$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa File: d8d40582-bd1e-3c2e-9795-777694a9d1af.roa (raw, json) Hash identifier: 40l8A8zTk0d56XNvu//Yv8lZ6tGYqx2wso7Z1/S0yZY= Subject key identifier: 86:53:F2:AB:E1:CF:9D:CF:59:28:E1:AE:7F:38:6F:20:7C:32:60:8F Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCBA752ECFA4DD5D09C964880 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 13414 IP address blocks: 209.237.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:52:ec:fa:4d:d5:d0:9c:96:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=eafab9ed-c3a0-4db7-9107-16812e1b6982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:e0:f5:79:7c:09:a0:e7:a1:f9:57:d7:6c: e9:c3:5b:2f:ec:34:62:01:37:8e:1a:a6:69:b4:87: c4:6f:98:81:23:9e:73:c5:37:c1:82:2f:ae:1a:3c: 89:2e:71:1e:93:18:a2:2b:29:24:f1:0d:b2:20:7a: 64:97:eb:3a:d3:02:30:2d:5d:34:f5:77:26:29:00: 50:46:32:d3:fd:f9:5b:aa:28:b4:26:04:4f:85:f9: 6d:ef:86:85:75:b0:92:19:5e:1c:e9:4d:88:7d:21: ae:f4:3d:84:ee:b0:4a:93:8e:22:74:24:6c:5d:f4: b2:2c:1a:04:92:61:37:3a:68:b1:02:94:c9:59:7a: c5:0e:90:a2:0a:0a:4c:c0:8e:92:bd:0e:19:e9:27: 9a:2b:6b:6e:72:d6:d8:39:44:ec:67:41:d2:37:2c: dd:70:ae:29:9f:bb:3c:86:eb:e9:66:02:e8:57:28: c8:bf:7b:f6:45:c1:7b:be:95:5d:8d:e9:ac:c0:27: cb:80:30:80:d4:e7:62:98:62:b6:c2:62:27:37:9b: d5:a0:c3:80:60:d2:42:81:08:3f:c5:7c:ee:2a:8e: c7:a9:98:b6:b8:fe:b9:e7:9e:af:cb:ab:8f:08:a7: 81:8e:89:f3:f9:f1:b8:ee:94:dd:38:25:c7:fd:9e: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:53:F2:AB:E1:CF:9D:CF:59:28:E1:AE:7F:38:6F:20:7C:32:60:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:12:a8:97:3c:a8:0b:5d:1d:e4:3d:ff:b2:71:68:92:28:6c: 22:f3:2f:6d:3b:72:d6:a1:99:a9:58:65:f3:5f:65:32:94:8d: 48:48:02:05:7a:31:01:da:6c:47:6a:47:dc:21:31:76:28:9d: 46:be:d8:7f:c8:95:28:5f:b0:c5:43:22:3c:49:2c:90:11:2a: 0b:8e:da:99:c0:c3:61:8d:46:80:0c:e9:9d:a2:93:83:c3:86: dd:88:66:29:07:09:33:69:45:73:bf:6b:04:86:e6:bd:76:dc: c7:24:9a:aa:34:70:10:fc:5b:8d:11:9d:38:70:28:1b:2e:b1: 1a:7e:aa:27:b2:1c:ab:5e:2c:a5:51:b1:db:b3:e8:68:09:36: ab:17:06:aa:d9:6b:e8:a3:35:a8:12:a5:d3:0c:fe:cf:04:5d: 95:c6:49:c8:81:20:ae:1d:bd:fb:74:7f:a1:21:c9:02:d0:8e: 3e:5d:10:cd:a1:b2:d1:cd:5f:09:a8:50:1b:fd:c6:a2:29:50: ba:30:0b:d1:f2:7a:f0:56:2d:a5:ee:a5:ad:76:21:0c:44:c7: aa:7c:63:31:0e:2f:e8:5d:f9:6f:f0:96:df:6f:e7:d1:01:52: 7c:0a:9a:68:66:35:d5:af:8a:4f:6d:4b:65:35:d6:84:5f:cd: 1c:20:7f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1Ls+k3V0JyWSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk ZWFmYWI5ZWQtYzNhMC00ZGI3LTkxMDctMTY4MTJlMWI2OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXbg9Xl8CaDnoflX12zpw1sv7DRiATeOGqZp tIfEb5iBI55zxTfBgi+uGjyJLnEekxiiKykk8Q2yIHpkl+s60wIwLV009XcmKQBQ RjLT/flbqii0JgRPhflt74aFdbCSGV4c6U2IfSGu9D2E7rBKk44idCRsXfSyLBoE kmE3OmixApTJWXrFDpCiCgpMwI6SvQ4Z6SeaK2tuctbYOUTsZ0HSNyzdcK4pn7s8 huvpZgLoVyjIv3v2RcF7vpVdjemswCfLgDCA1OdimGK2wmInN5vVoMOAYNJCgQg/ xXzuKo7HqZi2uP65556vy6uPCKeBjonz+fG47pTdOCXH/Z6P0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZT8qvhz53PWSjhrn84byB8MmCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDhkNDA1ODItYmQxZS0z YzJlLTk3OTUtNzc3Njk0YTlkMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4SqJc8qAtdHeQ9/7JxaJIobCLzL207ctahmalYZfNfZTKUjUhIAgV6 MQHabEdqR9whMXYonUa+2H/IlShfsMVDIjxJLJARKguO2pnAw2GNRoAM6Z2ik4PD ht2IZikHCTNpRXO/awSG5r123Mckmqo0cBD8W40RnThwKBsusRp+qieyHKteLKVR sduz6GgJNqsXBqrZa+ijNagSpdMM/s8EXZXGSciBIK4dvft0f6EhyQLQjj5dEM2h stHNXwmoUBv9xqIpULowC9HyevBWLaXupa12IQxEx6p8YzEOL+hd+W/wlt9v59EB UnwKmmhmNdWvik9tS2U11oRfzRwgfyw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:15:03 2026 by rpki-client