$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/7840ea7f-201b-3c29-9303-4391768146ef.roa File: 7840ea7f-201b-3c29-9303-4391768146ef.roa (raw, json) Hash identifier: kaeTRUaK4K1D21Cd5+588PB1+2Udv3y739Q6NYsQgms= Subject key identifier: F1:43:10:0E:85:7B:E4:61:B1:CA:2B:12:B4:C5:64:7A:25:8B:4F:49 Certificate issuer: /CN=00cce351-050e-4c52-bceb-c8ccc4c6257e Certificate serial: 010D0C9F4328584CAFBC7F52C9DFF018EA34841C Authority key identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/7840ea7f-201b-3c29-9303-4391768146ef.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 11019 IP address blocks: 209.126.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7f:52:c9:df:f0:18:ea:34:84:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cce351-050e-4c52-bceb-c8ccc4c6257e Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=f8e5333b-51ff-4ccf-bc59-2470d26b7a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:aa:56:ee:76:07:8a:9e:97:5e:e3:30:b6:2a: 21:d4:6d:f6:bb:ff:f1:ac:0b:29:13:57:96:c0:5b: cb:6f:71:e6:a7:bc:45:af:30:f1:2d:96:36:bd:94: c8:3e:f4:e1:e7:e6:2a:31:b2:51:75:3e:04:07:60: 02:6f:33:d5:79:ee:ed:84:6c:f4:ad:1b:fc:68:81: 7c:e1:91:c1:f2:0a:bf:87:db:00:3c:10:1c:3e:9d: 6e:1c:ab:3c:5d:d1:23:bf:ae:d5:bc:15:2d:18:6b: df:ac:ec:51:ae:c6:ed:8c:94:9d:e2:a0:fa:2c:8c: 8a:aa:0c:c3:47:48:49:d2:e7:01:e8:fe:79:89:82: e4:1e:52:ce:66:25:85:34:f3:a5:a5:b1:1a:27:1b: 3f:9e:9f:1b:02:0b:29:16:e1:a1:84:fc:03:20:36: 7d:76:70:0d:14:61:a1:aa:0c:a3:7d:bb:32:8b:66: 01:fd:66:c4:32:86:57:4c:df:b8:ff:46:8b:b6:1a: 08:13:50:50:5a:0c:9c:f7:c7:ac:d0:c9:24:c2:f8: 05:b3:dc:b3:5f:af:7d:2a:d6:67:c5:5e:f1:87:56: 4c:c3:a2:54:7d:65:3a:7d:0f:6c:c7:e5:39:c7:44: 2a:94:48:e7:b7:03:6c:da:33:27:d6:ec:e9:b6:8e: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:43:10:0E:85:7B:E4:61:B1:CA:2B:12:B4:C5:64:7A:25:8B:4F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/7840ea7f-201b-3c29-9303-4391768146ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.crl X509v3 Authority Key Identifier: keyid:BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer sbgp-ipAddrBlock: critical IPv4: 209.126.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:88:68:ae:34:60:f9:f0:cd:c7:17:74:11:9f:63:16:66:b3: 9d:4c:9f:62:87:67:d0:5e:20:9c:aa:ce:3e:9c:cf:9c:de:4b: 98:f7:cb:68:21:26:1a:35:a9:40:fa:25:ac:43:1f:f7:fe:2c: c3:c5:28:41:4e:f7:92:38:ec:dc:cc:b6:df:8a:d6:f4:c0:4a: 94:17:c9:d2:63:66:5c:8f:65:85:b6:44:d7:71:c8:ce:dc:dd: 1a:ed:52:c3:fd:6e:1d:aa:fa:7c:59:dc:02:df:c0:d5:3a:55: 09:ba:b8:a5:53:d6:47:b2:1d:15:d6:b9:15:49:6e:63:c2:de: c1:70:f5:fb:23:49:d7:11:78:a1:8f:0e:67:36:9d:86:59:0d: 96:1a:0e:15:86:e1:bd:01:b9:85:b6:0e:e4:3b:16:9b:46:a2: d8:26:46:71:86:af:a9:c0:40:5a:9a:a6:19:e1:4c:d0:02:e5: a5:01:57:49:d0:9c:c1:7c:09:99:0a:49:5d:64:55:25:e6:eb: 8e:26:da:2f:10:2f:39:60:ba:d3:2e:0e:df:c1:b2:08:b4:42: 90:c2:d0:38:66:bf:79:e3:29:54:11:6b:1a:72:4a:c1:75:16: 62:bf:cb:b4:7c:36:2f:b1:4f:18:b8:60:f9:6b:6c:e0:d6:08: af:e1:2c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvH9Syd/wGOo0hBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBjY2UzNTEtMDUwZS00YzUyLWJjZWItYzhjY2M0YzYy NTdlMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZjhlNTMzM2ItNTFmZi00Y2NmLWJjNTktMjQ3MGQyNmI3YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlapW7nYHip6XXuMwtioh1G32u//xrAspE1eW wFvLb3Hmp7xFrzDxLZY2vZTIPvTh5+YqMbJRdT4EB2ACbzPVee7thGz0rRv8aIF8 4ZHB8gq/h9sAPBAcPp1uHKs8XdEjv67VvBUtGGvfrOxRrsbtjJSd4qD6LIyKqgzD R0hJ0ucB6P55iYLkHlLOZiWFNPOlpbEaJxs/np8bAgspFuGhhPwDIDZ9dnANFGGh qgyjfbsyi2YB/WbEMoZXTN+4/0aLthoIE1BQWgyc98es0MkkwvgFs9yzX699KtZn xV7xh1ZMw6JUfWU6fQ9sx+U5x0QqlEjntwNs2jMn1uzpto7mSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFDEA6Fe+RhscorErTFZHoli09JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGNj ZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRjNjI1N2UvNzg0MGVhN2YtMjAxYi0z YzI5LTkzMDMtNDM5MTc2ODE0NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBjY2UzNTEtMDUwZS00YzUyLWJj ZWItYzhjY2M0YzYyNTdlLzAwY2NlMzUxLTA1MGUtNGM1Mi1iY2ViLWM4Y2NjNGM2 MjU3ZS5jcmwwHwYDVR0jBBgwFoAUvW31AOXil2ygEAqVvn1xV//NhPUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNj YzRjNjI1N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X40MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaIaK40YPnwzccXdBGfYxZms51Mn2KHZ9BeIJyqzj6cz5zeS5j3y2gh Jho1qUD6JaxDH/f+LMPFKEFO95I47NzMtt+K1vTASpQXydJjZlyPZYW2RNdxyM7c 3RrtUsP9bh2q+nxZ3ALfwNU6VQm6uKVT1keyHRXWuRVJbmPC3sFw9fsjSdcReKGP Dmc2nYZZDZYaDhWG4b0BuYW2DuQ7FptGotgmRnGGr6nAQFqaphnhTNAC5aUBV0nQ nMF8CZkKSV1kVSXm644m2i8QLzlgutMuDt/Bsgi0QpDC0Dhmv3njKVQRaxpySsF1 FmK/y7R8Ni+xTxi4YPlrbODWCK/hLEk= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:06 2026 by rpki-client