$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa File: 843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json) Hash identifier: iOCvtJZCcAWaAHfTLioyViUItY5+9Y8RDNKQbM4SnBo= Subject key identifier: 33:63:C9:D9:9F:BE:74:87:54:16:28:3E:D6:C6:05:28:40:41:B2:42 Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F4328584CA5F709D04657B3EEB970D000 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 2572 IP address blocks: 198.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:09:d0:46:57:b3:ee:b9:70:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=ca775e58-5711-4084-8ec3-92e33501b0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:1a:2b:4e:ba:a3:bb:4e:3e:d1:ca:01:fa: 61:22:86:f6:89:8f:69:86:bc:22:c4:64:f9:08:65: 3a:20:c7:fa:a3:64:6c:9e:82:1f:d2:7b:52:d4:52: ba:4a:6a:ce:e5:70:7d:6e:eb:ae:67:52:83:d8:cc: f1:8c:cd:1f:0c:d1:b5:f2:a7:a5:be:c1:87:fa:bd: 0f:76:c4:dc:a0:6a:2f:e1:86:81:ce:7f:12:d5:a4: 85:35:e8:80:0c:12:ec:da:7d:e0:49:ca:f7:43:12: e7:7b:d1:30:81:b2:48:7e:db:61:2b:b9:9c:fb:ab: 85:a4:4b:7f:72:50:ee:5f:9e:79:3c:e3:f0:44:ef: dc:ef:49:57:3b:1e:48:1d:86:cc:47:62:7d:ec:25: fa:96:75:ba:d3:17:65:7f:46:93:fb:5a:21:a0:f3: 87:46:3a:51:0b:43:a9:1e:ab:29:b4:69:cd:2a:bc: 36:47:0a:18:ee:2b:fd:02:f9:a2:77:18:0a:20:03: 59:12:e3:18:53:4b:c6:19:3c:e5:86:ac:19:02:28: cb:ad:98:9a:98:fb:8a:14:67:5b:fe:db:82:4a:59: 2c:d1:1c:ba:7a:b8:a5:77:93:87:f9:ab:21:94:d5: 7d:d3:b1:55:ca:c7:19:48:9f:c4:e1:7c:51:16:ea: 15:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:C9:D9:9F:BE:74:87:54:16:28:3E:D6:C6:05:28:40:41:B2:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 198.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9d:4e:7e:20:9c:6b:4f:5c:83:e1:ae:f8:f9:ac:7e:cd:d3: 94:ec:fe:cf:30:26:49:82:1f:a3:77:a1:a4:ce:1c:f9:c3:f4: 53:c7:31:ea:e3:a3:83:4d:30:d2:5a:32:5b:2b:cc:9c:23:45: cc:7e:7e:df:96:11:c8:fb:05:be:9a:c9:1f:8b:7a:92:6a:f9: c7:8c:79:e4:f4:65:7c:91:b9:5a:c6:2e:65:2d:6d:23:03:76: 19:57:ec:dc:a7:aa:18:b7:3d:9f:ae:75:b0:a5:1c:97:7a:ea: 1c:66:a8:6e:a2:e3:9c:10:e8:5c:46:4e:f8:83:b1:e5:9e:65: 3b:df:33:2c:2a:43:14:e4:3d:e2:5a:37:15:1e:6d:51:03:fd: b4:19:69:31:4c:cf:39:72:17:dc:fb:80:54:3d:b3:a5:7a:c3: ad:c1:77:a6:bd:10:9a:04:bb:bb:64:52:28:f5:94:4f:5e:57: df:e0:aa:7a:b5:6a:84:53:d3:39:d6:1e:8c:33:6c:8e:2e:89: 30:5f:6b:9e:84:90:59:4f:91:6e:16:8e:ed:31:b4:60:3c:41: c5:ab:60:a7:fe:ee:b9:f9:70:98:6b:c2:71:60:c0:85:e2:cc: a5:40:43:f7:b4:f6:72:11:b4:9e:50:e8:e1:57:73:51:3e:53: 24:ca:d6:99 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyl9wnQRlez7rlw0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk Y2E3NzVlNTgtNTcxMS00MDg0LThlYzMtOTJlMzM1MDFiMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRgaK066o7tOPtHKAfphIob2iY9phrwixGT5 CGU6IMf6o2RsnoIf0ntS1FK6SmrO5XB9buuuZ1KD2MzxjM0fDNG18qelvsGH+r0P dsTcoGov4YaBzn8S1aSFNeiADBLs2n3gScr3QxLne9EwgbJIftthK7mc+6uFpEt/ clDuX555POPwRO/c70lXOx5IHYbMR2J97CX6lnW60xdlf0aT+1ohoPOHRjpRC0Op HqsptGnNKrw2RwoY7iv9AvmidxgKIANZEuMYU0vGGTzlhqwZAijLrZiamPuKFGdb /tuCSlks0Ry6erild5OH+ashlNV907FVyscZSJ/E4XxRFuoViQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDNjydmfvnSHVBYoPtbGBShAQbJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvODQzYjZhMWMtOWYwOS0z MmU2LWFhMDMtZDVkZDA1ODNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVp1OfiCca09cg+Gu+Pmsfs3TlOz+zzAmSYIfo3ehpM4c+cP0U8cx6uOj g00w0loyWyvMnCNFzH5+35YRyPsFvprJH4t6kmr5x4x55PRlfJG5WsYuZS1tIwN2 GVfs3KeqGLc9n651sKUcl3rqHGaobqLjnBDoXEZO+IOx5Z5lO98zLCpDFOQ94lo3 FR5tUQP9tBlpMUzPOXIX3PuAVD2zpXrDrcF3pr0QmgS7u2RSKPWUT15X3+CqerVq hFPTOdYejDNsji6JMF9rnoSQWU+RbhaO7TG0YDxBxatgp/7uuflwmGvCcWDAheLM pUBD97T2chG0nlDo4VdzUT5TJMrWmQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:40 2026 by rpki-client