$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa File: a50b5022-2980-3c8b-9135-ef6ad61f4658.roa (raw, json) Hash identifier: 4cVqBjgLexdFOyyd8jGC6yxfL872BGnBEQlvFSAMUBk= Subject key identifier: 5B:39:D6:1E:58:84:8D:8E:6D:94:FA:5D:E3:84:F0:4C:BE:45:77:A8 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCBA7532893A159E2758A5042 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 13414 IP address blocks: 209.237.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:53:28:93:a1:59:e2:75:8a:50:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=e7e47d7e-0b0f-4ab6-a1e7-ef33474e5afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:91:7d:cd:16:41:7c:36:49:1e:ce:55:96: 8b:4f:c2:66:d4:59:8d:9f:79:50:6f:00:c9:73:bc: 60:c3:b4:f4:54:a5:71:74:0c:ef:5f:0d:bf:a8:8d: d0:86:f0:a6:95:47:63:e4:0e:04:36:1d:52:44:47: e8:b3:dc:39:62:d5:c9:26:12:6d:e7:a2:96:d7:0e: a3:5c:a3:e7:a1:c5:77:24:d6:75:6c:0d:c7:1e:34: 68:72:3b:a5:d2:80:85:98:24:41:6d:a9:ef:63:1e: d5:6e:2d:2a:93:c9:b4:f6:91:eb:47:49:96:c6:88: c3:ba:04:9e:74:32:69:e3:b1:38:bd:fc:1c:96:cf: fe:b4:e5:0b:47:ee:04:f3:9a:f5:86:db:63:61:8f: b0:92:c6:6d:30:c4:37:9c:6a:3f:08:39:02:ae:e7: e0:11:59:8e:f3:0b:4b:f5:36:a2:49:ad:26:95:dd: 18:09:c9:1a:0f:39:1f:ab:75:2e:68:02:e8:d8:10: 9c:9f:98:f0:a4:1a:0f:89:20:ba:06:27:20:f2:00: da:31:3a:b7:e1:97:5f:63:3f:82:d9:b7:52:78:9f: 8d:18:76:3e:5f:da:2a:64:b7:b7:95:cf:40:cc:ec: 85:20:77:e2:f2:7b:23:4e:28:17:b7:c6:d0:0d:59: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:39:D6:1E:58:84:8D:8E:6D:94:FA:5D:E3:84:F0:4C:BE:45:77:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a50b5022-2980-3c8b-9135-ef6ad61f4658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c1:1a:f9:e7:b1:fb:a0:9f:eb:ec:a7:c0:e3:a6:c3:ed:e5: 1b:9e:a9:07:6e:7e:d2:9a:47:4d:1d:b9:21:59:d1:79:51:53: 00:4d:cc:5c:64:4e:b8:22:f1:29:50:c2:80:75:3f:19:c3:90: bc:42:b1:7d:99:1f:91:6b:6c:79:6f:11:90:42:26:89:e9:24: 31:cb:e8:08:da:12:ed:2a:12:06:9d:f0:6a:a0:b0:8b:96:0c: 4b:aa:5b:8f:61:34:fe:75:c9:3a:04:8d:5a:9d:ba:bc:1c:f4: 64:2a:18:18:9b:e5:30:ca:fb:21:ad:ea:3d:fa:c5:22:d0:4b: 82:08:d4:ad:35:24:39:73:0c:ef:3a:5a:0e:55:01:8f:a3:9d: 62:2b:0f:43:6f:19:3c:8f:ca:1e:6a:af:c5:6c:92:79:1c:4f: 91:42:ec:6d:72:e1:bf:90:80:f5:57:d8:88:71:0c:c6:68:c9: 0e:02:54:01:90:8a:ac:32:ad:8b:ff:c5:ff:b8:d0:34:df:7f: ac:28:24:39:73:e1:85:6f:b1:f5:fb:91:e6:b5:1a:08:a3:f3: ed:a2:b7:f2:54:b3:8d:f5:cb:67:87:45:78:df:c7:8b:d3:98: 23:9b:d2:d8:31:72:83:37:d0:b3:e5:b7:87:34:a1:04:b5:2d: 6c:ad:4a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1Mok6FZ4nWKUEIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk ZTdlNDdkN2UtMGIwZi00YWI2LWExZTctZWYzMzQ3NGU1YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVORfc0WQXw2SR7OVZaLT8Jm1FmNn3lQbwDJ c7xgw7T0VKVxdAzvXw2/qI3QhvCmlUdj5A4ENh1SREfos9w5YtXJJhJt56KW1w6j XKPnocV3JNZ1bA3HHjRocjul0oCFmCRBbanvYx7Vbi0qk8m09pHrR0mWxojDugSe dDJp47E4vfwcls/+tOULR+4E85r1httjYY+wksZtMMQ3nGo/CDkCrufgEVmO8wtL 9TaiSa0mld0YCckaDzkfq3UuaALo2BCcn5jwpBoPiSC6Bicg8gDaMTq34ZdfYz+C 2bdSeJ+NGHY+X9oqZLe3lc9AzOyFIHfi8nsjTigXt8bQDVluWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs51h5YhI2ObZT6XeOE8Ey+RXeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYTUwYjUwMjItMjk4MC0z YzhiLTkxMzUtZWY2YWQ2MWY0NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHBGvnnsfugn+vsp8DjpsPt5RueqQduftKaR00duSFZ0XlRUwBNzFxk Trgi8SlQwoB1PxnDkLxCsX2ZH5FrbHlvEZBCJonpJDHL6AjaEu0qEgad8GqgsIuW DEuqW49hNP51yToEjVqdurwc9GQqGBib5TDK+yGt6j36xSLQS4II1K01JDlzDO86 Wg5VAY+jnWIrD0NvGTyPyh5qr8VsknkcT5FC7G1y4b+QgPVX2IhxDMZoyQ4CVAGQ iqwyrYv/xf+40DTff6woJDlz4YVvsfX7kea1Ggij8+2it/JUs431y2eHRXjfx4vT mCOb0tgxcoM30LPlt4c0oQS1LWytSqs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:50 2026 by rpki-client