$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa File: d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json) Hash identifier: Os2JOiapKvWSBvFfwycqYoPFHVneVG5Ctp7lh/zbXPc= Subject key identifier: 75:6A:F8:DE:8D:9B:E0:20:08:16:29:72:AA:39:E6:60:2D:55:56:3F Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584CB28730F6DFD763D846C41C00 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 13213 IP address blocks: 209.236.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:30:f6:df:d7:63:d8:46:c4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=3d894423-8314-49d2-ac39-efa820ef3379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7c:d4:f6:58:15:53:4e:91:ae:4f:4b:a3:2b: a1:44:c2:c4:17:a3:8f:8b:99:c5:fa:80:ca:07:67: fd:1c:02:9d:84:95:77:c1:d0:4e:13:9a:e2:cb:b1: b2:6e:85:c6:f8:b0:d7:94:0f:49:5a:cc:a1:ac:06: 4d:69:85:67:fa:ec:c8:54:54:78:50:49:c1:7a:44: 47:eb:fe:93:7e:b4:dd:ff:39:1f:af:0a:57:49:84: 08:40:45:5e:b7:df:81:e7:27:8e:6b:5e:a5:95:ec: b4:ad:38:d2:7b:21:3f:5b:22:e1:62:94:39:92:1d: 57:83:6b:14:2d:f5:8c:92:55:c0:05:48:ca:50:8b: 43:58:22:92:a4:92:8f:d7:2a:36:5d:25:42:2c:bd: 06:9b:e6:22:fb:1f:6b:21:0c:bb:9e:6c:63:bc:6b: 23:51:4e:83:00:60:01:77:13:06:a5:d1:5a:c7:3d: dc:24:fc:ac:a7:c4:28:52:81:53:b3:38:a2:8d:b2: 41:01:12:8a:c1:f2:ea:d7:37:4c:3e:25:74:dd:51: d4:3d:04:a5:02:38:75:03:27:18:c8:c7:74:14:c0: 08:0f:b2:d9:b0:6a:71:57:f5:73:2b:91:2d:87:f6: 29:47:d2:1d:1d:f3:09:96:76:0b:d0:80:7b:d4:31: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6A:F8:DE:8D:9B:E0:20:08:16:29:72:AA:39:E6:60:2D:55:56:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:09:dc:b3:18:3b:25:5b:72:20:0a:5d:ee:c9:8a:57:35:73: 05:37:0c:8b:a6:b7:da:a0:57:b3:f9:b0:81:a1:9c:57:ba:9c: f2:fe:82:d0:ea:7a:96:5f:67:53:0b:f8:1b:ae:f9:37:02:89: a5:a1:12:d6:29:69:b1:c0:47:5d:6b:23:44:94:fc:e6:73:27: fd:10:0d:54:3e:ae:90:c0:b0:ff:d3:a3:b9:d9:7c:a3:eb:c1: 66:fa:45:3f:d1:d3:a6:66:dc:24:56:d5:f9:4a:87:be:92:90: 45:f5:64:b2:42:be:cc:41:9b:1d:7e:6d:bd:40:c4:ae:bb:ee: 03:ac:27:64:82:90:c0:08:ce:17:ab:15:6d:7e:54:6c:fd:f9: 62:9b:7a:87:fe:74:d9:7a:e6:95:69:0f:d2:44:16:51:af:86: 51:f9:ae:f6:50:d1:53:87:bf:9a:35:f4:d4:83:0d:86:5e:e3: 4b:50:89:09:70:bf:69:ff:46:d0:99:2c:82:24:d5:fe:02:9a: 15:df:50:b9:9a:95:33:ba:28:01:42:84:15:9b:6d:eb:8e:73: f8:20:63:33:72:c4:95:e7:95:10:98:9c:2a:45:c1:4a:2d:17: b2:a6:35:a8:27:4c:19:f5:2b:fd:56:90:a1:85:4e:53:f8:ed: 5c:b6:05:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzD239dj2EbEHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk M2Q4OTQ0MjMtODMxNC00OWQyLWFjMzktZWZhODIwZWYzMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinzU9lgVU06Rrk9LoyuhRMLEF6OPi5nF+oDK B2f9HAKdhJV3wdBOE5riy7GyboXG+LDXlA9JWsyhrAZNaYVn+uzIVFR4UEnBekRH 6/6TfrTd/zkfrwpXSYQIQEVet9+B5yeOa16lley0rTjSeyE/WyLhYpQ5kh1Xg2sU LfWMklXABUjKUItDWCKSpJKP1yo2XSVCLL0Gm+Yi+x9rIQy7nmxjvGsjUU6DAGAB dxMGpdFaxz3cJPysp8QoUoFTsziijbJBARKKwfLq1zdMPiV03VHUPQSlAjh1AycY yMd0FMAID7LZsGpxV/VzK5Eth/YpR9IdHfMJlnYL0IB71DE7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVq+N6Nm+AgCBYpcqo55mAtVVY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwJ3LMYOyVbciAKXe7Jilc1cwU3DIumt9qgV7P5sIGhnFe6nPL+gtDq epZfZ1ML+Buu+TcCiaWhEtYpabHAR11rI0SU/OZzJ/0QDVQ+rpDAsP/To7nZfKPr wWb6RT/R06Zm3CRW1flKh76SkEX1ZLJCvsxBmx1+bb1AxK677gOsJ2SCkMAIzher FW1+VGz9+WKbeof+dNl65pVpD9JEFlGvhlH5rvZQ0VOHv5o19NSDDYZe40tQiQlw v2n/RtCZLIIk1f4CmhXfULmalTO6KAFChBWbbeuOc/ggYzNyxJXnlRCYnCpFwUot F7KmNagnTBn1K/1WkKGFTlP47Vy2BXM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:14 2026 by rpki-client