$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa File: 240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa (raw, json) Hash identifier: Fb1ktbBP8wGHiehgSKYP/ad73tnsexlW0w22HWeBSiY= Subject key identifier: 5C:8B:81:B0:92:CC:64:D2:56:A6:0A:D2:2F:6C:09:17:8C:5C:EB:C6 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584CFDEAAA9394A87A8BA099B280 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 40509 IP address blocks: 204.8.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:aa:93:94:a8:7a:8b:a0:99:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=1dfb72dd-5ce5-43be-b955-8589ef0f0c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:20:30:d1:63:15:bf:ce:ee:38:ef:38:c6: 5e:c2:ff:c6:b1:27:da:b5:77:9a:46:0f:39:ee:6f: 40:4b:4d:26:80:09:1a:cb:a0:51:5c:c0:3e:a5:74: de:82:06:d5:d7:b6:20:f3:59:7d:1d:c0:e7:2f:2a: bb:7e:04:37:37:3d:6d:81:8b:1d:b6:da:e2:11:e9: 54:19:e6:4b:38:76:4a:24:62:c1:13:9a:a9:8d:e4: 1a:27:45:68:ad:01:52:52:36:28:24:d2:34:23:d5: 2d:1b:aa:68:b4:c0:ae:78:6e:8c:e7:e9:9b:d6:97: 7e:7d:7d:56:fe:a4:5d:86:4a:67:2c:be:b3:3e:9e: d2:e6:f7:7b:5e:cb:bd:54:de:57:26:03:37:99:65: f2:d4:1f:9c:0b:d5:eb:28:3f:52:74:67:3a:ce:2b: 58:a2:15:6c:67:7b:79:5e:e6:40:af:ce:8e:e8:10: 8c:f2:69:7f:3e:ec:cf:73:9c:6c:61:35:e1:fe:30: 1e:aa:a9:71:85:40:0e:d0:8a:4e:03:3d:48:67:9c: 42:10:3b:8c:29:c8:a4:81:c6:24:16:b4:c7:b3:76: 1d:90:bd:fd:dd:b1:bf:e0:38:4e:e1:8e:8e:8c:56: 6c:96:06:ec:30:4c:45:e1:53:69:ab:79:58:75:46: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:81:B0:92:CC:64:D2:56:A6:0A:D2:2F:6C:09:17:8C:5C:EB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.8.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:69:1d:3a:78:db:80:d8:8a:c1:ec:92:3e:c9:a7:cb:a8:86: d5:34:7b:99:b9:ee:8a:88:a6:10:71:4f:83:53:19:8e:04:93: ad:3f:f3:a2:7b:b7:70:a1:7a:c2:1e:8f:e4:96:4e:44:8a:e5: cd:8a:be:5d:51:56:2b:8a:f8:ce:05:4a:53:b7:b4:30:da:69: ed:7e:e7:7b:bd:a5:28:ec:7d:75:97:c4:7a:70:49:eb:96:69: 70:16:4f:58:1c:cc:a5:89:6e:a7:2f:8e:2d:c6:b7:3e:01:01: 61:e8:47:7e:11:b9:fe:61:4b:c6:11:16:00:98:87:ff:fb:a9: d5:81:13:d9:6e:8b:f5:8b:a6:ee:5c:46:8f:e6:1d:6c:18:a3: b2:b8:37:48:45:0b:d1:ca:04:93:85:43:c3:f4:4f:8e:c2:a2: c8:e0:e3:2c:7c:72:88:d8:33:a0:0f:05:18:4d:19:22:4e:e0: 71:3e:14:57:c9:43:b9:cd:5a:cb:33:ab:39:33:16:63:64:2b: ce:72:45:37:78:5f:18:8e:ae:68:35:f8:18:6b:18:70:ee:9f: cd:77:2c:d0:c6:ac:8f:64:e8:56:36:81:d5:1b:9d:4a:01:d2: f1:61:f1:7e:47:0f:66:06:b8:66:b8:1a:9d:43:d1:04:1a:82: 25:f9:ca:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96qqTlKh6i6CZsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MWRmYjcyZGQtNWNlNS00M2JlLWI5NTUtODU4OWVmMGYwYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXIgMNFjFb/O7jjvOMZewv/GsSfatXeaRg85 7m9AS00mgAkay6BRXMA+pXTeggbV17Yg81l9HcDnLyq7fgQ3Nz1tgYsdttriEelU GeZLOHZKJGLBE5qpjeQaJ0VorQFSUjYoJNI0I9UtG6potMCueG6M5+mb1pd+fX1W /qRdhkpnLL6zPp7S5vd7Xsu9VN5XJgM3mWXy1B+cC9XrKD9SdGc6zitYohVsZ3t5 XuZAr86O6BCM8ml/PuzPc5xsYTXh/jAeqqlxhUAO0IpOAz1IZ5xCEDuMKcikgcYk FrTHs3YdkL393bG/4DhO4Y6OjFZslgbsMExF4VNpq3lYdUZX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyLgbCSzGTSVqYK0i9sCReMXOvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjQwYmU2YWYtYWFkZi0z ZjI0LWJlYmUtOWVhMzhhMGE2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1pHTp424DYisHskj7Jp8uohtU0e5m57oqIphBxT4NTGY4Ek60/86J7 t3ChesIej+SWTkSK5c2Kvl1RViuK+M4FSlO3tDDaae1+53u9pSjsfXWXxHpwSeuW aXAWT1gczKWJbqcvji3Gtz4BAWHoR34Ruf5hS8YRFgCYh//7qdWBE9lui/WLpu5c Ro/mHWwYo7K4N0hFC9HKBJOFQ8P0T47Cosjg4yx8cojYM6APBRhNGSJO4HE+FFfJ Q7nNWsszqzkzFmNkK85yRTd4XxiOrmg1+BhrGHDun813LNDGrI9k6FY2gdUbnUoB 0vFh8X5HD2YGuGa4Gp1D0QQagiX5yow= -----END CERTIFICATE-----Generated at Mon Mar 2 19:50:14 2026 by rpki-client