$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa File: 25164ba1-f06b-347e-8764-cf13e4daaf78.roa (raw, json) Hash identifier: RsEw5CUQuXHTc1RDvc29h0ldv7DXx+jWLbs7sYXVd9o= Subject key identifier: D2:16:A6:C1:A3:32:07:0C:C0:9A:BE:78:FE:E7:F9:42:35:CD:3B:09 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584CCD0C93A4475EACDF6F26ED00 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 22157 IP address blocks: 208.71.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:93:a4:47:5e:ac:df:6f:26:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=43b57942-0d15-4072-924d-366644c20226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:a7:1f:cf:5f:4d:ce:66:3d:de:ea:e1:1c: de:10:e4:78:1d:1d:c8:e4:51:28:d6:fc:68:8f:bd: d3:f2:69:ba:84:12:4d:ac:4b:09:bd:1d:bb:ca:d2: 8a:4b:de:97:56:1a:9c:55:9b:f8:29:34:a5:19:f0: 46:6b:dc:ec:f6:6a:d7:80:f0:a8:9f:7a:da:59:03: ac:02:7d:e7:14:ca:d3:40:68:ad:79:ab:3f:de:8f: b9:20:24:9d:45:f5:45:cc:b1:ae:2a:c9:0c:85:87: 4d:db:1d:cc:37:52:6a:90:d9:f4:03:21:3a:75:92: d6:6a:14:73:67:3a:15:3d:99:61:a3:22:98:87:bd: 2d:a3:09:8e:d8:da:a4:96:c9:a8:ee:1b:82:7a:f5: bd:5f:48:c1:eb:30:47:61:15:26:9f:cc:70:a8:ee: fb:f2:76:55:0e:bd:90:bc:7c:f9:1a:2f:fc:f2:2e: 6e:45:87:79:b5:56:f0:f4:97:a1:a7:da:6f:0e:89: 58:1c:98:e4:de:62:0f:00:e8:f1:a7:4c:c0:ac:12: 43:99:e0:00:55:75:2a:78:94:bc:ef:49:fa:ff:4e: e5:82:85:b6:8d:d9:1e:6d:d0:8b:1d:5f:6e:59:af: c9:d1:27:0e:36:70:3e:7a:6b:2d:3b:40:09:d2:55: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:16:A6:C1:A3:32:07:0C:C0:9A:BE:78:FE:E7:F9:42:35:CD:3B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c2:cf:7f:72:5d:2a:1b:57:f6:4e:2e:62:2f:8b:dd:0b:68: 4f:66:3f:18:3f:d6:3c:5a:79:c1:ee:eb:5a:c6:3a:12:dc:f1: 6f:e3:99:11:c3:fd:e1:4a:8d:9e:ff:09:d9:76:17:76:fa:3c: f9:e3:6c:da:71:ab:b0:1d:6b:8b:67:f6:65:9d:c0:7e:f8:3b: 6a:5e:a1:a8:0f:30:4b:02:80:04:9a:89:0d:30:21:90:b2:c1: 15:bc:d5:de:e5:f3:91:26:0f:5e:86:35:26:1e:7c:99:21:81: 1e:c8:54:ad:aa:13:ca:2c:98:e1:ce:6e:2b:8a:69:9e:50:7d: 5c:5d:05:2b:9f:9d:e0:44:95:52:ec:ce:b9:16:40:8f:fb:f6: e8:8e:bd:64:bd:96:09:44:80:0e:44:6a:b8:db:5a:1f:ff:26: a3:26:b8:fc:bf:11:a9:5f:41:53:ad:c5:18:94:a5:06:c8:e5: a3:43:a9:39:34:e5:ea:4c:9d:3b:16:5d:b0:34:02:30:10:61: e4:ef:b9:65:bd:fb:a8:65:ca:44:28:30:42:eb:d5:7c:b8:ec: 4c:eb:70:b2:64:fb:e1:ea:00:b0:d2:81:0d:d8:2c:43:04:9d: 75:3d:2a:ff:ad:b4:19:fa:a9:6b:e4:be:10:4f:ea:93:b4:b8: 71:cc:a8:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJOkR16s328m7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NDNiNTc5NDItMGQxNS00MDcyLTkyNGQtMzY2NjQ0YzIwMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2inH89fTc5mPd7q4RzeEOR4HR3I5FEo1vxo j73T8mm6hBJNrEsJvR27ytKKS96XVhqcVZv4KTSlGfBGa9zs9mrXgPCon3raWQOs An3nFMrTQGiteas/3o+5ICSdRfVFzLGuKskMhYdN2x3MN1JqkNn0AyE6dZLWahRz ZzoVPZlhoyKYh70towmO2Nqklsmo7huCevW9X0jB6zBHYRUmn8xwqO778nZVDr2Q vHz5Gi/88i5uRYd5tVbw9Jehp9pvDolYHJjk3mIPAOjxp0zArBJDmeAAVXUqeJS8 70n6/07lgoW2jdkebdCLHV9uWa/J0ScONnA+emstO0AJ0lVnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIWpsGjMgcMwJq+eP7n+UI1zTsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMjUxNjRiYTEtZjA2Yi0z NDdlLTg3NjQtY2YxM2U0ZGFhZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHCz39yXSobV/ZOLmIvi90LaE9mPxg/1jxaecHu61rGOhLc8W/jmRHD /eFKjZ7/Cdl2F3b6PPnjbNpxq7Ada4tn9mWdwH74O2peoagPMEsCgASaiQ0wIZCy wRW81d7l85EmD16GNSYefJkhgR7IVK2qE8osmOHObiuKaZ5QfVxdBSufneBElVLs zrkWQI/79uiOvWS9lglEgA5EarjbWh//JqMmuPy/EalfQVOtxRiUpQbI5aNDqTk0 5epMnTsWXbA0AjAQYeTvuWW9+6hlykQoMELr1Xy47EzrcLJk++HqALDSgQ3YLEME nXU9Kv+ttBn6qWvkvhBP6pO0uHHMqO0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:13:35 2026 by rpki-client