$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa File: 221c5f01-9412-38d6-b4e7-72db492d7460.roa (raw, json) Hash identifier: zDnQmkYAUaA17oYoHLmFdtLGFI/vitQkgublY1iSfnU= Subject key identifier: 13:2C:F7:F6:6B:9F:22:C5:7F:6D:BB:5A:A6:E8:6B:9A:DC:8E:AB:24 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584CDC678C59FD590C7B6A8B0C80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 393249 IP address blocks: 209.87.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8c:59:fd:59:0c:7b:6a:8b:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=90ed173f-601c-4b7b-80d3-beca04168b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:e6:ef:2e:32:6f:58:70:4d:4f:01:57:9e: 47:0e:bb:3b:4a:9e:af:f6:9c:d6:a3:f6:32:5e:ee: 58:d2:c8:81:12:ea:73:f8:42:5a:a3:ea:86:76:15: 99:37:2b:0c:68:64:24:70:32:35:b3:a9:7d:20:46: e7:49:e4:59:0c:2a:3b:b6:43:48:07:4e:61:52:9b: e4:02:cc:b6:5f:92:16:f2:d9:62:ec:de:85:47:ee: 8e:f0:61:2e:fb:77:94:9d:db:24:36:eb:b6:e2:36: 10:a1:86:a3:ef:93:b4:1d:39:82:c3:51:5c:b4:1f: 46:7f:17:ee:cf:67:23:71:99:53:9b:b6:41:33:6a: 8a:8e:83:a3:c0:b8:46:d2:5c:69:51:f2:2e:0a:61: 34:89:ac:09:d9:a0:c6:fc:c6:8f:b9:ad:80:2d:e8: b3:f3:73:e0:d1:ff:12:bf:6c:db:8e:aa:ea:93:65: 04:50:e9:12:c0:a1:36:ce:90:4b:9d:d4:27:68:3a: 01:ed:57:17:96:a3:51:09:e6:3f:89:70:be:f9:c8: 1f:95:6a:b8:b2:25:20:e5:f6:4e:14:c0:d7:14:d5: 67:0d:7d:5c:5d:51:ae:d4:43:64:38:66:a6:be:04: b5:93:f6:86:17:78:f3:9e:2d:23:85:a6:84:97:4e: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2C:F7:F6:6B:9F:22:C5:7F:6D:BB:5A:A6:E8:6B:9A:DC:8E:AB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9e:2c:9a:b9:ec:8b:4c:66:d4:a2:2e:ce:0e:e5:cc:d5:44: a2:52:05:35:a1:87:69:4d:61:32:dd:54:86:94:78:78:8f:ad: 79:68:64:58:c4:2b:42:63:ba:f1:5b:a8:6b:27:37:49:a4:5a: 92:b6:33:32:7d:7f:58:c6:ad:80:9e:34:ef:db:95:11:81:87: 9c:3a:ea:68:80:3e:d2:0e:48:82:56:9a:d1:fb:fd:02:41:b8: 65:fe:b3:d4:43:18:f3:60:95:43:05:e0:cc:a0:88:bd:51:e9: 47:fd:fc:8e:a9:bd:11:27:c7:ad:43:c4:64:f7:6f:3f:4e:f6: 55:f9:c1:fb:fd:ac:e8:81:39:18:70:a7:75:c1:ee:d6:55:b9: c7:32:77:7f:ac:17:71:cb:74:d8:31:6c:66:ec:b2:b8:8f:02: db:95:15:3a:12:95:83:85:08:aa:db:2c:63:04:37:f4:75:c3: f9:54:28:0d:13:48:bb:df:03:eb:ef:7f:6d:86:82:8b:60:08: 25:bb:de:7c:52:9d:2d:3d:62:24:94:13:3c:2e:5e:a9:6d:d7: 31:28:a2:b8:ba:b8:61:19:1a:9b:92:86:22:d0:04:90:90:d8: 74:45:20:ef:d6:42:bb:d6:99:c0:60:ac:68:1d:ac:d4:29:25: 4e:ae:11:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4xZ/VkMe2qLDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk OTBlZDE3M2YtNjAxYy00YjdiLTgwZDMtYmVjYTA0MTY4YjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkrm7y4yb1hwTU8BV55HDrs7Sp6v9pzWo/Yy Xu5Y0siBEupz+EJao+qGdhWZNysMaGQkcDI1s6l9IEbnSeRZDCo7tkNIB05hUpvk Asy2X5IW8tli7N6FR+6O8GEu+3eUndskNuu24jYQoYaj75O0HTmCw1FctB9Gfxfu z2cjcZlTm7ZBM2qKjoOjwLhG0lxpUfIuCmE0iawJ2aDG/MaPua2ALeiz83Pg0f8S v2zbjqrqk2UEUOkSwKE2zpBLndQnaDoB7VcXlqNRCeY/iXC++cgflWq4siUg5fZO FMDXFNVnDX1cXVGu1ENkOGamvgS1k/aGF3jzni0jhaaEl05ynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMs9/ZrnyLFf227Wqboa5rcjqskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjIxYzVmMDEtOTQxMi0z OGQ2LWI0ZTctNzJkYjQ5MmQ3NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaeLJq57ItMZtSiLs4O5czVRKJSBTWhh2lNYTLdVIaUeHiPrXloZFjE K0JjuvFbqGsnN0mkWpK2MzJ9f1jGrYCeNO/blRGBh5w66miAPtIOSIJWmtH7/QJB uGX+s9RDGPNglUMF4MygiL1R6Uf9/I6pvREnx61DxGT3bz9O9lX5wfv9rOiBORhw p3XB7tZVuccyd3+sF3HLdNgxbGbssriPAtuVFToSlYOFCKrbLGMEN/R1w/lUKA0T SLvfA+vvf22GgotgCCW73nxSnS09YiSUEzwuXqlt1zEoori6uGEZGpuShiLQBJCQ 2HRFIO/WQrvWmcBgrGgdrNQpJU6uEYU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:18 2026 by rpki-client