$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa File: a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa (raw, json) Hash identifier: QKJPPEVm58jqXgZLuY7BnKohKwIj/PGyou5JeAqNNh4= Subject key identifier: 96:E6:56:F7:93:A3:B5:FE:B7:68:21:9F:B2:EB:B4:7B:CE:47:9F:B4 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCBA74ED8E3267D1E62FCA880 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 13414 IP address blocks: 209.237.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:4e:d8:e3:26:7d:1e:62:fc:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=e886aac2-5bbc-4ddc-852c-d7a37507a5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f3:e1:ce:5b:23:bf:78:d1:e9:9b:40:f9:08: dd:d4:0d:53:3b:2d:cc:1b:cb:a1:03:39:b9:80:95: 93:5d:46:bb:b9:2f:e6:8d:03:15:0f:5c:32:85:87: a8:00:ea:c6:e4:09:9a:e4:0d:5e:cd:fe:8e:35:de: 3b:77:14:20:e8:1c:20:d5:d8:00:38:9c:d0:34:fd: b3:f5:ae:d9:fb:a5:ea:64:1f:c3:34:95:70:28:da: c2:91:9e:64:61:24:1f:dc:50:ef:62:1b:24:c6:38: c1:20:fb:ea:ac:6d:d8:bd:e4:e0:30:17:6e:84:22: 51:07:f3:0c:cf:04:d8:9e:8b:95:8a:e5:9a:d2:4d: 70:06:de:59:0f:da:93:59:e9:c6:07:ef:c9:b0:9c: 1a:c0:19:0c:c2:e9:25:08:60:fd:45:f8:42:a6:c1: 6c:7b:c0:72:6e:b1:77:9d:60:1b:27:12:41:e1:fb: d5:7c:22:24:d8:8c:ac:58:7d:fa:19:d9:7e:03:d2: c3:8d:b4:1f:60:7a:98:e5:54:99:5d:2c:2b:ff:da: 46:ca:f5:34:ca:35:d8:29:3c:68:6d:04:0f:df:27: ef:4b:a0:25:30:1d:12:f8:11:d3:e6:a5:f7:52:f0: b1:a1:be:da:ee:2f:e6:a1:3e:54:d3:74:26:ee:e9: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E6:56:F7:93:A3:B5:FE:B7:68:21:9F:B2:EB:B4:7B:CE:47:9F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:96:14:bf:9e:a5:d6:54:17:f3:59:a6:1c:f5:c6:d1:01:7b: 83:13:86:1a:11:6f:43:b9:2e:a8:4e:d2:0b:67:13:aa:8f:ca: ee:36:55:a6:13:5d:31:f5:a4:10:10:ad:ce:3b:a7:a4:27:41: 37:9a:6d:b2:52:e6:91:3f:53:30:90:0e:52:58:e5:36:e4:e1: 2f:9c:bb:a3:c4:75:72:9d:10:6b:20:25:09:5a:bc:56:18:2d: 90:18:36:85:df:54:44:37:46:ec:cc:a7:26:c8:59:00:9c:2d: 03:a6:27:7c:71:cb:13:e4:d3:d0:65:e7:73:9b:af:68:0c:f4: 34:cd:bd:26:23:d4:2b:9f:10:e4:42:be:4d:34:1e:a4:d9:d7: 1f:4b:1b:5d:f6:1e:e0:9e:d2:05:77:8a:4c:48:be:5b:ba:59: c5:01:cb:d9:27:37:c0:9a:3c:e4:95:54:af:15:a3:9a:f2:f2: 79:07:06:65:7b:4b:6b:7b:43:46:23:30:70:73:e2:48:79:7f: 4f:55:9f:0d:36:21:44:f5:2e:3f:f9:0b:3b:5d:62:e2:64:20: 06:a0:49:bf:26:76:33:33:11:d7:b3:66:8b:f0:b1:e5:72:27: dd:c6:e4:f2:e7:53:cc:df:58:f7:cc:2e:72:12:03:4d:f0:70: 04:28:e7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp07Y4yZ9HmL8qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk ZTg4NmFhYzItNWJiYy00ZGRjLTg1MmMtZDdhMzc1MDdhNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPPhzlsjv3jR6ZtA+Qjd1A1TOy3MG8uhAzm5 gJWTXUa7uS/mjQMVD1wyhYeoAOrG5Ama5A1ezf6ONd47dxQg6Bwg1dgAOJzQNP2z 9a7Z+6XqZB/DNJVwKNrCkZ5kYSQf3FDvYhskxjjBIPvqrG3YveTgMBduhCJRB/MM zwTYnouViuWa0k1wBt5ZD9qTWenGB+/JsJwawBkMwuklCGD9RfhCpsFse8BybrF3 nWAbJxJB4fvVfCIk2IysWH36Gdl+A9LDjbQfYHqY5VSZXSwr/9pGyvU0yjXYKTxo bQQP3yfvS6AlMB0S+BHT5qX3UvCxob7a7i/moT5U03Qm7umIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbmVveTo7X+t2ghn7LrtHvOR5+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYThjNDcwZGQtNDBhMi0z ZmFhLTg3ZDgtYTk1MWZhZjNkOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWWFL+epdZUF/NZphz1xtEBe4MThhoRb0O5LqhO0gtnE6qPyu42VaYT XTH1pBAQrc47p6QnQTeabbJS5pE/UzCQDlJY5Tbk4S+cu6PEdXKdEGsgJQlavFYY LZAYNoXfVEQ3RuzMpybIWQCcLQOmJ3xxyxPk09Bl53Obr2gM9DTNvSYj1CufEORC vk00HqTZ1x9LG132HuCe0gV3ikxIvlu6WcUBy9knN8CaPOSVVK8Vo5ry8nkHBmV7 S2t7Q0YjMHBz4kh5f09Vnw02IUT1Lj/5CztdYuJkIAagSb8mdjMzEdezZovwseVy J93G5PLnU8zfWPfMLnISA03wcAQo51A= -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:27 2026 by rpki-client