$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa File: 0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa (raw, json) Hash identifier: zk/D/rUjgr9TSJDrvjrQp/mH4J3tVldQ8x56d3Voh2A= Subject key identifier: A4:B5:CF:FF:8C:8A:8D:67:86:97:6D:AE:C3:20:74:73:A5:82:33:26 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCD0C932B5E1FE6BC680DB940 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 13414 IP address blocks: 209.237.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:93:2b:5e:1f:e6:bc:68:0d:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=e99542bd-a37d-4d7d-830d-df187acdebac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:fe:9c:57:7e:cd:63:36:07:c7:21:e6:be: a9:a0:b5:26:5f:8d:74:f8:ba:fa:7f:dd:b3:29:0c: 02:54:c5:d7:3b:4d:39:4d:36:3f:4f:11:88:62:de: a1:42:e6:b3:2a:fb:88:4f:14:63:f6:92:29:77:af: 16:cc:3a:00:02:76:aa:4b:98:f4:11:33:12:23:fe: 5d:7f:7d:30:53:20:79:84:d9:fb:32:a3:ea:aa:34: 74:2d:ab:47:1f:7c:5c:31:9e:e2:bf:e7:5d:85:2c: d4:dd:26:a1:70:95:e8:56:f2:0f:95:d7:55:d5:34: ec:1a:12:1e:c5:93:af:2c:d4:64:c9:57:ec:49:ad: 50:d8:1f:56:99:d2:5f:9e:f9:73:ea:f1:7c:b6:55: 34:20:a1:9f:60:c5:a5:49:ee:f2:00:62:de:c7:55: 98:a9:0c:90:a2:99:79:dd:a0:c4:20:e5:e4:a3:ad: b8:8e:d7:1a:9b:a0:82:07:f9:4d:67:b4:57:af:e1: a7:30:5e:21:ae:b9:04:1b:0e:fa:c3:df:a4:3a:21: 85:87:b6:1c:34:34:dd:30:df:22:7b:88:3a:da:54: d4:55:81:f4:08:a8:9b:08:07:b1:4e:9d:78:fa:2f: fb:82:11:e8:d3:9f:1d:7a:92:0b:38:28:62:41:42: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:CF:FF:8C:8A:8D:67:86:97:6D:AE:C3:20:74:73:A5:82:33:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1f:5a:f9:05:09:d8:4e:b5:36:9f:06:b5:5a:ae:d7:f8:13: 85:18:65:de:5b:6c:19:db:78:ee:5d:d2:1a:5a:eb:a2:20:e6: 4c:f7:f7:bf:c7:cf:7a:17:62:db:d2:4b:9b:6b:76:1f:14:d8: 6c:4f:79:68:c4:5a:a6:93:48:97:81:ad:4d:b2:c8:86:83:6a: 36:c2:3e:1d:ec:71:02:12:9c:91:a4:c0:4f:15:f8:90:d0:e5: ef:9b:be:34:df:c7:fd:47:57:b5:ad:f8:0b:52:40:02:0c:ce: 75:75:50:fd:73:4b:cc:74:30:38:02:01:57:3f:2f:e5:71:50: f6:00:d1:f7:31:dd:17:ff:b4:96:9b:55:b2:11:60:9b:19:a1: de:3f:f5:ce:35:c6:6d:b2:48:80:f2:6b:40:2d:6a:e5:ae:c9: 55:db:16:8b:5c:a5:87:7b:45:67:01:58:32:fb:09:67:70:25: da:20:3f:d3:ee:18:7a:c5:4b:b8:fb:1a:59:07:e6:d7:04:e3: f5:9d:12:9d:af:5e:d1:fa:94:9e:35:02:bb:e0:8b:33:a4:6f: da:6b:e5:59:f0:f6:63:df:eb:29:89:dd:eb:67:b8:4b:05:ad: 0d:31:5d:60:41:89:dc:b1:34:a6:1a:99:85:27:ab:dd:7c:19: 7b:6b:ed:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJMrXh/mvGgNuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTk5NTQyYmQtYTM3ZC00ZDdkLTgzMGQtZGYxODdhY2RlYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp3+nFd+zWM2B8ch5r6poLUmX410+Lr6f92z KQwCVMXXO005TTY/TxGIYt6hQuazKvuITxRj9pIpd68WzDoAAnaqS5j0ETMSI/5d f30wUyB5hNn7MqPqqjR0LatHH3xcMZ7iv+ddhSzU3SahcJXoVvIPlddV1TTsGhIe xZOvLNRkyVfsSa1Q2B9WmdJfnvlz6vF8tlU0IKGfYMWlSe7yAGLex1WYqQyQopl5 3aDEIOXko624jtcam6CCB/lNZ7RXr+GnMF4hrrkEGw76w9+kOiGFh7YcNDTdMN8i e4g62lTUVYH0CKibCAexTp14+i/7ghHo058depILOChiQUJoawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS1z/+Mio1nhpdtrsMgdHOlgjMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMGZhMjU2NDgtZDlhMS0z Yzk0LTllNjYtM2I4MzQ3ZTlmNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIfWvkFCdhOtTafBrVartf4E4UYZd5bbBnbeO5d0hpa66Ig5kz397/H z3oXYtvSS5trdh8U2GxPeWjEWqaTSJeBrU2yyIaDajbCPh3scQISnJGkwE8V+JDQ 5e+bvjTfx/1HV7Wt+AtSQAIMznV1UP1zS8x0MDgCAVc/L+VxUPYA0fcx3Rf/tJab VbIRYJsZod4/9c41xm2ySIDya0AtauWuyVXbFotcpYd7RWcBWDL7CWdwJdogP9Pu GHrFS7j7GlkH5tcE4/WdEp2vXtH6lJ41ArvgizOkb9pr5Vnw9mPf6ymJ3etnuEsF rQ0xXWBBidyxNKYamYUnq918GXtr7Tw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:02:09 2026 by rpki-client