$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa File: 4b6eb474-288c-33da-aed0-92825457eff1.roa (raw, json) Hash identifier: Do3KM7+6N6paFOgA4fYE1NlSyJPU5VU1+hjMlb2rP5g= Subject key identifier: ED:A0:58:74:6D:32:B1:05:14:83:6C:36:2A:FD:D7:0F:F4:80:8D:7A Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D07AD1AFC0E9C1849EFCE2280 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 18590 IP address blocks: 209.211.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:1a:fc:0e:9c:18:49:ef:ce:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=01a69add-20f5-40de-95fa-347e556c2b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:33:b1:89:25:9b:73:3f:71:19:93:13:88: 64:65:c8:f7:68:66:3e:58:8e:17:da:57:63:27:77: 58:0c:cf:5e:6e:e7:14:c8:31:ea:5e:4d:8a:74:bd: b0:45:6c:d2:e5:40:84:92:25:ed:3a:28:50:4b:45: ca:b1:91:48:42:8c:e2:10:5b:46:74:4e:4d:7f:00: e6:07:15:b0:85:38:54:d6:c4:59:d4:c3:48:c3:85: a3:4c:af:81:14:fa:ce:60:75:c1:be:3e:ee:e1:b5: b2:ed:e5:0e:9f:30:a7:48:cc:89:28:c2:8b:17:27: 09:de:e3:03:bc:80:54:d8:4f:f7:4c:f9:75:aa:a3: 53:b9:3b:fa:4d:8d:03:2f:88:3e:b7:f4:d1:50:fe: 58:fe:58:0a:5a:d4:8a:f0:33:14:67:68:d7:e6:5d: 37:04:39:bd:cd:3d:21:ac:27:72:8c:c0:55:3e:d3: 22:70:83:9d:e1:db:57:e8:6f:93:db:8d:d1:cd:a0: 7f:fb:05:9f:74:c7:eb:8f:85:cb:50:f8:5c:ee:1f: f7:e7:cd:45:4d:be:89:c8:c3:d5:c8:c8:e6:e5:c8: 4a:15:07:d3:34:53:39:70:5f:1e:37:63:26:33:3d: aa:21:81:0e:68:ce:55:86:c4:b8:f2:24:61:a8:78: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A0:58:74:6D:32:B1:05:14:83:6C:36:2A:FD:D7:0F:F4:80:8D:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:85:a0:df:11:26:b6:2e:60:e7:2a:e4:d2:f3:13:74:4a:b0: be:8d:f3:26:10:70:a9:e6:07:59:d0:3d:14:40:a2:e6:20:ee: c7:fa:99:68:6b:e0:53:02:bb:87:0a:4c:2e:90:92:11:5f:03: 71:50:a3:a0:de:28:0b:f9:e4:5a:7f:a0:6c:9c:ba:37:e9:83: 2b:8f:df:91:f8:ba:15:8e:33:95:a6:96:dd:ce:ff:58:10:92: cf:0a:d6:a2:82:86:31:d3:8c:1c:aa:98:74:17:14:86:21:7e: d1:45:2a:ad:02:77:30:28:e2:3c:46:8c:94:dd:ed:95:cc:43: 7f:8e:7a:3b:9a:16:da:ce:95:c2:17:d5:5c:ce:e0:15:01:66: ca:07:5a:e7:e2:b7:d5:42:b8:35:f3:3a:33:16:d5:f8:73:b4: fb:db:e3:cb:38:44:a2:1d:71:7e:ed:3a:b3:ef:41:d7:36:97: 48:21:67:62:b8:2c:ab:fd:f6:23:8d:da:9c:4a:8f:c2:74:e2: 1c:52:d4:2d:83:a9:e5:c6:35:9a:e9:86:be:ac:fa:68:3b:e1: d1:d0:31:91:9a:ba:f3:ed:96:51:cc:fe:92:25:cf:2d:34:be: 20:ef:ae:a7:7a:45:0b:87:4c:d7:e8:d7:ba:47:74:63:8c:1c: 4b:3e:e9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrRr8DpwYSe/OIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MDFhNjlhZGQtMjBmNS00MGRlLTk1ZmEtMzQ3ZTU1NmMyYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXkzsYklm3M/cRmTE4hkZcj3aGY+WI4X2ldj J3dYDM9ebucUyDHqXk2KdL2wRWzS5UCEkiXtOihQS0XKsZFIQoziEFtGdE5NfwDm BxWwhThU1sRZ1MNIw4WjTK+BFPrOYHXBvj7u4bWy7eUOnzCnSMyJKMKLFycJ3uMD vIBU2E/3TPl1qqNTuTv6TY0DL4g+t/TRUP5Y/lgKWtSK8DMUZ2jX5l03BDm9zT0h rCdyjMBVPtMicIOd4dtX6G+T243RzaB/+wWfdMfrj4XLUPhc7h/3581FTb6JyMPV yMjm5chKFQfTNFM5cF8eN2MmMz2qIYEOaM5VhsS48iRhqHg4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2gWHRtMrEFFINsNir91w/0gI16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNGI2ZWI0NzQtMjg4Yy0z M2RhLWFlZDAtOTI4MjU0NTdlZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2FoN8RJrYuYOcq5NLzE3RKsL6N8yYQcKnmB1nQPRRAouYg7sf6mWhr 4FMCu4cKTC6QkhFfA3FQo6DeKAv55Fp/oGycujfpgyuP35H4uhWOM5Wmlt3O/1gQ ks8K1qKChjHTjByqmHQXFIYhftFFKq0CdzAo4jxGjJTd7ZXMQ3+OejuaFtrOlcIX 1VzO4BUBZsoHWufit9VCuDXzOjMW1fhztPvb48s4RKIdcX7tOrPvQdc2l0ghZ2K4 LKv99iON2pxKj8J04hxS1C2DqeXGNZrphr6s+mg74dHQMZGauvPtllHM/pIlzy00 viDvrqd6RQuHTNfo17pHdGOMHEs+6Qc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:46 2026 by rpki-client