$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa File: f1f615a7-b544-390a-b957-864e92a670f9.roa (raw, json) Hash identifier: 5hZu7RFE6tyP/j8z0cccsfBHUEVcQOETj1Tcqc9IOoA= Subject key identifier: F8:EA:EF:6F:72:D0:C2:72:D3:EF:DC:7E:6D:53:28:B8:DE:99:1A:92 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584C9536E301F52D71E000CC17C0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 32181 IP address blocks: 209.212.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:e3:01:f5:2d:71:e0:00:cc:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=a7b13147-fdac-4906-882b-8d3f108f6239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:a0:46:1b:96:55:51:77:75:0b:a8:27:8e: 4b:a0:78:a1:2e:e9:bf:40:37:9d:b4:8b:66:67:9a: 1c:69:36:b6:6d:e0:00:82:3e:de:31:21:9c:87:07: 03:84:7b:9f:ae:32:e9:f3:04:fc:f9:f6:ee:33:80: 60:aa:1b:64:a3:79:b7:9d:a3:63:1d:a5:e9:9d:0c: 15:ca:94:55:46:00:8d:f1:f7:05:c2:b6:bb:36:c3: 67:e2:1e:4a:45:48:99:cc:66:95:f0:d1:a4:f4:6d: ef:fc:62:55:71:2b:79:10:0b:26:9f:c2:76:17:4c: dd:45:7f:64:94:c1:34:8e:c6:0a:80:36:2e:49:a4: 4c:dd:d8:b9:99:17:79:f2:c4:36:b5:88:85:46:76: 12:5f:55:15:35:03:57:83:6b:91:6d:0a:b9:ce:28: 90:5a:47:9b:41:e8:82:ba:d2:1c:6d:da:e4:ef:0f: 95:3e:12:af:b2:46:09:c8:9f:8a:d4:e4:99:7b:36: 29:13:89:b1:48:6c:7f:9c:1d:0d:78:80:fc:b3:1b: f7:24:d0:83:63:bd:5f:db:e0:26:6e:6d:ae:7b:9e: 12:3e:17:68:3e:e3:d5:73:81:fd:e3:ab:f9:7c:e4: eb:74:4c:06:de:ac:40:8f:5c:4b:9c:ee:84:d5:61: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EA:EF:6F:72:D0:C2:72:D3:EF:DC:7E:6D:53:28:B8:DE:99:1A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 209.212.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:72:88:6c:c5:56:3b:88:47:fe:60:f4:1d:f7:11:94:68:6c: ff:98:a1:78:48:0e:ed:fd:ea:31:c4:15:93:a3:21:e3:95:83: 5b:89:9b:6b:12:a8:15:5b:f4:7d:c8:69:83:1d:e1:3c:ea:30: a7:47:08:38:6b:af:64:18:cd:6e:e3:24:15:09:13:8f:3e:60: 04:b4:80:93:b1:70:9c:5b:95:6d:10:a7:ed:76:d5:0c:0a:77: 7f:d6:ba:8c:2c:66:66:9c:4b:57:33:1a:90:33:20:a1:ec:36: 21:9e:8c:34:43:b4:c1:b0:7c:4e:f2:c5:b4:15:4b:dc:6c:74: 59:1c:9d:ca:5b:17:d5:ed:02:d8:95:71:1a:eb:9c:0f:bf:19: 13:3c:0c:7a:c7:92:8e:00:15:8c:83:9a:c0:ca:1d:dc:53:97: 5d:7d:8f:65:5c:d8:14:f3:77:dc:e0:e3:ec:a8:54:f1:75:34: 94:2b:1b:5d:10:31:75:3e:ea:90:d0:4f:ae:c2:73:dc:92:bf: b1:ef:7c:91:d0:2e:e7:0b:ce:b1:be:39:1e:65:db:30:88:93: ce:e7:58:31:d4:55:01:6e:df:bc:b7:98:8b:18:fd:c4:11:3c: f8:6e:39:fd:ee:d8:bb:35:b1:61:1b:02:55:a5:20:0b:c6:be: a1:c2:57:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNuMB9S1x4ADMF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk YTdiMTMxNDctZmRhYy00OTA2LTg4MmItOGQzZjEwOGY2MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN2gRhuWVVF3dQuoJ45LoHihLum/QDedtItm Z5ocaTa2beAAgj7eMSGchwcDhHufrjLp8wT8+fbuM4Bgqhtko3m3naNjHaXpnQwV ypRVRgCN8fcFwra7NsNn4h5KRUiZzGaV8NGk9G3v/GJVcSt5EAsmn8J2F0zdRX9k lME0jsYKgDYuSaRM3di5mRd58sQ2tYiFRnYSX1UVNQNXg2uRbQq5ziiQWkebQeiC utIcbdrk7w+VPhKvskYJyJ+K1OSZezYpE4mxSGx/nB0NeID8sxv3JNCDY71f2+Am bm2ue54SPhdoPuPVc4H946v5fOTrdEwG3qxAj1xLnO6E1WHCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjq729y0MJy0+/cfm1TKLjemRqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvZjFmNjE1YTctYjU0NC0z OTBhLWI5NTctODY0ZTkyYTY3MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhyiGzFVjuIR/5g9B33EZRobP+YoXhIDu396jHEFZOjIeOVg1uJm2sS qBVb9H3IaYMd4TzqMKdHCDhrr2QYzW7jJBUJE48+YAS0gJOxcJxblW0Qp+121QwK d3/WuowsZmacS1czGpAzIKHsNiGejDRDtMGwfE7yxbQVS9xsdFkcncpbF9XtAtiV cRrrnA+/GRM8DHrHko4AFYyDmsDKHdxTl119j2Vc2BTzd9zg4+yoVPF1NJQrG10Q MXU+6pDQT67Cc9ySv7HvfJHQLucLzrG+OR5l2zCIk87nWDHUVQFu37y3mIsY/cQR PPhuOf3u2Ls1sWEbAlWlIAvGvqHCV+U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:09 2026 by rpki-client