$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b10d4176-ea0e-3485-825c-e6c2d3f59096.roa File: b10d4176-ea0e-3485-825c-e6c2d3f59096.roa (raw, json) Hash identifier: Z08V7ZCVBaYpU+26yZZ0lbTa3+vhDx/vJSChCcmB3jI= Subject key identifier: C1:A4:C1:49:A8:75:2F:02:5A:F5:72:2E:CE:8D:8E:A9:5C:71:15:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDEA9AA9228D15CF74F747C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b10d4176-ea0e-3485-825c-e6c2d3f59096.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 32302 IP address blocks: 209.23.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:9a:a9:22:8d:15:cf:74:f7:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=83ec3256-a786-4d77-a767-8eccba8d79dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:a9:a2:42:17:16:51:a9:82:ac:05:bd:46: ea:09:4e:23:49:f1:b1:17:53:d6:9b:fd:7b:f3:1d: 9e:d9:c8:d3:cf:53:2e:77:f9:b4:a6:23:e1:4a:7f: 27:9c:fd:24:b2:dc:5a:f0:82:f8:c2:7a:2b:cf:dd: dd:05:52:12:da:a4:6e:75:21:cd:10:1c:e6:59:db: 66:10:82:db:13:39:4c:e6:97:28:cd:61:7e:e9:46: 63:3c:ae:2b:7e:27:a1:19:65:d0:88:7a:4b:92:15: 33:ef:2b:49:d2:16:64:22:c0:97:34:ba:68:1e:50: 02:e0:aa:6e:6f:11:8d:c0:80:fc:9e:01:f0:be:99: 96:5d:5f:f1:09:75:09:7c:48:fe:34:63:8c:aa:b5: 9e:7c:cd:3d:00:55:81:e9:85:b9:a2:b1:b9:6d:cb: 0b:ce:3d:0d:25:cc:c3:c9:38:d0:84:0a:f5:d5:ec: 1c:a9:94:c5:6a:14:b8:7f:e3:67:84:48:fd:53:5f: 85:f3:92:9b:97:db:74:d2:14:68:f5:dd:13:f0:af: 1a:e9:e3:9e:ae:e7:c9:e3:36:56:94:23:dd:ea:cf: 83:fd:ba:ef:c8:f8:cc:af:3c:1d:6a:be:89:27:0f: 51:fa:3e:37:35:a0:85:dc:a3:7f:88:15:2f:ca:44: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A4:C1:49:A8:75:2F:02:5A:F5:72:2E:CE:8D:8E:A9:5C:71:15:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b10d4176-ea0e-3485-825c-e6c2d3f59096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:c2:78:4b:e8:31:77:61:fd:fb:8d:12:ff:51:4f:17:d9:25: ff:9c:85:df:3e:14:21:58:0f:76:f2:c2:69:29:ce:4f:ba:ff: df:90:4a:a2:fc:ba:0c:b7:ff:25:82:14:0e:89:3f:33:62:66: 38:61:f1:71:98:38:b5:fd:e7:71:ac:d4:b3:8e:65:56:28:78: 0d:2a:b9:c6:b3:44:67:3d:10:c3:f5:2a:73:c6:a9:8c:e6:ac: 77:ad:49:66:b3:b8:4b:c8:19:fc:3d:15:25:f4:ba:d0:99:f5: 3a:c6:96:0a:49:d4:1c:46:3e:2e:1e:a2:8f:9d:e3:df:ac:2c: 2c:b5:9d:1a:8c:be:4c:db:70:ba:4f:73:32:f8:50:87:88:ec: 24:8a:a9:e8:99:d8:ac:6b:e1:28:9f:5b:2b:ac:f5:cc:9a:ab: dc:d8:af:0d:06:22:f7:11:ad:2b:3a:40:3e:88:4b:48:e1:e2: 35:6f:eb:17:49:33:e1:b6:f2:90:4a:af:76:05:54:26:96:8a: 5f:4b:7c:90:1c:e4:8c:77:b7:f7:5c:23:ca:ff:44:06:9e:66: 35:cc:fc:5e:33:c4:da:60:bf:fd:60:5c:d6:48:39:e8:96:99: ce:5f:0d:eb:5c:ba:08:da:4f:50:87:90:bc:a1:b0:6c:01:fe: 9d:ac:fe:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96pqpIo0Vz3T3R8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ODNlYzMyNTYtYTc4Ni00ZDc3LWE3NjctOGVjY2JhOGQ3OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaapokIXFlGpgqwFvUbqCU4jSfGxF1PWm/17 8x2e2cjTz1Mud/m0piPhSn8nnP0kstxa8IL4wnorz93dBVIS2qRudSHNEBzmWdtm EILbEzlM5pcozWF+6UZjPK4rfiehGWXQiHpLkhUz7ytJ0hZkIsCXNLpoHlAC4Kpu bxGNwID8ngHwvpmWXV/xCXUJfEj+NGOMqrWefM09AFWB6YW5orG5bcsLzj0NJczD yTjQhAr11ewcqZTFahS4f+NnhEj9U1+F85Kbl9t00hRo9d0T8K8a6eOerufJ4zZW lCPd6s+D/brvyPjMrzwdar6JJw9R+j43NaCF3KN/iBUvykSL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGkwUmodS8CWvVyLs6NjqlccRUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjEwZDQxNzYtZWEwZS0z NDg1LTgyNWMtZTZjMmQzZjU5MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHCeEvoMXdh/fuNEv9RTxfZJf+chd8+FCFYD3bywmkpzk+6/9+QSqL8 ugy3/yWCFA6JPzNiZjhh8XGYOLX953Gs1LOOZVYoeA0qucazRGc9EMP1KnPGqYzm rHetSWazuEvIGfw9FSX0utCZ9TrGlgpJ1BxGPi4eoo+d49+sLCy1nRqMvkzbcLpP czL4UIeI7CSKqeiZ2Kxr4SifWyus9cyaq9zYrw0GIvcRrSs6QD6IS0jh4jVv6xdJ M+G28pBKr3YFVCaWil9LfJAc5Ix3t/dcI8r/RAaeZjXM/F4zxNpgv/1gXNZIOeiW mc5fDetcugjaT1CHkLyhsGwB/p2s/m0= -----END CERTIFICATE-----Generated at Sun Mar 1 20:32:10 2026 by rpki-client