$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa File: fc936a75-72c0-395c-a61c-d20afdd52258.roa (raw, json) Hash identifier: V0/GrLvg/Mo3ijT/q0RMFl/R+7JsbItaU7cQOf45E88= Subject key identifier: 9E:03:8B:DF:3C:4B:64:27:2C:5F:24:6F:1B:DB:45:AA:26:34:96:60 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B786484C650C0F17CD2C00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 216.246.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:86:48:4c:65:0c:0f:17:cd:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=9c475abc-bd27-456e-ab23-b3ee5efb9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:da:0d:68:47:91:cc:74:38:56:25:74:8a: 04:bd:a9:87:7e:e5:68:f2:58:da:41:ab:51:df:e3: 4a:7f:09:8d:fa:93:0d:83:79:04:8c:79:3b:51:59: e4:10:73:4e:ed:af:e3:25:3e:8e:57:8e:a2:81:9c: 9b:b7:6f:19:13:ab:f6:56:96:17:7b:3e:b7:3f:31: 5f:4a:bc:b8:55:a5:b0:6e:08:2a:e1:ca:f9:d1:91: 74:16:c5:36:78:18:fd:41:bf:3b:0b:12:2a:08:21: ab:f5:98:fe:eb:75:18:97:4e:9d:b3:47:06:aa:e1: e0:2f:0d:36:9a:49:c4:44:74:07:b5:40:31:ff:f6: 92:65:81:7e:6e:0b:96:5d:95:96:1c:42:33:32:c0: 9d:ca:31:65:12:d6:e5:3f:79:6f:e8:5f:7f:4e:81: 21:41:b0:78:13:35:02:0b:db:42:a9:39:4a:9d:67: c2:8f:22:37:c9:0c:9d:04:56:76:22:98:04:18:0a: 8f:bb:ff:2c:31:9f:f1:69:13:1f:07:23:fd:bc:92: 40:ac:08:a7:32:1f:c3:72:7a:47:0b:8b:25:29:68: 20:6d:43:50:04:70:07:25:13:7a:05:0c:cd:65:59: cb:0e:06:9f:4d:89:b9:59:c7:ab:40:c1:d5:16:45: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:8B:DF:3C:4B:64:27:2C:5F:24:6F:1B:DB:45:AA:26:34:96:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:72:91:cc:de:34:12:f8:be:d5:17:4b:e0:cf:2e:32:3e:6b: 66:de:b7:ca:52:ba:51:e3:05:8c:1c:2a:79:7c:b6:7f:8c:c9: 1d:45:9a:21:53:8b:7a:49:9b:05:70:bf:10:9c:2b:56:12:18: ae:c0:08:43:bd:74:47:81:af:f2:27:ce:a8:7a:4b:67:91:58: eb:25:e8:68:2f:a5:d4:e0:ec:d2:65:81:51:56:1b:89:cd:c0: de:e6:9e:5d:f3:02:b1:16:bb:a3:c6:2f:13:4c:8c:61:c5:17: 48:17:74:cb:77:3d:a7:ae:c7:1b:0c:a2:81:39:ca:d2:f0:8d: c9:f7:17:89:a7:69:ab:21:37:5b:94:98:d0:27:b5:79:7c:80: 8c:f3:28:3d:04:ae:5d:cb:82:a5:17:3e:97:d2:cc:dc:af:95: e3:39:7d:07:0c:11:b4:a7:fe:40:09:9a:57:b9:3a:e0:b4:ed: 7a:11:a4:13:5a:47:bf:74:72:74:f9:f6:a0:af:cd:e9:34:0d: 1c:df:3a:c9:a6:77:b7:ed:02:14:01:66:93:dd:aa:bc:a1:a9: fa:fe:55:73:fd:d3:51:7c:13:78:1f:40:13:c1:8d:37:28:4a: 86:46:0e:da:66:8d:6c:ba:dd:f0:01:08:be:d9:01:7b:9c:0a: b0:db:5c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4ZITGUMDxfNLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk OWM0NzVhYmMtYmQyNy00NTZlLWFiMjMtYjNlZTVlZmI5YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWDaDWhHkcx0OFYldIoEvamHfuVo8ljaQatR 3+NKfwmN+pMNg3kEjHk7UVnkEHNO7a/jJT6OV46igZybt28ZE6v2VpYXez63PzFf Sry4VaWwbggq4cr50ZF0FsU2eBj9Qb87CxIqCCGr9Zj+63UYl06ds0cGquHgLw02 mknERHQHtUAx//aSZYF+bguWXZWWHEIzMsCdyjFlEtblP3lv6F9/ToEhQbB4EzUC C9tCqTlKnWfCjyI3yQydBFZ2IpgEGAqPu/8sMZ/xaRMfByP9vJJArAinMh/DcnpH C4slKWggbUNQBHAHJRN6BQzNZVnLDgafTYm5WcerQMHVFkXA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4Di988S2QnLF8kbxvbRaomNJZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZmM5MzZhNzUtNzJjMC0z OTVjLWE2MWMtZDIwYWZkZDUyMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVykczeNBL4vtUXS+DPLjI+a2bet8pSulHjBYwcKnl8tn+MyR1FmiFT i3pJmwVwvxCcK1YSGK7ACEO9dEeBr/Inzqh6S2eRWOsl6GgvpdTg7NJlgVFWG4nN wN7mnl3zArEWu6PGLxNMjGHFF0gXdMt3PaeuxxsMooE5ytLwjcn3F4mnaashN1uU mNAntXl8gIzzKD0Erl3LgqUXPpfSzNyvleM5fQcMEbSn/kAJmle5OuC07XoRpBNa R790cnT59qCvzek0DRzfOsmmd7ftAhQBZpPdqryhqfr+VXP901F8E3gfQBPBjTco SoZGDtpmjWy63fABCL7ZAXucCrDbXFw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:03:34 2026 by rpki-client