$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa File: e409102b-1574-3eb9-9d70-f7404931cfa6.roa (raw, json) Hash identifier: 82enkxkjRDi/BWZ+UqOW8wL5dTiMcEnZH7RAsWFF8/A= Subject key identifier: FB:ED:8C:D3:38:C8:C9:B0:03:DB:FF:C6:1D:8F:D6:F0:03:B6:99:2D Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584CB121C06531C336555451B680 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 13213 IP address blocks: 209.236.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c0:65:31:c3:36:55:54:51:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=6752529c-071f-4046-b88b-0256933e4108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:b7:84:7b:8d:a2:2e:50:fc:25:21:55:3b: cf:d4:8f:d4:f3:06:3d:25:81:e4:c4:8f:14:f8:e0: 4b:ec:c8:d8:ef:2c:22:8c:db:49:03:45:97:73:5c: 6a:90:ea:4f:38:36:43:c1:d3:5e:3c:43:64:16:83: 2f:3d:d7:5c:62:e5:3e:fc:a8:fb:0a:a4:ab:8a:5f: 61:38:82:4b:63:b0:7c:7a:1f:ee:eb:34:b5:57:8d: 8e:d1:c2:af:34:a8:ea:db:6f:a3:e2:df:5b:e2:dc: 8c:25:3d:b3:bb:a2:4d:5d:e8:33:97:f9:95:13:d0: fa:da:58:bc:39:ff:6b:c3:aa:85:dd:3b:92:1f:f1: 5c:3b:54:70:01:f9:c5:9b:bc:36:66:0c:f3:24:fd: f6:69:2e:7f:1b:9d:8a:56:ff:07:0c:8a:60:45:bc: 46:40:6c:d0:f8:11:57:f6:a5:37:2c:18:71:ae:1d: ec:38:5c:fd:23:73:f8:1d:8a:79:b8:6a:01:86:59: e6:bc:50:df:5a:00:11:7c:03:f0:ab:bd:75:ba:8c: 5d:63:a4:3e:7b:67:f4:07:b9:7d:4e:70:7a:0d:6d: c0:48:c5:07:21:eb:0a:0e:ae:9e:6b:61:63:3c:a2: 5e:1c:a8:b7:98:bc:76:cd:c8:6d:b8:73:b6:99:79: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:ED:8C:D3:38:C8:C9:B0:03:DB:FF:C6:1D:8F:D6:F0:03:B6:99:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9f:b6:8d:c1:a6:8f:e8:71:75:e0:3a:61:b6:e0:9a:ea:6c: 82:0f:35:50:35:66:8e:87:ba:3c:d2:f3:ba:e7:9e:85:cf:8b: cb:5e:6b:c9:da:e7:1d:8e:d3:34:75:e8:00:06:bf:4e:27:3f: 6b:b5:ef:83:5e:d3:79:40:91:99:7e:04:a8:a8:42:f2:a2:e1: c0:1f:65:f9:e4:49:7a:32:82:ef:b6:fd:94:2c:57:a7:8c:0c: ee:99:b2:ba:7d:42:e7:cb:c2:a0:78:95:37:30:a0:45:10:6e: 65:31:ff:41:6b:bb:4e:05:1f:08:90:35:1f:18:37:b3:ec:8e: e6:0f:2a:a7:31:51:13:7b:3e:9a:df:b8:d0:49:6d:a8:50:fe: e5:71:c7:ea:34:0c:6c:97:75:bd:e0:e6:58:3a:47:54:04:f6: 3d:75:25:84:fa:5a:2a:c8:73:35:35:d6:db:7c:24:14:97:c1: 7e:f9:2f:bb:a3:7a:aa:bf:da:ee:fc:f1:ef:b8:b4:82:b1:93: 78:14:29:aa:4a:75:8f:dd:ef:5f:6e:21:9f:1b:ce:70:27:56: e6:15:28:0b:e2:55:b2:f0:4e:9a:e3:ba:cf:6a:70:81:14:96: f3:bf:ea:b4:f2:08:3d:f3:83:09:1e:76:a8:ee:63:6f:ae:96: c0:b7:5a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcBlMcM2VVRRtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk Njc1MjUyOWMtMDcxZi00MDQ2LWI4OGItMDI1NjkzM2U0MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYS3hHuNoi5Q/CUhVTvP1I/U8wY9JYHkxI8U +OBL7MjY7ywijNtJA0WXc1xqkOpPODZDwdNePENkFoMvPddcYuU+/Kj7CqSril9h OIJLY7B8eh/u6zS1V42O0cKvNKjq22+j4t9b4tyMJT2zu6JNXegzl/mVE9D62li8 Of9rw6qF3TuSH/FcO1RwAfnFm7w2ZgzzJP32aS5/G52KVv8HDIpgRbxGQGzQ+BFX 9qU3LBhxrh3sOFz9I3P4HYp5uGoBhlnmvFDfWgARfAPwq711uoxdY6Q+e2f0B7l9 TnB6DW3ASMUHIesKDq6ea2FjPKJeHKi3mLx2zchtuHO2mXlDBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvtjNM4yMmwA9v/xh2P1vADtpktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZTQwOTEwMmItMTU3NC0z ZWI5LTlkNzAtZjc0MDQ5MzFjZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0exGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqfto3Bpo/ocXXgOmG24JrqbIIPNVA1Zo6HujzS87rnnoXPi8tea8na 5x2O0zR16AAGv04nP2u174Ne03lAkZl+BKioQvKi4cAfZfnkSXoygu+2/ZQsV6eM DO6Zsrp9QufLwqB4lTcwoEUQbmUx/0Fru04FHwiQNR8YN7PsjuYPKqcxURN7Pprf uNBJbahQ/uVxx+o0DGyXdb3g5lg6R1QE9j11JYT6WirIczU11tt8JBSXwX75L7uj eqq/2u788e+4tIKxk3gUKapKdY/d719uIZ8bznAnVuYVKAviVbLwTprjus9qcIEU lvO/6rTyCD3zgwkedqjuY2+ulsC3WsQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:13 2026 by rpki-client