$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: pcJn/CaEM0bM6gpV7QArjdRC/rtnzDtCRjqc4Z+h0m8= Subject key identifier: 76:6D:1E:14:44:18:7D:FC:D8:27:2F:34:F4:47:68:33:8F:14:30:46 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584D0217983A3051C2B9C94E3740 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:98:3a:30:51:c2:b9:c9:4e:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=e2b95729-624e-47ba-83a8-1ef6a05d4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:1f:c6:8a:31:92:2f:41:fe:43:03:4b:d0: 76:9d:c9:38:3c:3a:9d:e2:03:ae:6f:23:4c:90:c6: 38:9a:89:a5:8c:59:22:ca:d7:18:70:60:6e:cf:2b: 0d:ad:8f:00:85:d6:e0:0f:67:d9:16:98:29:20:f3: e0:fa:53:89:f4:18:b1:a1:d7:ab:26:cd:ed:ce:32: cb:de:44:af:22:0b:1c:50:d9:d5:b3:45:c4:e6:36: 76:c8:7e:cc:8d:1b:e4:3f:b2:02:57:39:cb:47:d4: 21:55:42:04:b7:30:d1:44:31:9f:f8:3e:38:fa:2b: 9b:d5:12:81:00:3a:28:fb:82:78:cb:27:7f:14:cb: 12:a7:bc:8a:39:3c:a1:fd:f1:cc:df:0a:db:60:82: e8:16:1f:23:2b:ab:ac:28:59:ad:b8:67:f0:1e:66: 7f:48:a2:08:b9:5b:51:03:e1:51:a8:84:6f:13:a6: 61:b7:86:77:c9:f9:54:59:53:8b:7f:35:ea:16:f4: 72:8b:c1:ed:72:0a:16:e2:eb:c1:6e:d8:91:b2:44: 78:47:18:2f:24:91:33:67:7e:7c:d8:02:a9:7e:ff: 18:fb:99:f5:2e:0a:94:1b:78:f7:14:0f:8b:a2:7b: bc:ca:4a:7e:f9:40:69:46:1c:bb:ef:ce:75:83:25: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6D:1E:14:44:18:7D:FC:D8:27:2F:34:F4:47:68:33:8F:14:30:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:67:b0:18:a4:bb:c3:c9:16:29:b5:4a:c5:4b:7a:5e:87:b7: c1:3c:e0:aa:14:ee:b6:91:15:01:94:b8:98:09:df:ae:9e:96: 93:f8:f9:0a:84:a1:b1:16:b3:40:44:29:c0:e9:e5:22:73:27: a7:61:b0:9e:b8:8b:e1:eb:c8:f2:4c:09:7f:4b:8f:8f:fa:33: 9c:37:6c:c6:6e:f8:f4:53:1c:8c:2e:de:57:fa:5c:b6:32:c5: 3a:95:b5:1c:a6:27:e6:7f:dd:63:4d:34:c0:80:e9:09:c9:ad: e3:fd:07:1e:54:42:3a:51:4a:cd:0f:82:62:e8:11:0b:09:de: ff:ba:0f:f1:9a:eb:4e:50:0a:75:a5:0f:aa:84:59:2c:59:83: 43:9c:b9:fe:3b:ed:72:6e:16:07:05:82:5e:95:3b:8b:46:9b: 18:31:4c:16:ea:63:c0:20:2b:ee:1c:f8:10:51:0d:b5:7c:3e: 68:d2:1d:3e:45:25:eb:5a:2d:bf:9a:07:ef:42:22:2c:31:c3: 0a:b9:11:7f:21:26:ed:d2:d9:c0:d9:6f:a7:e9:5f:4d:3f:9b: 0a:c7:98:ea:3a:c9:9a:d0:69:2d:2f:a4:23:4a:eb:7d:a3:11: 99:90:81:ea:b3:2a:0f:e8:cb:e7:dd:6d:2b:98:0a:44:81:0d: fd:91:87:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5g6MFHCuclON0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTJiOTU3MjktNjI0ZS00N2JhLTgzYTgtMWVmNmEwNWQ0NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2icfxooxki9B/kMDS9B2nck4PDqd4gOubyNM kMY4momljFkiytcYcGBuzysNrY8AhdbgD2fZFpgpIPPg+lOJ9BixoderJs3tzjLL 3kSvIgscUNnVs0XE5jZ2yH7MjRvkP7ICVznLR9QhVUIEtzDRRDGf+D44+iub1RKB ADoo+4J4yyd/FMsSp7yKOTyh/fHM3wrbYILoFh8jK6usKFmtuGfwHmZ/SKIIuVtR A+FRqIRvE6Zht4Z3yflUWVOLfzXqFvRyi8HtcgoW4uvBbtiRskR4RxgvJJEzZ358 2AKpfv8Y+5n1LgqUG3j3FA+Lonu8ykp++UBpRhy77851gyViqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZtHhREGH382CcvNPRHaDOPFDBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVnsBiku8PJFim1SsVLel6Ht8E84KoU7raRFQGUuJgJ366elpP4+QqE obEWs0BEKcDp5SJzJ6dhsJ64i+HryPJMCX9Lj4/6M5w3bMZu+PRTHIwu3lf6XLYy xTqVtRymJ+Z/3WNNNMCA6QnJreP9Bx5UQjpRSs0PgmLoEQsJ3v+6D/Ga605QCnWl D6qEWSxZg0Ocuf477XJuFgcFgl6VO4tGmxgxTBbqY8AgK+4c+BBRDbV8PmjSHT5F JetaLb+aB+9CIiwxwwq5EX8hJu3S2cDZb6fpX00/mwrHmOo6yZrQaS0vpCNK632j EZmQgeqzKg/oy+fdbSuYCkSBDf2Rh4c= -----END CERTIFICATE-----Generated at Mon Mar 2 15:14:57 2026 by rpki-client