$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa File: 866e5acf-ad02-3689-8207-fee6bcc3ab49.roa (raw, json) Hash identifier: fDW11Q9sl1LIMZiGSMRoTSz7LzrSRyrUoMWIkn7PmXE= Subject key identifier: 92:35:26:2B:CF:F4:CD:D7:AB:48:76:47:04:9B:04:DE:6A:EC:BD:D8 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D04E240DD3EF7FCB20C019B80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 11233 IP address blocks: 209.237.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:40:dd:3e:f7:fc:b2:0c:01:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=1c977575-7be7-4a7f-aed3-b3c1d5bbdaf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:b5:c8:29:af:31:6c:e4:30:45:bf:61:ec: ff:68:52:f4:87:43:89:48:4a:7b:e8:04:34:00:9d: 4f:06:70:75:29:b9:40:0f:30:8c:1a:8c:41:2f:c6: 50:e8:e3:f7:28:1a:b8:95:3a:01:69:f7:ec:27:69: a4:d5:a3:f7:26:49:1b:07:29:5a:a6:cd:b0:57:04: 47:74:62:1c:e5:bd:0f:10:39:fe:77:14:ab:e4:5e: 96:da:97:fa:90:10:a8:54:24:b6:63:bb:a6:c0:70: ea:95:b9:af:37:bc:66:3f:d7:3c:61:6a:1e:06:47: c2:89:5f:a7:e4:f5:2d:ba:ac:ac:77:2f:b5:78:32: 19:7a:b9:45:2d:2c:88:5e:36:6a:b4:dd:e0:30:7e: 53:1c:96:27:d9:60:19:87:c0:b3:ee:90:ce:be:d6: 28:81:0f:18:10:fb:98:74:24:0a:52:8e:d2:d3:d8: 61:ac:a0:0f:35:02:e0:eb:88:8e:5f:39:d7:a9:c1: f1:db:27:9b:b6:2a:35:ec:be:88:f4:1b:23:9e:1c: 34:ae:23:3b:8d:a7:c4:f3:89:6b:1b:af:e2:e8:95: 6f:2f:07:cc:87:de:a3:52:b0:05:f8:ec:f4:77:45: cd:43:04:65:9f:8c:67:c1:f2:fb:1b:df:c7:4c:b5: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:35:26:2B:CF:F4:CD:D7:AB:48:76:47:04:9B:04:DE:6A:EC:BD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e6:f3:9a:d1:4c:a4:d3:0a:b9:ab:97:27:1c:30:4d:d5:77: eb:61:ac:1b:c8:e2:be:49:e4:07:70:6c:21:bd:a8:c3:e1:aa: 8f:78:a2:75:20:66:82:fe:52:82:fd:40:a2:6c:29:4f:9d:e6: 9c:73:f0:7c:eb:3b:ac:0c:d6:47:45:57:a4:a4:1e:26:90:19: d2:1d:86:6a:76:97:e7:9e:e3:6c:29:dc:81:c6:82:be:f1:1e: 98:f6:3b:ae:73:0a:d8:e0:eb:1c:ef:d9:fa:be:d7:32:db:65: fe:7a:ff:f2:95:fc:97:37:29:03:73:c6:0a:ae:de:dd:42:56: 31:bd:35:16:43:e8:03:6b:73:fa:ce:12:ce:ad:e5:53:6a:11: ce:b3:66:07:8a:0a:2b:54:58:13:9a:8e:a1:f4:2e:d2:9a:91: b7:36:3e:5c:c5:eb:35:59:ba:c1:1e:4e:0a:5a:22:f5:2c:ab: 90:98:47:45:8d:b4:73:fd:b6:0b:e9:05:d9:69:e0:2b:92:43: 11:1a:f7:fe:d1:01:fa:d4:a9:64:e1:13:e5:56:38:c5:4f:d8: e8:2a:b3:d6:1c:cc:fd:3f:45:aa:2f:dc:f8:05:a9:42:12:f7: 02:92:78:c6:d5:97:f5:b0:ea:4b:d1:bd:53:15:3c:b8:e7:2a: 00:e9:d5:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kDdPvf8sgwBm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MWM5Nzc1NzUtN2JlNy00YTdmLWFlZDMtYjNjMWQ1YmJkYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloi1yCmvMWzkMEW/Yez/aFL0h0OJSEp76AQ0 AJ1PBnB1KblADzCMGoxBL8ZQ6OP3KBq4lToBaffsJ2mk1aP3JkkbBylaps2wVwRH dGIc5b0PEDn+dxSr5F6W2pf6kBCoVCS2Y7umwHDqlbmvN7xmP9c8YWoeBkfCiV+n 5PUtuqysdy+1eDIZerlFLSyIXjZqtN3gMH5THJYn2WAZh8Cz7pDOvtYogQ8YEPuY dCQKUo7S09hhrKAPNQLg64iOXznXqcHx2yebtio17L6I9Bsjnhw0riM7jafE84lr G6/i6JVvLwfMh96jUrAF+Oz0d0XNQwRln4xnwfL7G9/HTLVS+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI1JivP9M3Xq0h2RwSbBN5q7L3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvODY2ZTVhY2YtYWQwMi0z Njg5LTgyMDctZmVlNmJjYzNhYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfm85rRTKTTCrmrlyccME3Vd+thrBvI4r5J5AdwbCG9qMPhqo94onUg ZoL+UoL9QKJsKU+d5pxz8HzrO6wM1kdFV6SkHiaQGdIdhmp2l+ee42wp3IHGgr7x Hpj2O65zCtjg6xzv2fq+1zLbZf56//KV/Jc3KQNzxgqu3t1CVjG9NRZD6ANrc/rO Es6t5VNqEc6zZgeKCitUWBOajqH0LtKakbc2PlzF6zVZusEeTgpaIvUsq5CYR0WN tHP9tgvpBdlp4CuSQxEa9/7RAfrUqWThE+VWOMVP2Ogqs9YczP0/Raov3PgFqUIS 9wKSeMbVl/Ww6kvRvVMVPLjnKgDp1U4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:46 2026 by rpki-client