$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa File: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (raw, json) Hash identifier: CHqiXbwEkQVD1aHnrw12IG6VLTbYzxce/19QaaHVusI= Subject key identifier: 2F:E5:99:95:DE:41:5B:6F:3A:3B:94:48:F1:79:90:33:5A:D7:1E:AA Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa Certificate serial: 010D0C9F4328584CF5879A9665EE9573E4442820 Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 399253 IP address blocks: 209.209.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9a:96:65:ee:95:73:e4:44:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=93f4c044-a395-4f19-9519-e850159d5f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:04:81:77:38:49:0d:bd:4f:b2:cc:1f:a8: 47:8e:e0:59:d5:69:1a:8c:d1:df:cb:bd:14:7d:11: 56:7a:c8:7a:70:ac:b0:7e:14:02:c3:3a:6a:55:49: ec:06:e5:ea:a9:ab:27:db:17:1a:d1:90:0e:d9:2f: 67:a8:6a:4d:85:d3:ef:b2:be:72:25:88:a2:04:c7: 25:54:ec:2c:20:99:e1:4f:c5:11:c7:8a:4f:44:76: b7:70:56:98:04:3b:57:3e:89:65:f1:27:ef:75:46: 61:07:31:e5:b8:33:aa:05:b8:34:a5:a7:b9:16:2e: 15:e9:da:49:98:64:3f:6b:89:35:b3:66:d6:d6:b6: f4:5f:7d:82:d8:fa:2e:9a:fe:6d:2f:c5:9f:d6:13: 0f:4c:d4:f2:67:09:c8:f3:68:92:e0:ce:c0:ea:04: 9a:75:88:e2:f7:6b:d1:55:90:ed:da:49:ad:8a:88: 1f:ea:74:84:35:c4:d5:91:7d:e5:26:f7:3b:b8:7d: b5:32:8c:35:f6:87:e1:bc:21:af:20:f8:a7:5b:59: 63:1c:f4:dc:17:3b:d5:54:5c:db:45:ed:c4:91:dd: 39:4e:ad:6d:96:d7:4b:1d:3f:da:7f:a3:f3:fb:12: b7:af:09:59:dd:50:a1:fe:26:88:bf:74:19:7c:c4: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E5:99:95:DE:41:5B:6F:3A:3B:94:48:F1:79:90:33:5A:D7:1E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl X509v3 Authority Key Identifier: keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer sbgp-ipAddrBlock: critical IPv4: 209.209.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:44:81:6a:26:59:46:96:3b:e9:b1:d6:a7:ae:02:bd:22:c9: 05:b7:58:73:78:12:0d:6f:59:9d:36:bf:b2:ac:f8:2b:4d:84: 02:b6:5f:25:40:50:a9:e0:be:11:bc:eb:34:6b:5e:94:e9:30: a3:1d:99:37:c7:05:4c:32:05:bc:b8:04:18:65:f4:23:d3:59: bd:12:85:ee:7e:4b:78:03:a2:1a:2a:47:05:fe:32:23:46:e7: 13:ab:76:55:1a:87:eb:04:a0:6f:b5:10:e8:0d:7d:2e:49:bc: 0d:75:8e:ef:bd:4d:ae:38:44:da:10:4e:22:97:a4:fc:59:66: 2a:b1:6b:80:5b:6e:9a:95:3a:59:f6:3d:04:c3:e2:fe:0f:9e: ab:9c:ca:76:ea:df:4a:64:70:3a:3e:f9:9e:4c:2d:cd:9c:92: 78:81:c2:99:ef:71:a8:3a:92:07:11:60:e2:6a:24:12:2a:6f: 26:9b:60:91:d1:ec:c1:18:a9:72:2b:f1:d7:6b:22:00:44:fe: d0:21:4f:45:9b:3b:d2:19:c4:06:7b:73:46:0b:5c:4f:d4:af: 8c:12:a9:77:d5:97:4c:91:d8:9d:d8:04:22:9c:90:a0:c4:dc: 4d:32:3b:9c:49:fe:02:5f:83:f3:db:5c:a4:13:58:bc:1c:97: 1d:33:d7:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5qWZe6Vc+REKCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy ZmZhMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk OTNmNGMwNDQtYTM5NS00ZjE5LTk1MTktZTg1MDE1OWQ1ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+IEgXc4SQ29T7LMH6hHjuBZ1WkajNHfy70U fRFWesh6cKywfhQCwzpqVUnsBuXqqasn2xca0ZAO2S9nqGpNhdPvsr5yJYiiBMcl VOwsIJnhT8URx4pPRHa3cFaYBDtXPoll8SfvdUZhBzHluDOqBbg0pae5Fi4V6dpJ mGQ/a4k1s2bW1rb0X32C2Poumv5tL8Wf1hMPTNTyZwnI82iS4M7A6gSadYji92vR VZDt2kmtiogf6nSENcTVkX3lJvc7uH21Mow19ofhvCGvIPinW1ljHPTcFzvVVFzb Re3Ekd05Tq1tltdLHT/af6Pz+xK3rwlZ3VCh/iaIv3QZfMR+ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/lmZXeQVtvOjuUSPF5kDNa1x6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvZjBiMzNlYTEtNDVhMi0z OWRkLThiMjctNzU0ZTRiNWY2Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1 MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz ZWY1NTJmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlEgWomWUaWO+mx1qeuAr0iyQW3WHN4Eg1vWZ02v7Ks+CtNhAK2XyVA UKngvhG86zRrXpTpMKMdmTfHBUwyBby4BBhl9CPTWb0She5+S3gDohoqRwX+MiNG 5xOrdlUah+sEoG+1EOgNfS5JvA11ju+9Ta44RNoQTiKXpPxZZiqxa4BbbpqVOln2 PQTD4v4Pnqucynbq30pkcDo++Z5MLc2ckniBwpnvcag6kgcRYOJqJBIqbyabYJHR 7MEYqXIr8ddrIgBE/tAhT0WbO9IZxAZ7c0YLXE/Ur4wSqXfVl0yR2J3YBCKckKDE 3E0yO5xJ/gJfg/PbXKQTWLwclx0z154= -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:18 2026 by rpki-client