$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa File: 49eed83d-dd99-34f1-86ae-41393812eaf5.roa (raw, json) Hash identifier: 60JqFR/p7L7w+7TRFQAASDlJHOmCkLdzWPY8T9ykfcU= Subject key identifier: B4:13:E9:4D:62:BB:2F:E5:05:C8:30:47:03:45:F2:FC:81:AB:32:48 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D04E23EED32E1F91EDFCC1B80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 11233 IP address blocks: 209.237.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3e:ed:32:e1:f9:1e:df:cc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=ace34bb3-1ad6-4018-895e-154136e3cfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:4d:ae:33:f8:e5:a8:b2:e1:33:44:7d:5c: eb:f2:f7:03:2e:74:45:67:cf:a5:b4:c7:f0:ed:d9: 33:2d:12:c8:da:7e:f2:fa:f1:b0:a4:b0:30:9f:8e: a0:47:81:7b:ff:99:19:90:88:dc:e6:39:cc:ba:db: 92:15:74:71:32:51:5e:49:90:d9:1c:e7:ee:f0:ce: 1f:dd:a3:33:42:42:18:da:ed:e3:73:94:bb:4a:69: 08:6e:ac:1a:ea:f3:42:a5:16:fe:73:47:7a:0a:f0: 63:bc:56:f5:84:bb:a8:1a:57:a5:e2:7a:eb:5c:3f: 56:09:82:62:7c:35:d7:b9:4f:49:bd:b8:e5:25:c0: fd:ff:b8:6e:08:39:22:e6:f2:7e:12:12:6e:c7:83: c7:b3:94:22:8c:79:c6:9d:3e:2f:89:14:39:1c:07: 35:6e:9c:fd:ad:b9:3b:eb:a6:9e:71:fb:05:ec:2e: 6c:61:e4:70:f2:d3:3e:8b:89:66:b1:3b:ec:d8:30: 27:53:cf:c7:cb:3f:0c:58:a4:92:8d:3a:47:9c:4d: f3:53:f5:0f:ff:09:8c:e0:bc:da:b3:62:3d:1e:66: f9:e5:d9:a5:2c:a3:ce:c3:45:16:b9:3a:da:b4:1e: 5e:c7:7e:d7:76:ec:e6:27:53:62:0f:a6:c1:4d:18: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:13:E9:4D:62:BB:2F:E5:05:C8:30:47:03:45:F2:FC:81:AB:32:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d6:b0:47:f2:95:ee:b6:a2:e5:62:4e:e5:11:eb:0a:97:2f: 0f:52:61:34:25:17:5d:d1:02:a4:8e:3f:ef:94:b3:34:60:6f: e5:32:a9:ac:df:b4:24:f1:3e:52:a0:9d:79:c3:c5:f1:eb:85: 2e:31:94:7b:4d:aa:93:79:2c:89:68:21:91:c9:8c:db:14:b2: 74:78:73:c3:0b:a5:29:70:4b:5a:0f:af:08:28:3e:d8:72:d6: 09:4c:bf:29:ae:1a:ec:3a:91:ee:ec:bf:a2:cd:8a:c0:a2:ae: ef:e8:8c:23:3a:85:c1:c4:80:55:70:53:d2:ab:f8:8c:69:b8: 8f:52:3d:87:c7:c5:47:e8:c6:a2:e9:f6:02:ee:aa:f3:4d:83: aa:f1:8c:2d:9d:4c:52:54:34:f3:56:00:c7:8f:dd:26:77:b7: 89:06:d1:59:58:82:32:3f:58:a8:a6:64:e2:ea:71:41:ea:21: ff:28:47:b8:60:b8:6a:91:59:1d:c0:2b:46:7f:50:96:94:03: 2e:db:f6:b8:bd:64:41:ad:9e:f7:ca:07:22:48:b5:c3:22:9d: 37:60:42:ea:80:49:82:11:3e:c8:0d:8d:05:19:93:e9:89:76: e5:bf:be:e9:6c:78:08:a7:e0:30:1e:f5:1a:ea:82:e8:77:8c: 24:dd:d8:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4j7tMuH5Ht/MG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWNlMzRiYjMtMWFkNi00MDE4LTg5NWUtMTU0MTM2ZTNjZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbtNrjP45aiy4TNEfVzr8vcDLnRFZ8+ltMfw 7dkzLRLI2n7y+vGwpLAwn46gR4F7/5kZkIjc5jnMutuSFXRxMlFeSZDZHOfu8M4f 3aMzQkIY2u3jc5S7SmkIbqwa6vNCpRb+c0d6CvBjvFb1hLuoGlel4nrrXD9WCYJi fDXXuU9JvbjlJcD9/7huCDki5vJ+EhJux4PHs5QijHnGnT4viRQ5HAc1bpz9rbk7 66aecfsF7C5sYeRw8tM+i4lmsTvs2DAnU8/Hyz8MWKSSjTpHnE3zU/UP/wmM4Lza s2I9Hmb55dmlLKPOw0UWuTratB5ex37XduzmJ1NiD6bBTRi9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQT6U1iuy/lBcgwRwNF8vyBqzJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDllZWQ4M2QtZGQ5OS0z NGYxLTg2YWUtNDEzOTM4MTJlYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/WsEfyle62ouViTuUR6wqXLw9SYTQlF13RAqSOP++UszRgb+Uyqazf tCTxPlKgnXnDxfHrhS4xlHtNqpN5LIloIZHJjNsUsnR4c8MLpSlwS1oPrwgoPthy 1glMvymuGuw6ke7sv6LNisCiru/ojCM6hcHEgFVwU9Kr+IxpuI9SPYfHxUfoxqLp 9gLuqvNNg6rxjC2dTFJUNPNWAMeP3SZ3t4kG0VlYgjI/WKimZOLqcUHqIf8oR7hg uGqRWR3AK0Z/UJaUAy7b9ri9ZEGtnvfKByJItcMinTdgQuqASYIRPsgNjQUZk+mJ duW/vulseAin4DAe9Rrqguh3jCTd2Ns= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:30 2026 by rpki-client