$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa File: e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa (raw, json) Hash identifier: ym94zCf1uZ5p11B2rfTxSTtBOwWdh+MBZvXppsPl968= Subject key identifier: 80:99:8F:C3:41:85:3A:EF:7E:95:A5:61:F3:17:DE:B6:F5:9B:6D:7D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D07ACFE33D46201852F36E900 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 54196 IP address blocks: 209.211.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fe:33:d4:62:01:85:2f:36:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=07f24009-b4ee-4edc-ad60-e410a3aa12ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:b7:97:f6:37:d4:57:fd:03:99:a2:dc:bc: c8:4e:c7:f8:18:22:7b:c0:a1:f3:3b:b6:27:09:83: 5b:db:d7:62:56:02:ca:01:aa:d4:f2:f3:f5:1c:51: 4c:21:40:9f:63:b4:6f:e9:3e:2a:7b:87:63:98:a2: 40:f3:1a:21:ed:84:e9:21:f4:06:ac:d1:b5:43:aa: 29:54:9a:ed:3a:19:9b:05:a3:76:71:3d:69:33:70: fb:6c:1e:95:52:f1:07:7e:93:69:0f:7f:a1:ae:7e: dc:32:60:20:bb:75:f8:b2:a5:28:24:8e:11:3b:ed: ea:84:46:da:ca:99:e2:7f:b5:a9:37:a7:54:02:10: b3:89:78:01:fe:5b:fd:25:80:ab:b6:09:2b:b3:0f: a5:ca:10:9a:c1:18:d9:5e:31:05:6d:b0:69:13:ca: 88:f6:fc:e4:1a:16:d3:82:a2:0e:3d:a0:2d:14:48: b6:a9:8a:83:73:bf:12:4e:df:05:f4:f1:15:0b:9c: 7a:db:02:43:16:b7:fd:cb:9a:3e:ac:f1:e7:24:22: 8b:92:c6:cb:97:56:f9:a6:a1:07:d6:c4:d2:4c:bb: 78:04:65:91:77:f7:89:0c:a1:a6:eb:ab:0e:d3:26: 26:7a:c5:55:22:4b:e7:c2:b9:84:2e:2c:a4:61:2a: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:8F:C3:41:85:3A:EF:7E:95:A5:61:F3:17:DE:B6:F5:9B:6D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c3:fc:f2:97:23:30:ab:22:75:36:a5:50:a7:33:48:1e:e4: 77:c2:5b:e8:28:d3:67:7b:34:9a:b9:da:2c:1b:17:7f:8f:d0: 86:f3:ea:d1:f6:74:dd:9a:aa:52:d4:c6:5f:65:20:e3:a0:21: 31:80:40:84:f2:af:a8:5f:86:b3:6e:6a:81:8f:f8:ee:cf:85: 51:52:0e:85:da:de:6c:70:cd:24:dc:dc:30:30:5a:25:c9:98: 62:86:10:df:2b:67:cf:cb:01:0d:d0:b4:59:d8:f6:21:7d:32: a1:8a:03:84:30:aa:f8:11:5d:03:d8:bd:b7:da:28:e0:ec:31: b2:b4:4a:d2:bd:f1:9c:d1:50:70:10:ed:a1:b3:b0:4e:2a:27: 67:94:3d:c3:9f:69:27:83:ff:cb:f2:97:c5:4b:9d:19:74:3d: 92:24:04:8b:09:44:20:7e:bf:4f:4c:57:7b:ae:8e:27:be:36: 59:c6:ba:ed:5d:da:bf:51:58:71:b4:b8:96:9c:76:2e:24:8a: aa:a7:31:4c:1a:a4:1a:a3:51:8a:5a:3b:20:f1:97:85:55:66: ab:78:04:06:1d:42:21:7b:5d:62:2c:70:47:5a:4e:00:23:48: 85:96:f8:f5:fc:ea:9f:b8:cb:d7:aa:4c:08:9a:ed:e7:ba:d0: c1:2b:fe:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrP4z1GIBhS826QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MDdmMjQwMDktYjRlZS00ZWRjLWFkNjAtZTQxMGEzYWExMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkau3l/Y31Ff9A5mi3LzITsf4GCJ7wKHzO7Yn CYNb29diVgLKAarU8vP1HFFMIUCfY7Rv6T4qe4djmKJA8xoh7YTpIfQGrNG1Q6op VJrtOhmbBaN2cT1pM3D7bB6VUvEHfpNpD3+hrn7cMmAgu3X4sqUoJI4RO+3qhEba ypnif7WpN6dUAhCziXgB/lv9JYCrtgkrsw+lyhCawRjZXjEFbbBpE8qI9vzkGhbT gqIOPaAtFEi2qYqDc78STt8F9PEVC5x62wJDFrf9y5o+rPHnJCKLksbLl1b5pqEH 1sTSTLt4BGWRd/eJDKGm66sO0yYmesVVIkvnwrmELiykYSpLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICZj8NBhTrvfpWlYfMX3rb1m219MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTg5YWY1NGYtYzJjNC0z M2FmLTliM2YtZGY4NDY0YmI5ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLD/PKXIzCrInU2pVCnM0ge5HfCW+go02d7NJq52iwbF3+P0Ibz6tH2 dN2aqlLUxl9lIOOgITGAQITyr6hfhrNuaoGP+O7PhVFSDoXa3mxwzSTc3DAwWiXJ mGKGEN8rZ8/LAQ3QtFnY9iF9MqGKA4QwqvgRXQPYvbfaKODsMbK0StK98ZzRUHAQ 7aGzsE4qJ2eUPcOfaSeD/8vyl8VLnRl0PZIkBIsJRCB+v09MV3uujie+NlnGuu1d 2r9RWHG0uJacdi4kiqqnMUwapBqjUYpaOyDxl4VVZqt4BAYdQiF7XWIscEdaTgAj SIWW+PX86p+4y9eqTAia7ee60MEr/r8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:20 2026 by rpki-client