$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa File: 1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa (raw, json) Hash identifier: Ff50VHY9BAzWPvRE/RfssG4/kikjyYRtl0j96ZkQJGw= Subject key identifier: DC:2B:D0:C1:29:A1:C1:02:01:7C:C0:FF:89:97:AB:CE:92:9E:CE:E3 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584C9C31B03BFFBF0E3A63A541A8 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 16509 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:b0:3b:ff:bf:0e:3a:63:a5:41:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=ddcbb8da-3d1b-40cf-9d29-4b3b011360d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:5b:3c:b3:c8:9b:12:a2:da:e3:31:ac:d1: 99:ad:64:1b:ee:85:78:2c:2a:ae:36:2f:70:a5:09: 2c:63:67:39:34:40:ae:cf:67:d4:1d:79:ec:5b:b0: f4:2f:46:8b:03:52:d3:bb:9e:7e:47:fe:93:f7:9f: 57:73:60:06:71:1d:28:2b:1b:5e:f9:6a:64:71:c9: d3:9f:8f:4e:ee:19:4f:38:a4:51:20:6c:d2:b0:93: 4a:c7:6d:d3:d8:03:bd:e9:a9:08:64:19:42:59:b8: 7d:68:5c:90:6c:f3:cb:88:41:6d:52:dc:6b:16:1a: bc:c4:d0:e6:bf:73:1c:cc:76:40:09:9b:7b:05:b7: 2b:a7:07:a5:a3:53:09:fb:35:95:c8:df:72:ae:de: 28:53:37:68:b9:f6:95:5d:d0:d4:a5:08:af:2b:58: 60:25:21:00:55:be:00:cd:a5:8a:6b:1b:7f:ce:11: 3e:72:a6:89:33:29:94:ac:c5:a7:ac:63:7c:0f:06: 0c:2c:49:a4:ae:fb:33:72:2a:88:84:63:72:10:48: 5c:a7:73:cd:9d:b9:e8:cf:4b:d2:86:39:68:34:2e: 43:f2:4c:98:ca:22:de:2a:cf:8b:2f:19:4d:34:bb: 01:b4:9d:8f:e8:ac:2c:cb:ea:fc:a0:40:02:af:b8: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2B:D0:C1:29:A1:C1:02:01:7C:C0:FF:89:97:AB:CE:92:9E:CE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:da:0a:e8:ed:33:70:95:28:aa:2e:78:05:3a:74:00:00:b4: 32:56:52:44:f9:16:f6:74:7c:f4:9a:bc:e7:f1:60:6e:36:51: c0:f4:86:04:50:80:af:11:6e:dd:da:10:61:8a:17:c7:c3:b4: f4:4f:4c:9e:7c:b1:2d:ce:61:79:55:dd:65:42:ac:4e:94:14: c8:6c:0c:b9:77:06:6e:14:65:dd:74:43:4c:e8:3f:14:d3:a2: 41:52:ea:06:1f:11:e6:4b:cb:36:f5:0b:75:83:44:df:4f:a8: 35:04:50:ea:4d:23:90:02:91:cd:69:80:a9:52:88:7f:b5:6a: 8c:d9:55:a8:ad:cc:f0:0e:f2:3a:11:40:c7:0d:71:c4:78:4a: 51:a5:81:50:40:a4:80:3e:09:59:cd:00:1d:55:69:43:37:d3: dd:5d:ea:c5:70:94:c4:28:a4:12:a2:b4:25:8b:88:5f:8a:5c: 2f:90:be:90:4a:5e:bb:63:ca:1f:55:4b:c1:9a:2f:69:0b:ef: c2:51:05:bb:86:8a:d1:98:41:0c:9b:79:86:4a:f8:6f:10:38: 93:c4:e1:31:48:42:4f:6a:e4:90:93:3d:c8:17:77:67:5e:fc: bf:4f:29:ac:73:22:12:a9:98:8c:c1:f9:91:17:b9:e9:ed:10: cb:c1:88:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMbA7/78OOmOlQagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk ZGRjYmI4ZGEtM2QxYi00MGNmLTlkMjktNGIzYjAxMTM2MGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoJbPLPImxKi2uMxrNGZrWQb7oV4LCquNi9w pQksY2c5NECuz2fUHXnsW7D0L0aLA1LTu55+R/6T959Xc2AGcR0oKxte+WpkccnT n49O7hlPOKRRIGzSsJNKx23T2AO96akIZBlCWbh9aFyQbPPLiEFtUtxrFhq8xNDm v3MczHZACZt7Bbcrpwelo1MJ+zWVyN9yrt4oUzdoufaVXdDUpQivK1hgJSEAVb4A zaWKaxt/zhE+cqaJMymUrMWnrGN8DwYMLEmkrvszciqIhGNyEEhcp3PNnbnoz0vS hjloNC5D8kyYyiLeKs+LLxlNNLsBtJ2P6Kwsy+r8oEACr7jvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwr0MEpocECAXzA/4mXq86Sns7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMTgzOWQ2ZWEtYmEyZi0z ZjAzLTg5ZGEtZDUwZGQ0ZWYwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXaCujtM3CVKKoueAU6dAAAtDJWUkT5FvZ0fPSavOfxYG42UcD0hgRQ gK8Rbt3aEGGKF8fDtPRPTJ58sS3OYXlV3WVCrE6UFMhsDLl3Bm4UZd10Q0zoPxTT okFS6gYfEeZLyzb1C3WDRN9PqDUEUOpNI5ACkc1pgKlSiH+1aozZVaitzPAO8joR QMcNccR4SlGlgVBApIA+CVnNAB1VaUM3091d6sVwlMQopBKitCWLiF+KXC+QvpBK Xrtjyh9VS8GaL2kL78JRBbuGitGYQQybeYZK+G8QOJPE4TFIQk9q5JCTPcgXd2de /L9PKaxzIhKpmIzB+ZEXuentEMvBiPo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:41:03 2026 by rpki-client