$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5806912f-7430-335a-8f79-f53379f2f2e3.roa File: 5806912f-7430-335a-8f79-f53379f2f2e3.roa (raw, json) Hash identifier: qafAOU8q45oyPGOwqF9xakBUDzoPe19Ne+7ZE2Ufl6A= Subject key identifier: 03:D5:55:6B:A8:51:BA:B7:97:62:5F:CD:BC:BD:59:9C:9C:22:59:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE917111B69E36406EDE640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5806912f-7430-335a-8f79-f53379f2f2e3.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33659 IP address blocks: 209.23.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:17:11:1b:69:e3:64:06:ed:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=682c3c68-e1fb-4977-911d-3c79f13f0852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:56:bb:7a:f5:4a:78:c7:a7:7a:3c:ad:7b: a2:8f:5f:da:63:30:ed:b8:2d:41:96:01:23:19:98: e4:18:85:8d:02:6a:ab:53:8b:95:f5:c0:4e:e8:a7: 87:c9:18:07:87:36:8d:4b:9b:61:de:3e:80:db:29: f5:57:fc:66:33:4e:b6:8a:95:1d:ea:b2:85:b0:51: e0:17:b5:61:6e:8b:20:35:bf:a1:c1:40:d3:b4:b1: 08:c2:99:90:fa:26:37:b6:28:da:57:8c:48:b6:b5: 85:fc:2c:67:f6:52:43:e4:85:77:d9:b2:a1:fe:9f: a0:8e:7b:51:5c:ff:6b:a4:3f:f5:e7:12:bf:1a:98: 22:7e:6d:1c:8f:82:54:28:9c:92:5e:86:6b:b9:5b: 47:5a:4a:7c:a5:a7:b8:80:2e:28:66:90:e3:57:e6: ff:4a:da:ce:65:d7:2f:a4:0b:73:49:ff:cb:dd:c3: 57:2e:fe:1d:25:11:1f:95:34:db:5b:7f:0f:f7:84: 00:72:fa:fc:1c:92:f2:e1:7e:8f:f3:30:cd:21:57: de:c7:46:65:66:f8:a0:f8:21:17:f0:ac:1a:b5:35: 18:08:54:58:b0:88:f1:95:ed:d5:0c:2e:e6:f1:65: 24:ac:dc:4c:86:86:82:a6:ab:f1:d8:35:dc:d7:27: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D5:55:6B:A8:51:BA:B7:97:62:5F:CD:BC:BD:59:9C:9C:22:59:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5806912f-7430-335a-8f79-f53379f2f2e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:56:98:6d:7a:18:32:7f:db:3a:1c:1d:ec:f4:9a:c3:f5:44: d7:14:52:b8:d9:30:36:35:54:b5:1a:9f:34:e5:4b:ab:f7:f8: 10:8d:64:8c:41:7f:8c:d1:98:e3:51:40:df:f8:0d:3b:60:17: 05:d3:5c:2d:5e:5c:5d:8c:9a:01:57:6b:2e:e3:f2:ba:ff:44: 61:ad:64:ea:30:56:53:bf:e3:e0:ee:3b:84:a3:09:47:c6:02: bd:c0:f1:f7:a6:b7:0f:74:20:51:68:dd:4a:52:6e:a0:20:e4: 95:8c:c2:b4:64:8b:53:87:fc:8f:58:8f:40:37:9f:b2:b3:cc: ee:30:d4:06:a3:a1:50:bd:cf:52:08:eb:a6:5d:d2:87:0a:4b: 23:3b:ae:16:26:17:53:72:84:d6:3d:1e:73:3b:29:52:58:df: 85:d9:33:d0:6d:7b:8d:f2:73:98:e5:df:23:2c:a2:47:30:30: 8d:fc:21:86:f1:2d:8a:22:1b:43:92:e5:06:43:46:7b:54:17: e6:89:41:96:36:92:aa:96:6b:c6:56:54:e4:91:8a:bd:fa:83: 0e:2f:bf:ce:97:85:c8:fc:05:db:d2:91:b3:11:e0:f8:14:a1: 33:48:15:61:03:29:58:2c:18:e8:ff:2d:5d:65:c1:cc:0f:f3: 4b:41:07:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96RcRG2njZAbt5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NjgyYzNjNjgtZTFmYi00OTc3LTkxMWQtM2M3OWYxM2YwODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3tWu3r1SnjHp3o8rXuij1/aYzDtuC1BlgEj GZjkGIWNAmqrU4uV9cBO6KeHyRgHhzaNS5th3j6A2yn1V/xmM062ipUd6rKFsFHg F7VhbosgNb+hwUDTtLEIwpmQ+iY3tijaV4xItrWF/Cxn9lJD5IV32bKh/p+gjntR XP9rpD/15xK/Gpgifm0cj4JUKJySXoZruVtHWkp8pae4gC4oZpDjV+b/StrOZdcv pAtzSf/L3cNXLv4dJREflTTbW38P94QAcvr8HJLy4X6P8zDNIVfex0ZlZvig+CEX 8KwatTUYCFRYsIjxle3VDC7m8WUkrNxMhoaCpqvx2DXc1ye4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPVVWuoUbq3l2Jfzby9WZycIlnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgwNjkxMmYtNzQzMC0z MzVhLThmNzktZjUzMzc5ZjJmMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRWmG16GDJ/2zocHez0msP1RNcUUrjZMDY1VLUanzTlS6v3+BCNZIxB f4zRmONRQN/4DTtgFwXTXC1eXF2MmgFXay7j8rr/RGGtZOowVlO/4+DuO4SjCUfG Ar3A8femtw90IFFo3UpSbqAg5JWMwrRki1OH/I9Yj0A3n7KzzO4w1AajoVC9z1II 66Zd0ocKSyM7rhYmF1NyhNY9HnM7KVJY34XZM9Bte43yc5jl3yMsokcwMI38IYbx LYoiG0OS5QZDRntUF+aJQZY2kqqWa8ZWVOSRir36gw4vv86Xhcj8BdvSkbMR4PgU oTNIFWEDKVgsGOj/LV1lwcwP80tBBz0= -----END CERTIFICATE-----Generated at Sun Mar 1 19:21:07 2026 by rpki-client