$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa File: cd93a255-e514-3611-be7c-946b8830ac3e.roa (raw, json) Hash identifier: 2oQ61k5PTuBUTJRzSWUPOUqBvZMCaoj1Ug8lAHK9/Bk= Subject key identifier: 9F:2D:C2:D1:DF:4C:CC:80:DA:72:90:D9:D4:92:C4:45:1B:05:F1:8A Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Certificate serial: 010D0C9F4328584C8476DBDCA003672E448A4780 Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 62827 IP address blocks: 209.209.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:db:dc:a0:03:67:2e:44:8a:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=e5aba11c-ccd4-489e-8251-73906833f910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:ee:cc:2e:d9:62:25:15:56:76:7b:1c:ea: 4b:ed:40:e2:1c:74:24:4e:76:57:0f:45:54:88:d1: 8f:8e:e4:6e:03:8d:89:4d:c5:5c:b9:9f:49:91:f3: 95:dc:9e:20:72:1b:54:14:3f:68:8c:af:b7:cf:26: 59:13:5f:e7:42:a6:0f:59:d9:9c:27:62:32:58:41: d2:45:3d:74:47:52:58:be:2e:be:a9:c6:ae:33:1f: 21:4c:2b:4f:67:b6:71:1b:80:0c:3c:dd:df:4b:a7: 14:72:b3:e8:5c:49:4a:40:ef:0e:67:bb:ef:d3:ad: 34:ea:30:3e:3e:7f:d1:3d:76:df:86:92:61:84:2a: 05:98:78:fa:95:e1:c5:41:a7:2d:9b:26:a9:e1:ec: f6:92:09:6d:d1:49:da:fc:98:6d:0c:77:bf:d4:28: 0a:07:c8:06:99:91:55:6d:27:7f:d1:36:78:97:bb: 25:17:da:8f:26:12:3c:22:69:04:bb:2f:d2:17:7d: 28:65:c8:b6:82:47:30:5c:6e:e7:c9:ab:2f:66:1b: c1:4a:6e:4f:c7:2c:f3:0b:5d:4a:d1:f8:2e:a3:71: 1e:be:7b:b1:91:76:2e:a2:e6:3d:40:82:33:bd:02: dd:d7:bd:eb:74:78:39:24:da:5c:f9:2f:7e:b6:b9: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2D:C2:D1:DF:4C:CC:80:DA:72:90:D9:D4:92:C4:45:1B:05:F1:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl X509v3 Authority Key Identifier: keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer sbgp-ipAddrBlock: critical IPv4: 209.209.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2b:81:56:f8:c3:02:4e:88:74:c7:f9:de:d2:e1:1d:83:16: 28:77:92:e6:0f:7b:26:6d:64:15:50:f5:77:10:65:f4:79:38: 22:6e:4a:78:da:66:ab:05:01:b7:d1:31:b0:2d:a8:2f:bf:9c: 3e:01:32:07:ec:a7:f8:49:d9:88:21:13:c1:d7:52:6b:9d:43: eb:1f:4f:1d:2d:e3:86:9e:f4:2e:8a:c5:11:d2:9d:6a:08:72: 00:5b:a3:72:7a:42:e4:d0:1d:b5:c7:1d:16:da:43:28:99:72: bb:4a:b7:48:87:65:7b:b8:b2:30:d7:1d:fc:e6:5a:9a:18:a3: c4:00:f5:17:04:bf:ea:79:c6:54:32:b2:1d:94:81:09:e4:63: f6:6f:99:dd:58:16:7f:9a:9a:76:73:ec:a6:a1:2a:5e:e2:ad: 42:c3:03:06:b9:0e:aa:eb:f4:c0:35:8a:cb:6b:45:60:0c:30: 06:04:c9:76:46:92:23:56:f3:85:65:a0:b0:ba:ef:da:39:12: ef:8c:e1:14:55:5d:8f:ea:8a:43:5e:1b:28:70:de:88:13:12: b6:c3:f4:b4:82:b2:cb:3a:f5:81:87:75:5f:69:16:4e:bb:f5: 49:e2:9c:2a:b5:69:b6:2f:2b:b7:09:e0:7a:0d:ba:5b:06:e9: c2:00:94:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtvcoANnLkSKR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk NGYzMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZTVhYmExMWMtY2NkNC00ODllLTgyNTEtNzM5MDY4MzNmOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoObuzC7ZYiUVVnZ7HOpL7UDiHHQkTnZXD0VU iNGPjuRuA42JTcVcuZ9JkfOV3J4gchtUFD9ojK+3zyZZE1/nQqYPWdmcJ2IyWEHS RT10R1JYvi6+qcauMx8hTCtPZ7ZxG4AMPN3fS6cUcrPoXElKQO8OZ7vv06006jA+ Pn/RPXbfhpJhhCoFmHj6leHFQactmyap4ez2kglt0Una/JhtDHe/1CgKB8gGmZFV bSd/0TZ4l7slF9qPJhI8ImkEuy/SF30oZci2gkcwXG7nyasvZhvBSm5PxyzzC11K 0fguo3EevnuxkXYuouY9QIIzvQLd173rdHg5JNpc+S9+trnHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8twtHfTMyA2nKQ2dSSxEUbBfGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvY2Q5M2EyNTUtZTUxNC0z NjExLWJlN2MtOTQ2Yjg4MzBhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi MTE3YWQ0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0rgVb4wwJOiHTH+d7S4R2DFih3kuYPeyZtZBVQ9XcQZfR5OCJuSnja ZqsFAbfRMbAtqC+/nD4BMgfsp/hJ2YghE8HXUmudQ+sfTx0t44ae9C6KxRHSnWoI cgBbo3J6QuTQHbXHHRbaQyiZcrtKt0iHZXu4sjDXHfzmWpoYo8QA9RcEv+p5xlQy sh2UgQnkY/Zvmd1YFn+amnZz7KahKl7irULDAwa5Dqrr9MA1istrRWAMMAYEyXZG kiNW84VloLC679o5Eu+M4RRVXY/qikNeGyhw3ogTErbD9LSCsss69YGHdV9pFk67 9UninCq1abYvK7cJ4HoNulsG6cIAlMw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:45:04 2026 by rpki-client