$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa File: a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json) Hash identifier: EXEZ5YBf7/cpZEUu9GoTiiYKT1FcDkvYG1h093A8pLk= Subject key identifier: C8:57:52:71:41:22:FD:50:35:04:61:CA:5F:D3:9A:C0:BC:73:E8:C0 Certificate issuer: /CN=83978879-0e89-498f-901b-884a1988c27f Certificate serial: 010D0C9F4328584CA32C5744C161D6F5EEB69580 Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 21615 IP address blocks: 209.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:57:44:c1:61:d6:f5:ee:b6:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83978879-0e89-498f-901b-884a1988c27f Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=957cd9c9-c127-4321-9a60-aac2e5370f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:32:46:be:ed:a1:17:78:71:c5:3c:e8:c8:f5: 85:60:a7:60:1e:da:11:31:8f:ea:79:5c:99:67:50: fa:b9:bb:46:0b:ff:66:76:e5:e7:22:6f:5e:df:c4: 57:ad:d2:5d:2b:99:cb:f8:ea:3c:6f:dd:d6:16:78: f1:8a:6f:f3:f7:09:4a:a9:ef:3f:24:19:cf:0f:e3: c2:f1:e3:f1:d9:99:14:b6:da:f4:c3:eb:17:ff:10: b9:26:fe:b8:22:8d:d5:0d:19:41:6a:3a:90:48:24: 91:65:df:8f:17:20:20:1a:85:39:31:49:2f:88:17: f0:9c:0a:1c:8f:5d:40:90:50:ce:bb:06:f1:2c:12: 26:6c:81:9b:df:28:05:6c:e6:48:69:19:62:94:0f: 10:4b:98:d7:17:a2:2a:de:fc:ff:3d:d4:d9:f4:9e: 88:53:9f:a8:90:20:e4:d2:e4:b8:9d:b0:42:4d:2b: b3:d1:b2:a1:b3:89:88:cb:a4:5e:27:f8:2d:98:d2: 87:52:08:58:38:43:7b:c3:03:d8:fb:4b:92:0e:6e: af:4c:9a:50:87:f2:62:fb:31:7e:ed:cf:34:0f:65: d9:17:b2:f7:71:c2:c8:01:b3:ae:86:74:30:f7:4c: e3:6a:ee:5a:d0:9d:61:0c:8a:2b:c8:70:ab:9e:87: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:52:71:41:22:FD:50:35:04:61:CA:5F:D3:9A:C0:BC:73:E8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl X509v3 Authority Key Identifier: keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer sbgp-ipAddrBlock: critical IPv4: 209.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3f:ec:96:88:d6:7a:82:98:fc:32:24:8b:c3:49:19:b0:aa: e5:f6:81:a7:31:62:6e:b1:aa:82:65:ee:da:b9:24:d0:57:2a: ed:73:03:74:dd:db:86:6d:44:e5:9a:1b:19:26:e7:cd:11:d7: a0:92:e9:b7:d6:70:42:33:6e:4e:26:fc:04:f3:c1:73:65:93: e2:f5:0c:fa:40:53:e2:a3:b5:60:c0:fe:2e:65:83:9b:63:4c: df:65:91:6d:80:dd:0a:c0:c9:6f:d3:38:ca:cc:6f:c7:7b:e1: bd:cb:56:b5:f5:71:07:ff:18:2d:7a:f8:a1:fc:2d:d5:b5:43: 54:f5:9b:b1:cb:7e:87:c2:1d:1c:56:28:8a:53:5e:2f:53:68: 9d:d6:32:5c:e4:e3:27:6c:19:52:9a:d0:58:3d:2f:f9:26:d4: 19:7f:1d:ea:cb:29:75:9d:9b:2b:b2:b5:ed:e5:09:72:bf:46: cd:45:41:99:55:33:a2:f1:8c:98:14:ea:2b:6e:0d:da:35:16: 6a:cc:56:dd:6b:b5:14:a9:d2:de:be:09:ed:65:90:1e:91:ae: 9b:be:d1:c0:d9:49:aa:e1:05:59:b9:75:94:62:65:58:cb:00: 68:32:8e:21:fd:a1:fd:c5:3e:82:8a:ed:27:ac:bd:1d:ef:51: 42:c0:49:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLFdEwWHW9e62lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM5Nzg4NzktMGU4OS00OThmLTkwMWItODg0YTE5ODhj MjdmMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTU3Y2Q5YzktYzEyNy00MzIxLTlhNjAtYWFjMmU1MzcwZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTJGvu2hF3hxxTzoyPWFYKdgHtoRMY/qeVyZ Z1D6ubtGC/9mduXnIm9e38RXrdJdK5nL+Oo8b93WFnjxim/z9wlKqe8/JBnPD+PC 8ePx2ZkUttr0w+sX/xC5Jv64Io3VDRlBajqQSCSRZd+PFyAgGoU5MUkviBfwnAoc j11AkFDOuwbxLBImbIGb3ygFbOZIaRlilA8QS5jXF6Iq3vz/PdTZ9J6IU5+okCDk 0uS4nbBCTSuz0bKhs4mIy6ReJ/gtmNKHUghYOEN7wwPY+0uSDm6vTJpQh/Ji+zF+ 7c80D2XZF7L3ccLIAbOuhnQw90zjau5a0J1hDIoryHCrnodvCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhXUnFBIv1QNQRhyl/TmsC8c+jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3 ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRhMTk4OGMyN2YvYTc2ZTJhOTktYWZlZi0z ODdlLTgyZTktZGFmMGMyYjU1YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM5Nzg4NzktMGU4OS00OThmLTkw MWItODg0YTE5ODhjMjdmLzgzOTc4ODc5LTBlODktNDk4Zi05MDFiLTg4NGExOTg4 YzI3Zi5jcmwwHwYDVR0jBBgwFoAU8hNJvB6lb5TpnmMzzFMcxfcAueIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRh MTk4OGMyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ/7JaI1nqCmPwyJIvDSRmwquX2gacxYm6xqoJl7tq5JNBXKu1zA3Td 24ZtROWaGxkm580R16CS6bfWcEIzbk4m/ATzwXNlk+L1DPpAU+KjtWDA/i5lg5tj TN9lkW2A3QrAyW/TOMrMb8d74b3LVrX1cQf/GC16+KH8LdW1Q1T1m7HLfofCHRxW KIpTXi9TaJ3WMlzk4ydsGVKa0Fg9L/km1Bl/HerLKXWdmyuyte3lCXK/Rs1FQZlV M6LxjJgU6ituDdo1FmrMVt1rtRSp0t6+Ce1lkB6Rrpu+0cDZSarhBVm5dZRiZVjL AGgyjiH9of3FPoKK7SesvR3vUULASaQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:13 2026 by rpki-client