$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa File: aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa (raw, json) Hash identifier: icWDRRXv7fhMdzE4nclcSN0EVSTB3ibyt4FlYjRhvdk= Subject key identifier: 4F:A8:DA:D8:9B:7C:31:9A:EA:29:36:CF:0E:44:6E:A1:CE:D5:7D:E1 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCD0C92F866F25F3711BB9DC0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 13414 IP address blocks: 209.237.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:92:f8:66:f2:5f:37:11:bb:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=93d40657-2798-47e9-ad2d-a33983fb0ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:42:03:d9:3a:e5:66:0b:8a:00:3d:68:92: e1:50:2b:5e:3c:88:ff:76:89:ec:60:df:c3:8f:eb: da:d0:fa:91:ff:0e:e5:e2:1b:3c:1f:55:7b:19:af: 9b:b3:76:d0:bc:63:73:e4:16:2a:e4:05:3a:ae:68: b8:98:63:99:bd:9d:36:a5:b3:71:f0:7f:c6:a2:85: 40:5c:11:f8:54:66:a6:da:3c:d9:a1:72:b0:9b:3a: dd:fb:78:ed:d3:9e:38:0c:7c:71:af:e7:07:9d:e6: 93:09:23:cc:ae:04:0a:57:74:31:40:f1:b9:4b:d2: b4:11:f5:68:b1:c8:18:ca:26:de:6c:cf:34:0b:1c: 9f:d5:6a:36:ca:b4:49:10:68:32:67:1a:77:a8:f3: 5b:23:e5:02:41:e3:76:4d:b3:32:f5:14:20:13:f9: 74:6c:98:31:bd:a9:7d:f1:7e:0f:22:d9:6c:f6:b6: b3:d3:89:37:be:df:0a:3d:78:9a:07:a4:8d:0d:59: 09:0f:dd:a9:41:cb:85:c7:9f:98:19:a9:34:da:eb: 51:b3:34:79:cd:5d:c7:55:fe:10:65:22:0c:a5:e7: b6:18:96:14:e1:25:4e:b9:95:8b:2e:78:b1:7f:e2: cd:cb:74:75:88:61:f0:f1:65:b1:9c:92:21:35:f6: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A8:DA:D8:9B:7C:31:9A:EA:29:36:CF:0E:44:6E:A1:CE:D5:7D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f4:0f:94:a7:c7:9f:a7:03:79:d3:eb:79:e1:b1:18:a4:6d: 98:a8:9c:2d:c6:ff:dc:7d:99:15:ed:9e:0a:78:7c:70:6b:eb: 6b:b6:9d:72:4f:37:eb:7e:fb:5c:10:cb:09:dc:38:d5:01:49: ca:ea:0a:11:7e:c5:25:9b:eb:c0:90:74:17:c5:90:aa:f1:36: 91:50:5b:93:34:6c:07:5c:c0:29:a1:a2:39:24:f9:69:87:27: 04:ae:0f:9b:af:b1:81:44:f9:36:3e:51:ed:2a:1f:42:96:82: 67:dc:a8:c8:0c:03:7d:53:31:c1:87:05:d9:25:da:27:0f:c5: 7a:02:db:af:be:2f:01:0d:0d:fe:93:a0:06:1c:95:20:f1:c8: 10:2b:07:61:42:cb:84:13:ba:1d:a7:a5:b3:fb:9d:37:1e:9c: 43:ad:65:60:ad:41:ea:58:c1:17:31:13:76:6d:f3:94:1a:e6: 11:24:dc:f7:b0:10:06:57:19:ac:f6:39:c5:0b:f6:38:2d:9b: 1f:7d:26:d2:00:38:dd:ac:2f:6a:f8:2e:21:9d:bf:78:ef:b0: a9:e8:7b:b0:37:43:6c:48:ef:c8:ec:c2:46:af:17:92:20:74: a0:fd:ed:a3:36:c1:6b:05:eb:ce:a7:a5:6e:0e:3d:05:2a:ff: 7e:06:b5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJL4ZvJfNxG7ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk OTNkNDA2NTctMjc5OC00N2U5LWFkMmQtYTMzOTgzZmIwYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKlCA9k65WYLigA9aJLhUCtePIj/donsYN/D j+va0PqR/w7l4hs8H1V7Ga+bs3bQvGNz5BYq5AU6rmi4mGOZvZ02pbNx8H/GooVA XBH4VGam2jzZoXKwmzrd+3jt0544DHxxr+cHneaTCSPMrgQKV3QxQPG5S9K0EfVo scgYyibebM80Cxyf1Wo2yrRJEGgyZxp3qPNbI+UCQeN2TbMy9RQgE/l0bJgxval9 8X4PItls9raz04k3vt8KPXiaB6SNDVkJD92pQcuFx5+YGak02utRszR5zV3HVf4Q ZSIMpee2GJYU4SVOuZWLLnixf+LNy3R1iGHw8WWxnJIhNfbk8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+o2tibfDGa6ik2zw5EbqHO1X3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYWEwZjdjNGItOWVhMy0z YmFjLTg1MzQtNmFkZTU2MTg2NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf0D5Snx5+nA3nT63nhsRikbZionC3G/9x9mRXtngp4fHBr62u2nXJP N+t++1wQywncONUBScrqChF+xSWb68CQdBfFkKrxNpFQW5M0bAdcwCmhojkk+WmH JwSuD5uvsYFE+TY+Ue0qH0KWgmfcqMgMA31TMcGHBdkl2icPxXoC26++LwENDf6T oAYclSDxyBArB2FCy4QTuh2npbP7nTcenEOtZWCtQepYwRcxE3Zt85Qa5hEk3Pew EAZXGaz2OcUL9jgtmx99JtIAON2sL2r4LiGdv3jvsKnoe7A3Q2xI78jswkavF5Ig dKD97aM2wWsF686npW4OPQUq/34GtcI= -----END CERTIFICATE-----Generated at Mon Mar 2 01:09:53 2026 by rpki-client