$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa File: b84609ff-6d72-31a6-be19-12752acfbdb9.roa (raw, json) Hash identifier: EX/dxgw0UQvvwNM3lKzEyXXIQywFLglLqUfrfgjwdvc= Subject key identifier: 4B:82:DF:F8:95:1B:21:5D:78:9F:C2:F1:E4:E5:AB:E1:47:2C:DE:8D Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F4328584CEFF232BE1EE3A21FE5BF37C0 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 46892 IP address blocks: 209.35.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:32:be:1e:e3:a2:1f:e5:bf:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=f0aa3f44-c975-4cf1-9e3b-a9f48b1317c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:16:e0:a1:46:0c:04:e9:0c:39:38:af:56: 4b:4e:a6:7d:9f:cd:aa:31:3b:d6:69:07:1d:89:86: 35:62:ad:ba:28:99:de:fc:68:0b:13:52:7d:55:9a: fe:15:ba:b9:d9:43:26:73:01:35:de:4f:d9:f1:8a: 7d:15:f5:25:02:c3:db:4c:b0:ef:66:12:a8:3f:e3: fb:88:5c:46:db:63:a6:ae:a4:cb:49:5e:da:d2:7b: d3:33:68:7d:f2:11:6e:fa:0e:73:c7:f0:09:1a:8b: aa:e1:49:7f:73:ce:ec:04:d7:a0:66:09:c0:2d:bf: 57:06:ba:15:a9:6a:a0:b6:7b:5c:ee:08:be:35:40: 9d:4f:e2:c6:83:73:15:99:36:94:4e:ca:62:aa:7f: 7b:6d:71:70:8e:e3:0b:42:f4:61:92:fa:8c:c4:9b: 87:ad:35:2e:ee:d5:a3:3f:1b:10:a1:b2:ad:2c:b8: 55:5a:03:83:ae:61:74:24:36:45:c7:7d:db:3b:18: 1e:07:3c:94:c5:c7:5f:7c:dc:e1:28:c5:f3:c1:b9: e6:b1:97:90:cb:5d:53:86:e4:4b:bb:22:1b:2c:8b: a9:f4:d0:0e:b7:11:7d:fe:f0:95:80:de:11:7d:34: 66:84:06:7d:fa:9d:56:66:2f:a4:35:51:d3:8f:54: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:DF:F8:95:1B:21:5D:78:9F:C2:F1:E4:E5:AB:E1:47:2C:DE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 209.35.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1f:96:64:15:10:fd:59:13:6f:e2:c5:9d:6f:c1:db:7b:37: 2c:8c:b0:70:40:23:a1:c1:91:bb:ac:ff:ae:31:ed:a0:b1:8a: 55:fa:75:df:39:50:18:94:ec:cc:69:71:bc:a2:fe:94:66:79: 2b:bd:98:7b:80:b7:63:a7:e3:c8:93:81:a7:bf:c0:86:e1:b6: 65:70:13:ee:97:63:6e:24:27:22:e2:f2:81:25:57:4f:27:98: 1d:86:e4:13:f6:dc:ec:46:0b:fa:6f:60:3f:c9:6c:68:ff:c9: cf:6c:21:77:eb:81:1b:10:64:c1:ba:bc:93:c8:39:95:7f:0f: f6:de:bb:dc:62:93:64:0c:21:3d:e4:84:94:32:61:bb:14:45: c7:86:6b:d7:a8:d1:aa:2b:19:86:17:e8:ea:88:29:62:9c:39: 36:0b:b7:6d:ba:14:6a:b6:52:3b:65:f2:33:75:8c:36:a3:4c: 83:f1:6e:29:bd:61:c0:13:14:e6:1a:23:0d:4a:71:75:84:89: 5a:53:8a:69:a7:d9:ea:12:52:3e:69:f4:d9:3f:24:f8:48:5f: f3:b2:0b:fe:ab:42:ee:f8:08:e2:4a:c2:42:8c:5c:fa:a8:a9: 5b:45:fa:02:74:8c:39:73:5c:97:3f:94:c9:9b:b8:fa:4c:1d: 56:c9:63:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8jK+HuOiH+W/N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk ZjBhYTNmNDQtYzk3NS00Y2YxLTllM2ItYTlmNDhiMTMxN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGYW4KFGDATpDDk4r1ZLTqZ9n82qMTvWaQcd iYY1Yq26KJne/GgLE1J9VZr+Fbq52UMmcwE13k/Z8Yp9FfUlAsPbTLDvZhKoP+P7 iFxG22OmrqTLSV7a0nvTM2h98hFu+g5zx/AJGouq4Ul/c87sBNegZgnALb9XBroV qWqgtntc7gi+NUCdT+LGg3MVmTaUTspiqn97bXFwjuMLQvRhkvqMxJuHrTUu7tWj PxsQobKtLLhVWgODrmF0JDZFx33bOxgeBzyUxcdffNzhKMXzwbnmsZeQy11ThuRL uyIbLIup9NAOtxF9/vCVgN4RfTRmhAZ9+p1WZi+kNVHTj1SG3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuC3/iVGyFdeJ/C8eTlq+FHLN6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvYjg0NjA5ZmYtNmQ3Mi0z MWE2LWJlMTktMTI3NTJhY2ZiZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0SPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAflmQVEP1ZE2/ixZ1vwdt7NyyMsHBAI6HBkbus/64x7aCxilX6dd85 UBiU7Mxpcbyi/pRmeSu9mHuAt2On48iTgae/wIbhtmVwE+6XY24kJyLi8oElV08n mB2G5BP23OxGC/pvYD/JbGj/yc9sIXfrgRsQZMG6vJPIOZV/D/beu9xik2QMIT3k hJQyYbsURceGa9eo0aorGYYX6OqIKWKcOTYLt226FGq2Ujtl8jN1jDajTIPxbim9 YcATFOYaIw1KcXWEiVpTimmn2eoSUj5p9Nk/JPhIX/OyC/6rQu74COJKwkKMXPqo qVtF+gJ0jDlzXJc/lMmbuPpMHVbJY2Q= -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:16 2026 by rpki-client