDKpqF+3dvauo9BGcX34juEdQJHluNe5kOgX6UTPrqpIk4KZ41CVFlPdn+ pomjLDykfSx1wc/rgqxl7xf8jxfy44w= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:00 2026 by rpki-client