$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa File: de791f6f-55b0-308e-b01a-7d78aff6921b.roa (raw, json) Hash identifier: u84ocsipCp2RX9lebKvEb+FUET/dMFzwMK+yuke/+iM= Subject key identifier: 95:53:35:B2:A9:7C:60:80:10:38:BD:49:76:DA:DB:D4:A6:16:15:DD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584CB121CD2983E07598F9C92E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 7861 IP address blocks: 209.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cd:29:83:e0:75:98:f9:c9:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=3e040844-515c-4ae8-8755-8cf6ca86fabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d2:ec:6d:50:2f:de:c5:d4:1a:e8:ea:81:09: ac:f1:21:94:f0:6a:bf:ef:41:ad:69:c7:42:55:a7: 82:dc:9c:0f:dd:3a:cd:59:fe:58:04:85:34:ee:be: 6d:7f:0f:4c:87:7a:fe:07:f6:ea:18:22:cd:45:17: a6:64:53:36:4f:84:7b:29:0f:cc:33:91:18:6d:96: 67:b5:ec:e1:99:3a:7c:c1:42:6e:3a:4a:f6:35:ec: 53:85:24:ea:f2:77:18:b8:f5:64:7b:73:1b:fe:48: bb:41:0b:f6:04:d1:8b:a5:d0:d3:06:9b:3c:a5:f7: f1:48:8a:14:ab:17:22:21:f0:9f:d3:c0:1a:e9:4f: 7b:10:cb:b6:a0:2f:a4:3f:6c:62:4c:a3:12:c2:cd: 87:a9:ce:bd:34:a2:8e:1e:ca:54:5f:d7:4a:b0:29: d1:2e:f0:e2:66:da:07:15:f3:c5:af:9a:c7:de:f4: 9a:d7:6e:b0:c2:f3:af:d4:2b:a4:85:fb:2f:9c:09: 83:bb:12:1c:08:4b:a4:96:41:87:41:09:92:cf:31: ef:77:d3:40:4f:f5:4d:6e:14:dd:cb:4f:29:1d:44: 94:0a:04:71:2d:16:36:23:4a:b7:69:54:7a:8d:e5: 97:0e:db:08:6c:aa:df:19:e7:a5:64:f0:86:2f:ad: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:53:35:B2:A9:7C:60:80:10:38:BD:49:76:DA:DB:D4:A6:16:15:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5d:79:2e:33:9c:19:2f:24:75:52:de:3e:b9:bd:54:4a:ed: 28:6d:4f:64:67:64:0a:73:ea:6b:de:c1:84:03:fc:90:75:ca: ea:f3:6d:98:a0:43:d7:ba:fb:10:12:78:27:ca:c6:0b:3b:f1: 5c:91:c3:b7:68:e5:72:08:d9:e0:43:69:53:f4:e0:02:a0:cc: 53:9e:df:26:77:97:ab:84:4f:e5:21:7e:fd:ab:48:b1:c5:4f: 4b:e1:11:08:d3:2d:11:b3:cc:3c:77:49:e7:ce:04:3e:40:8a: 94:96:d6:ea:fb:5b:4e:a7:1f:bc:72:ca:7d:55:29:c0:13:f1: 8c:4d:2e:56:48:b5:e0:d0:a7:3c:b6:b5:0d:7f:0b:6d:f9:a8: 0b:95:c0:d2:87:02:37:9d:d1:e5:0a:ca:59:05:0d:3d:85:48: eb:42:08:13:14:01:5c:6c:c5:3b:34:b0:56:ad:fe:37:6c:75: d2:35:63:e9:a6:a7:d5:6f:fe:d1:59:ba:a7:2c:7f:e2:4d:da: e4:4f:e2:66:e8:59:79:0b:47:4e:71:23:d8:27:44:a4:93:24: 57:54:06:60:49:7b:ab:52:21:2e:50:ca:49:c9:66:46:44:67: 67:c7:49:33:e9:6c:e4:54:41:f4:ad:d7:fd:bb:8d:02:c6:17: 44:b2:8a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIc0pg+B1mPnJLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2UwNDA4NDQtNTE1Yy00YWU4LTg3NTUtOGNmNmNhODZmYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdLsbVAv3sXUGujqgQms8SGU8Gq/70GtacdC VaeC3JwP3TrNWf5YBIU07r5tfw9Mh3r+B/bqGCLNRRemZFM2T4R7KQ/MM5EYbZZn tezhmTp8wUJuOkr2NexThSTq8ncYuPVke3Mb/ki7QQv2BNGLpdDTBps8pffxSIoU qxciIfCf08Aa6U97EMu2oC+kP2xiTKMSws2Hqc69NKKOHspUX9dKsCnRLvDiZtoH FfPFr5rH3vSa126wwvOv1CukhfsvnAmDuxIcCEuklkGHQQmSzzHvd9NAT/VNbhTd y08pHUSUCgRxLRY2I0q3aVR6jeWXDtsIbKrfGeelZPCGL63t2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVTNbKpfGCAEDi9SXba29SmFhXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGU3OTFmNmYtNTViMC0z MDhlLWIwMWEtN2Q3OGFmZjY5MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R3jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFldeS4znBkvJHVS3j65vVRK7ShtT2RnZApz6mvewYQD/JB1yurzbZig Q9e6+xASeCfKxgs78VyRw7do5XII2eBDaVP04AKgzFOe3yZ3l6uET+Uhfv2rSLHF T0vhEQjTLRGzzDx3SefOBD5AipSW1ur7W06nH7xyyn1VKcAT8YxNLlZIteDQpzy2 tQ1/C235qAuVwNKHAjed0eUKylkFDT2FSOtCCBMUAVxsxTs0sFat/jdsddI1Y+mm p9Vv/tFZuqcsf+JN2uRP4mboWXkLR05xI9gnRKSTJFdUBmBJe6tSIS5QyknJZkZE Z2fHSTPpbORUQfSt1/27jQLGF0Syiks= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:15 2026 by rpki-client