$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa File: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (raw, json) Hash identifier: ni3PS6n0yKmMDz+WMcb9Hd0wIPQOTBaLUbqVNtiIie8= Subject key identifier: FF:9C:29:84:8A:7E:7D:AB:76:84:13:6F:F0:6A:23:86:63:09:06:10 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584CAA2717ECE5E7DD82F5F433C0 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 18587 IP address blocks: 204.209.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:17:ec:e5:e7:dd:82:f5:f4:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=14f8a01b-a40f-457d-8128-5b194d3adddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:a6:46:4b:22:71:c6:7a:ec:5d:ac:ad:1c: 94:1a:28:a3:7f:1d:1f:4e:79:9c:ee:03:71:29:c2: d3:f3:a8:6f:da:dc:af:06:bb:b3:2d:a2:21:6c:16: 9e:c5:e1:50:10:39:af:32:a6:ff:bd:0b:2e:e0:3c: 02:5f:95:8c:50:32:b9:a5:5c:e6:22:d3:c8:0a:e5: ca:f0:02:c2:34:42:6b:4f:ed:27:47:42:7e:12:8f: 7b:d1:d6:85:83:23:9c:93:1c:1f:3e:eb:48:4b:2c: 8e:77:31:04:12:f8:28:73:5a:fc:4a:f4:3e:d3:f7: e2:59:93:1a:89:6f:e2:0e:a1:9d:f7:0a:52:36:6e: ba:88:1d:03:5c:d0:af:c6:b9:4c:99:e2:58:e0:e6: ca:92:26:5a:35:95:ac:cf:67:72:61:b0:d3:9f:bc: c5:c9:73:07:61:89:f5:e3:04:8e:8c:e7:7d:04:b7: 0e:3a:dc:9d:c9:e9:d9:b8:93:5b:ec:78:cc:36:20: ab:e6:06:29:92:cd:51:83:43:6e:7d:32:bc:c2:cc: b9:ff:7e:97:8f:4c:19:79:91:b7:0a:d6:10:80:9f: 5a:73:83:41:cc:e1:77:75:47:ed:39:b2:10:62:60: dd:63:f5:bd:0e:19:d9:f2:e5:aa:5d:db:3b:f1:8f: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9C:29:84:8A:7E:7D:AB:76:84:13:6F:F0:6A:23:86:63:09:06:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4f:c8:41:e4:03:24:07:0d:c6:3f:ae:1b:9b:7a:5e:89:4f: 2d:cb:f8:5a:30:9a:e4:ec:f3:d2:e2:b2:f5:b8:1d:47:99:6a: 34:4c:3a:07:e4:0e:28:b0:62:88:bb:31:51:df:2d:79:18:66: cc:03:5b:05:1f:0f:67:36:0e:c8:d2:83:8d:7a:34:d3:58:59: 7d:b1:a3:5f:df:e3:ec:72:cf:29:1f:b7:3c:d0:93:b5:c2:cd: f1:41:39:da:c7:a0:31:99:b3:f9:53:97:c1:09:42:ca:e6:c3: 91:af:98:6e:32:20:3e:2b:74:62:c2:5b:a4:73:74:1e:74:87: d1:61:f0:f6:a1:45:1e:57:9e:02:98:7c:ec:9f:8d:7d:d3:58: 27:eb:6c:ab:56:32:d7:4d:65:23:7d:0e:c3:51:98:93:1b:cd: c1:fc:a1:72:dd:27:fa:34:98:cc:40:a2:4a:c1:be:1c:25:0e: 6d:7e:85:30:86:f6:45:db:8c:51:86:48:5b:b8:3d:c6:86:0d: 28:c6:b8:f0:94:ad:0a:ed:01:d6:7f:f0:65:5a:cc:8f:bf:07: a7:1c:40:2c:82:ad:de:bd:17:3c:a1:74:56:56:90:c3:1f:31: 77:b3:be:06:5a:01:d1:a3:1d:97:6c:b4:d1:73:62:22:aa:d4: d8:b4:90:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxfs5efdgvX0M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MTRmOGEwMWItYTQwZi00NTdkLTgxMjgtNWIxOTRkM2FkZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMemRksiccZ67F2srRyUGiijfx0fTnmc7gNx KcLT86hv2tyvBruzLaIhbBaexeFQEDmvMqb/vQsu4DwCX5WMUDK5pVzmItPICuXK 8ALCNEJrT+0nR0J+Eo970daFgyOckxwfPutISyyOdzEEEvgoc1r8SvQ+0/fiWZMa iW/iDqGd9wpSNm66iB0DXNCvxrlMmeJY4ObKkiZaNZWsz2dyYbDTn7zFyXMHYYn1 4wSOjOd9BLcOOtydyenZuJNb7HjMNiCr5gYpks1Rg0NufTK8wsy5/36Xj0wZeZG3 CtYQgJ9ac4NBzOF3dUftObIQYmDdY/W9DhnZ8uWqXds78Y8DCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+cKYSKfn2rdoQTb/BqI4ZjCQYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMmIyYWMxMWItZTQ4ZS0z ZDdiLWJiNDctNzRiODgyOTg2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNPyEHkAyQHDcY/rhubel6JTy3L+FowmuTs89LisvW4HUeZajRMOgfk DiiwYoi7MVHfLXkYZswDWwUfD2c2DsjSg416NNNYWX2xo1/f4+xyzykftzzQk7XC zfFBOdrHoDGZs/lTl8EJQsrmw5GvmG4yID4rdGLCW6RzdB50h9Fh8PahRR5XngKY fOyfjX3TWCfrbKtWMtdNZSN9DsNRmJMbzcH8oXLdJ/o0mMxAokrBvhwlDm1+hTCG 9kXbjFGGSFu4PcaGDSjGuPCUrQrtAdZ/8GVazI+/B6ccQCyCrd69FzyhdFZWkMMf MXezvgZaAdGjHZdstNFzYiKq1Ni0kHM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:06 2026 by rpki-client