$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa File: f94bd76f-26db-3baa-9cf0-9560be7adc04.roa (raw, json) Hash identifier: bOesCse911331yChX1HG82oc9VFI9wEcIwgjOayYYWI= Subject key identifier: 9C:07:1B:FF:59:17:4C:C3:89:13:85:BA:41:9C:BC:67:2D:9E:2B:BB Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCD0C8F9E4876C9D390C21780 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 13414 IP address blocks: 209.237.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:8f:9e:48:76:c9:d3:90:c2:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=57a56857-cb71-4fb6-a4ae-976c52ebe81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:74:55:81:2c:6f:38:99:fb:09:3d:65:a5: 48:76:38:ba:a4:8f:6b:9d:3a:07:81:4c:c3:7c:c4: 44:bb:22:86:53:a3:67:97:1f:1c:52:6d:66:d0:2d: d9:17:ee:c4:86:49:88:38:21:a2:54:e9:8e:94:9b: 09:5e:68:7c:10:19:54:f7:56:64:b9:c4:91:a4:70: 1c:5a:5e:44:65:44:32:75:3f:a7:bd:a5:df:1d:d6: bd:c4:0a:ba:29:ae:d0:41:07:18:9e:03:27:b6:4f: be:84:0d:81:e1:ff:4b:20:6b:fc:32:de:aa:f2:f8: d1:89:cc:4d:e8:b0:d7:08:13:78:af:30:90:ef:80: a3:37:66:4f:8a:7e:75:ac:da:b6:26:97:1f:ab:28: 7e:35:ee:10:95:03:77:1a:fd:fb:5d:65:bc:11:ac: f1:fe:36:61:f6:02:3f:47:de:ce:c0:d5:2c:a2:d1: 44:59:d6:d6:da:23:13:31:9b:86:76:52:f3:7e:5d: 49:96:b3:78:69:67:de:34:36:e9:74:af:fa:24:0a: 39:6b:79:3f:e7:4b:51:11:96:d1:29:29:b9:62:6e: 4d:8e:60:98:ab:f0:53:ab:3c:3e:9c:55:91:52:72: 7f:cc:84:85:f0:02:5a:1e:91:44:05:6a:1c:8b:e7: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:07:1B:FF:59:17:4C:C3:89:13:85:BA:41:9C:BC:67:2D:9E:2B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:57:9e:96:dd:57:e9:77:53:77:0b:e6:79:10:2c:a6:32:6b: 26:39:07:af:a3:03:cd:2c:c5:fc:cf:21:47:c9:26:9d:56:ea: 87:77:2b:04:1a:49:35:d2:d0:bc:8c:5d:25:72:5f:ba:f8:bd: 64:c4:3e:6e:20:fc:3c:96:da:ba:4c:5d:74:62:6c:64:a6:a9: 79:0a:51:c0:7e:e6:eb:f2:fa:5d:11:0b:96:19:cf:bc:c5:93: ce:b0:ec:ab:b5:34:4e:11:e1:85:d8:94:cc:ea:d9:34:39:6a: 8f:e7:e9:85:02:6d:9c:7c:17:59:b6:36:21:30:c5:f1:42:3a: 70:34:f9:ec:69:77:a2:c0:bd:24:e2:f5:9a:aa:20:5a:d0:b5: 29:d2:69:36:50:77:18:14:9e:86:41:bc:91:9f:40:dc:8b:96: 8f:93:52:fa:22:1f:0c:a0:77:1c:76:bc:ca:b9:6b:ba:cd:70: d6:a8:5f:7c:2e:3e:9d:65:28:f2:71:18:ea:14:75:6f:81:ce: 57:a4:aa:f3:48:6e:e3:66:a0:81:cd:8d:88:31:1d:ba:d0:b3: d6:7c:bc:79:73:c0:f1:1b:4b:d5:d2:b0:5e:cd:c2:d4:00:4a: b6:60:f2:80:fa:89:ee:23:f2:53:b7:1e:28:45:04:83:2e:0e: a9:6c:fb:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDI+eSHbJ05DCF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NTdhNTY4NTctY2I3MS00ZmI2LWE0YWUtOTc2YzUyZWJlODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir10VYEsbziZ+wk9ZaVIdji6pI9rnToHgUzD fMREuyKGU6Nnlx8cUm1m0C3ZF+7EhkmIOCGiVOmOlJsJXmh8EBlU91ZkucSRpHAc Wl5EZUQydT+nvaXfHda9xAq6Ka7QQQcYngMntk++hA2B4f9LIGv8Mt6q8vjRicxN 6LDXCBN4rzCQ74CjN2ZPin51rNq2Jpcfqyh+Ne4QlQN3Gv37XWW8Eazx/jZh9gI/ R97OwNUsotFEWdbW2iMTMZuGdlLzfl1JlrN4aWfeNDbpdK/6JAo5a3k/50tREZbR KSm5Ym5NjmCYq/BTqzw+nFWRUnJ/zISF8AJaHpFEBWoci+eavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwHG/9ZF0zDiROFukGcvGctniu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjk0YmQ3NmYtMjZkYi0z YmFhLTljZjAtOTU2MGJlN2FkYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtXnpbdV+l3U3cL5nkQLKYyayY5B6+jA80sxfzPIUfJJp1W6od3KwQa STXS0LyMXSVyX7r4vWTEPm4g/DyW2rpMXXRibGSmqXkKUcB+5uvy+l0RC5YZz7zF k86w7Ku1NE4R4YXYlMzq2TQ5ao/n6YUCbZx8F1m2NiEwxfFCOnA0+expd6LAvSTi 9ZqqIFrQtSnSaTZQdxgUnoZBvJGfQNyLlo+TUvoiHwygdxx2vMq5a7rNcNaoX3wu Pp1lKPJxGOoUdW+BzlekqvNIbuNmoIHNjYgxHbrQs9Z8vHlzwPEbS9XSsF7NwtQA SrZg8oD6ie4j8lO3HihFBIMuDqls++A= -----END CERTIFICATE-----Generated at Mon Mar 2 06:21:19 2026 by rpki-client