$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa File: 588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa (raw, json) Hash identifier: 9Yo1UMQfUfVl7PSJ6/gSmdbd9NTKv5dtai+1Pb9SBiY= Subject key identifier: C8:62:F2:C4:F3:7E:7C:94:DE:EA:09:60:89:EE:DA:A8:00:9C:CA:47 Certificate issuer: /CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Certificate serial: 010D0C9F4328584D00B297CC0B86C547E07CC700 Authority key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 13725 IP address blocks: 209.205.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:97:cc:0b:86:c5:47:e0:7c:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=5d70f4e1-0fb7-41fb-bd8d-f2f14ae4dc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:bf:36:69:23:a2:96:dc:ba:b9:d9:c7:78: 4d:d7:ab:53:f3:37:70:38:49:7e:22:73:d6:12:20: 5e:58:da:0f:6f:35:d1:fc:e8:ff:61:6f:9d:36:f2: 17:30:0d:b7:c5:7a:6a:69:55:82:93:8c:96:3c:bd: 23:1f:c7:83:8c:e1:06:de:23:86:0c:e5:65:47:1a: 95:2b:cc:2b:bf:5f:ad:6f:ea:db:a0:ad:08:e7:df: 05:7a:be:c3:f2:54:63:da:82:d6:3a:da:48:59:43: da:86:27:a5:ef:f7:fe:85:bc:f2:e3:2f:7c:2d:41: 7a:19:fb:cc:02:ed:cb:66:30:29:87:98:59:9f:c5: 59:92:06:ce:cf:fd:61:23:80:e8:f2:43:cd:a2:17: e6:7c:7c:37:0f:e0:fb:d7:1d:28:8f:ae:7f:c3:56: b1:7e:f3:36:43:65:1e:0f:6d:a6:9f:e4:85:de:b0: 70:dc:50:20:89:35:9d:eb:d1:31:af:25:0c:fe:21: 60:64:87:bf:2a:18:6c:24:fe:49:e3:26:29:17:35: bd:11:e2:61:84:8f:ce:c9:19:ba:fb:6e:d5:95:61: 9f:9d:98:38:5c:8d:85:8d:3f:42:54:2a:24:68:11: 38:87:b5:ae:65:d7:c0:36:b6:df:f0:92:52:b5:4b: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:F2:C4:F3:7E:7C:94:DE:EA:09:60:89:EE:DA:A8:00:9C:CA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl X509v3 Authority Key Identifier: keyid:16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer sbgp-ipAddrBlock: critical IPv4: 209.205.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bd:4d:85:d4:b8:0e:d2:7f:45:f2:de:bd:bd:82:a4:e0:db: be:1e:8a:42:15:8b:60:3d:56:e4:48:1b:96:c0:22:5f:35:af: f9:81:23:b2:f7:67:64:c1:a9:65:0e:0f:51:1c:25:d7:4c:c3: 68:36:4f:d8:de:8b:29:e3:9d:9b:53:1b:c9:75:0d:cb:9e:41: 68:0a:ad:44:d9:9e:65:73:15:72:4b:da:bd:62:47:49:8a:87: 47:0f:af:b0:1f:74:d0:cc:88:a4:f2:ed:54:28:75:6c:ec:59: 69:be:fe:7c:6e:7a:20:ef:44:ef:6d:d5:06:97:bb:8f:70:cd: ff:9d:2f:9f:f1:08:92:6e:27:e4:01:ff:1b:64:48:b7:82:46: 55:d5:ed:bd:d8:f6:6c:d9:d8:63:ee:56:ba:be:d9:69:37:fe: cc:2f:e4:98:77:51:d0:39:94:6e:b6:57:ed:ff:64:83:b9:68: 09:6e:ec:a5:77:60:d5:fd:17:e3:bb:73:c5:e7:08:f4:44:c3: 39:df:e7:e4:37:36:20:45:80:c1:fd:a7:69:2d:88:59:76:26: ce:38:23:55:01:87:43:a2:db:b5:35:43:eb:13:6e:a9:21:cd: 9a:29:09:ba:54:29:1c:9d:5c:2b:cc:db:84:43:63:a6:78:0d: 77:18:a3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AspfMC4bFR+B8xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlkZjc3YTktNDg3MC00OTVmLWJiZGEtODlmOGUwYWUz MWQyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NWQ3MGY0ZTEtMGZiNy00MWZiLWJkOGQtZjJmMTRhZTRkYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6m/NmkjopbcurnZx3hN16tT8zdwOEl+InPW EiBeWNoPbzXR/Oj/YW+dNvIXMA23xXpqaVWCk4yWPL0jH8eDjOEG3iOGDOVlRxqV K8wrv1+tb+rboK0I598Fer7D8lRj2oLWOtpIWUPahiel7/f+hbzy4y98LUF6GfvM Au3LZjAph5hZn8VZkgbOz/1hI4Do8kPNohfmfHw3D+D71x0oj65/w1axfvM2Q2Ue D22mn+SF3rBw3FAgiTWd69ExryUM/iFgZIe/KhhsJP5J4yYpFzW9EeJhhI/OyRm6 +27VlWGfnZg4XI2FjT9CVCokaBE4h7WuZdfANrbf8JJStUvwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhi8sTzfnyU3uoJYInu2qgAnMpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OWRm NzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4ZTBhZTMxZDIvNTg4MDA1ZmYtN2ZmMy0z MmUyLTkwNjUtOGExNmMxNWM2YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTlkZjc3YTktNDg3MC00OTVmLWJi ZGEtODlmOGUwYWUzMWQyLzk5ZGY3N2E5LTQ4NzAtNDk1Zi1iYmRhLTg5ZjhlMGFl MzFkMi5jcmwwHwYDVR0jBBgwFoAUFo7+SAwbWBtQwWq+4d3Ws53rl30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OWRmNzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4 ZTBhZTMxZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0c3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm9TYXUuA7Sf0Xy3r29gqTg274eikIVi2A9VuRIG5bAIl81r/mBI7L3 Z2TBqWUOD1EcJddMw2g2T9jeiynjnZtTG8l1DcueQWgKrUTZnmVzFXJL2r1iR0mK h0cPr7AfdNDMiKTy7VQodWzsWWm+/nxueiDvRO9t1QaXu49wzf+dL5/xCJJuJ+QB /xtkSLeCRlXV7b3Y9mzZ2GPuVrq+2Wk3/swv5Jh3UdA5lG62V+3/ZIO5aAlu7KV3 YNX9F+O7c8XnCPREwznf5+Q3NiBFgMH9p2ktiFl2Js44I1UBh0Oi27U1Q+sTbqkh zZopCbpUKRydXCvM24RDY6Z4DXcYo6I= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:10 2026 by rpki-client