$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cd74ff64-d09a-3a40-9a53-36ada9c55940.roa File: cd74ff64-d09a-3a40-9a53-36ada9c55940.roa (raw, json) Hash identifier: 0j3g5ov6C/4gU+LAMvf6BQZKCGi00pCZfw6WrWyVx0I= Subject key identifier: 1E:DD:86:08:0B:44:F1:5E:AA:C0:75:16:F3:8E:99:BF:93:60:0F:53 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584CCA41F1FEB33B5A54B8400D80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cd74ff64-d09a-3a40-9a53-36ada9c55940.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 6453 IP address blocks: 209.58.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:f1:fe:b3:3b:5a:54:b8:40:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=49c0e3ba-ed98-44f8-89fc-2baf512ffbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cf:ad:ac:f8:90:57:a6:24:1c:7a:ce:9b:34: 08:c3:b3:19:a7:07:87:5b:fd:0c:48:2c:a8:cb:6b: 2e:e3:6e:14:57:27:dc:18:c5:f6:c3:3e:34:2c:6f: 7d:46:60:34:05:72:0d:9c:14:84:23:5f:b8:aa:a0: 95:84:38:58:35:ad:53:65:6e:f8:79:90:71:cc:a0: 20:3d:a9:fa:ce:5a:9b:34:a0:a9:99:a1:e4:26:22: 60:7f:08:17:44:7c:b1:24:75:2a:b4:69:78:7d:e6: 85:cc:3f:ae:13:c3:db:96:97:69:e7:e1:34:f3:e2: 30:19:9b:75:19:c3:ab:25:dd:ef:5b:6e:f9:58:6f: a7:30:a1:ab:13:cf:25:62:a5:5c:69:cc:82:b3:6a: e3:55:ef:80:90:37:e4:c5:0c:d9:5d:87:00:87:1b: 05:26:78:48:56:5a:7e:4d:bd:0d:04:ac:19:94:4f: 42:02:76:b7:1d:85:94:a2:41:82:e4:a1:4a:26:27: ee:78:23:fc:71:b5:6d:ca:2e:12:98:3b:50:42:fb: cd:eb:e9:ea:d6:86:5b:02:ae:63:2c:74:09:84:b0: b7:59:95:5e:80:f6:11:2d:45:0e:2c:0f:79:0e:56: ac:8e:23:ae:7a:a4:a7:26:41:ca:a1:26:3a:c8:8a: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DD:86:08:0B:44:F1:5E:AA:C0:75:16:F3:8E:99:BF:93:60:0F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cd74ff64-d09a-3a40-9a53-36ada9c55940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:50:11:34:61:68:be:30:c6:77:53:d6:c0:30:da:00:f6:1d: 89:35:55:28:f8:3b:42:e2:ed:f7:63:8d:3e:c5:c9:1d:8c:56: 7b:27:6a:12:64:17:f0:88:26:1a:7d:46:21:f5:d6:b9:d0:a0: 00:3b:12:58:13:74:60:76:50:12:8d:67:60:a8:e5:be:a5:56: f7:b3:72:4b:2e:2d:5a:5b:03:1a:de:99:e7:a6:6d:c6:76:69: ff:06:b7:78:f2:97:c5:63:cd:f8:cb:14:e2:ae:22:c2:88:2d: 36:52:f8:63:dd:ca:67:5e:14:ec:1b:ab:71:31:5c:77:e5:f1: cf:9d:76:40:69:af:9d:ce:7a:34:53:0d:31:0f:25:d9:2e:4e: 4f:77:ad:bc:78:01:9e:52:cd:d6:d3:d9:13:d8:5f:33:67:5b: c3:80:27:17:a6:eb:70:0b:11:1e:c5:7d:bb:bd:ea:f7:12:66: 3b:7d:9e:04:cf:aa:f0:8a:bd:9d:63:36:30:3d:42:1c:e5:eb: cd:e1:fa:38:e6:c4:2b:05:29:d9:17:d8:c8:01:43:ae:72:23: cf:f7:41:0c:a5:10:c0:fe:00:80:a3:98:d7:1e:85:b3:f3:8d: d0:c2:c1:68:dd:0f:81:01:bb:6a:c1:19:c6:21:4f:15:5d:ca: b9:ff:b1:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfH+sztaVLhADYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk NDljMGUzYmEtZWQ5OC00NGY4LTg5ZmMtMmJhZjUxMmZmYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM+trPiQV6YkHHrOmzQIw7MZpweHW/0MSCyo y2su424UVyfcGMX2wz40LG99RmA0BXINnBSEI1+4qqCVhDhYNa1TZW74eZBxzKAg Pan6zlqbNKCpmaHkJiJgfwgXRHyxJHUqtGl4feaFzD+uE8Pblpdp5+E08+IwGZt1 GcOrJd3vW275WG+nMKGrE88lYqVcacyCs2rjVe+AkDfkxQzZXYcAhxsFJnhIVlp+ Tb0NBKwZlE9CAna3HYWUokGC5KFKJifueCP8cbVtyi4SmDtQQvvN6+nq1oZbAq5j LHQJhLC3WZVegPYRLUUOLA95DlasjiOueqSnJkHKoSY6yIo7UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7dhggLRPFeqsB1FvOOmb+TYA9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvY2Q3NGZmNjQtZDA5YS0z YTQwLTlhNTMtMzZhZGE5YzU1OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ToAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpQETRhaL4wxndT1sAw2gD2HYk1VSj4O0Li7fdjjT7FyR2MVnsnahJk F/CIJhp9RiH11rnQoAA7ElgTdGB2UBKNZ2Co5b6lVvezcksuLVpbAxremeembcZ2 af8Gt3jyl8VjzfjLFOKuIsKILTZS+GPdymdeFOwbq3ExXHfl8c+ddkBpr53OejRT DTEPJdkuTk93rbx4AZ5SzdbT2RPYXzNnW8OAJxem63ALER7Ffbu96vcSZjt9ngTP qvCKvZ1jNjA9Qhzl683h+jjmxCsFKdkX2MgBQ65yI8/3QQylEMD+AICjmNcehbPz jdDCwWjdD4EBu2rBGcYhTxVdyrn/scE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:28 2026 by rpki-client