$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa File: 8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa (raw, json) Hash identifier: fVT4dCgqaifst6bcXfYZ+EBLMQLnl+8W++1xD/7HoVc= Subject key identifier: 02:80:12:01:E4:17:93:E4:98:B5:00:82:FB:29:30:D9:F0:A8:38:3F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584CB121CCF9CA9779257F642800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 7861 IP address blocks: 209.29.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cc:f9:ca:97:79:25:7f:64:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=a2f261ca-931a-4bce-8092-1d60dda79821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:95:84:a5:63:87:8e:43:29:ae:4a:38:61:11: be:0f:d5:cb:1b:ff:17:fb:f9:ca:c5:e5:13:e8:a9: 47:09:64:3c:4c:71:72:6d:6b:62:40:be:d7:70:7d: 89:b4:7f:e7:a4:38:7a:9f:90:b9:08:28:dd:44:c4: 4c:ac:11:84:5b:91:2e:bf:80:f4:25:d6:c3:fc:6a: 85:7e:0d:02:03:bb:30:ab:8c:27:6e:bf:86:96:62: fa:ce:50:52:d9:f5:53:47:e5:6c:b6:ff:38:82:c0: a6:bb:6c:21:88:07:43:84:d9:51:c5:ac:1c:a5:ed: dc:fd:dd:34:ca:d3:65:b1:0a:48:30:0d:80:f9:70: 39:e7:05:39:20:04:aa:0e:03:35:de:7f:e4:b8:fe: af:04:d1:61:4a:75:14:38:9c:73:ac:6c:6e:8e:df: a5:f9:d4:fb:49:09:4c:5c:61:b6:53:7c:46:83:54: 6c:56:35:43:bd:8b:d1:b9:20:8d:bd:32:cc:83:9c: 6a:23:8b:3c:da:83:87:31:e6:2d:e1:c3:7e:7f:4a: c3:73:21:75:de:4c:7b:c7:2a:b2:94:ba:0e:3b:8e: 5d:05:4c:c9:38:74:37:64:a9:04:44:3e:60:d8:7b: 7e:92:fc:68:78:5d:71:dc:75:ed:7e:95:8e:1b:40: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:80:12:01:E4:17:93:E4:98:B5:00:82:FB:29:30:D9:F0:A8:38:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8668bf6b-67ad-366d-8a67-fcf862d9d45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ec:ea:c7:ac:23:d0:dc:8b:f7:3d:f8:90:79:c2:83:96:f3: c9:71:94:80:3b:5d:6c:6d:1d:d8:a0:31:a3:27:e9:65:1a:68: 3b:ea:b3:66:b9:51:85:6a:57:96:a3:91:52:f8:94:0a:78:3a: c9:08:5d:4d:13:8a:59:ba:d9:23:47:f6:0a:37:c6:61:a7:2d: 4e:0c:e4:47:d4:a7:fb:33:a0:49:a8:8a:25:45:e9:f4:76:6c: b2:6f:b7:39:b2:23:34:f3:74:1c:05:01:34:44:b6:37:af:e2: 58:1c:03:29:8e:ae:d9:b7:3f:42:5d:88:10:17:db:96:b9:09: fb:b5:59:e8:0a:37:65:43:17:19:da:9c:29:6a:0c:4a:6d:b7: 42:1a:9a:c4:f3:07:f5:8d:bc:19:58:fe:c2:d8:58:53:19:72: 66:b9:db:1b:de:48:22:2c:9d:3b:05:e0:44:25:03:04:45:91: e4:93:8a:4b:ea:c1:5a:92:52:87:a6:47:96:5a:cc:95:b2:b5: 5d:37:95:f8:32:04:6b:a9:53:19:4e:b5:8a:87:9c:32:44:33: da:db:5b:ab:b2:fc:5f:32:69:6b:9b:2e:d2:b2:ae:91:1d:56: 06:12:8d:e8:87:93:90:f6:73:e6:b9:d3:bd:e6:57:8b:e3:f3: 3e:7f:8e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcz5ypd5JX9kKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTJmMjYxY2EtOTMxYS00YmNlLTgwOTItMWQ2MGRkYTc5ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZWEpWOHjkMprko4YRG+D9XLG/8X+/nKxeUT 6KlHCWQ8THFybWtiQL7XcH2JtH/npDh6n5C5CCjdRMRMrBGEW5Euv4D0JdbD/GqF fg0CA7swq4wnbr+GlmL6zlBS2fVTR+Vstv84gsCmu2whiAdDhNlRxawcpe3c/d00 ytNlsQpIMA2A+XA55wU5IASqDgM13n/kuP6vBNFhSnUUOJxzrGxujt+l+dT7SQlM XGG2U3xGg1RsVjVDvYvRuSCNvTLMg5xqI4s82oOHMeYt4cN+f0rDcyF13kx7xyqy lLoOO45dBUzJOHQ3ZKkERD5g2Ht+kvxoeF1x3HXtfpWOG0BZBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKAEgHkF5PkmLUAgvspMNnwqDg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODY2OGJmNmItNjdhZC0z NjZkLThhNjctZmNmODYyZDlkNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbs6sesI9Dci/c9+JB5woOW88lxlIA7XWxtHdigMaMn6WUaaDvqs2a5 UYVqV5ajkVL4lAp4OskIXU0Tilm62SNH9go3xmGnLU4M5EfUp/szoEmoiiVF6fR2 bLJvtzmyIzTzdBwFATREtjev4lgcAymOrtm3P0JdiBAX25a5Cfu1WegKN2VDFxna nClqDEptt0IamsTzB/WNvBlY/sLYWFMZcma52xveSCIsnTsF4EQlAwRFkeSTikvq wVqSUoemR5ZazJWytV03lfgyBGupUxlOtYqHnDJEM9rbW6uy/F8yaWubLtKyrpEd VgYSjeiHk5D2c+a5073mV4vj8z5/jhM= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:16 2026 by rpki-client