$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa File: b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa (raw, json) Hash identifier: 7nD8q/fv5hjWREK7Wr2kRbzEBMjyJ8Dwz2zVY/QAKHM= Subject key identifier: 69:B3:4B:54:68:9A:FD:87:3F:D1:FF:1D:87:55:37:E9:62:77:35:18 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584CFDE7A96EB1FE6BC364635140 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 40509 IP address blocks: 209.71.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:a9:6e:b1:fe:6b:c3:64:63:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=4326e7c1-954d-4454-b1a7-307fc6f5db66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2d:88:38:1c:43:fa:76:5e:10:4a:2c:11:2e: 5c:ac:40:27:00:10:31:bb:b9:4a:fd:9d:ab:eb:e5: 31:84:9a:80:11:79:c0:a9:9a:d1:f6:37:88:40:e0: 99:5c:dc:08:1e:6a:6f:0d:f9:36:61:8c:e6:ca:f5: 62:fc:70:74:ff:0f:f0:0b:76:8f:e6:18:4f:d1:45: 52:01:76:ee:c6:44:dd:1b:7e:e4:40:1a:bb:58:6e: 4d:74:94:57:a3:0b:4d:1a:fa:f8:9b:f5:3d:51:5c: 8c:3d:ca:a2:45:01:14:b4:74:6e:45:3a:77:c3:5c: ab:f6:35:db:b3:cc:b7:39:3c:f6:09:bf:8d:39:ca: a3:9f:37:00:c6:be:7a:11:09:a6:bb:02:18:18:4f: ef:72:25:83:f5:dc:fd:b2:81:1c:cc:a7:c5:7f:47: d7:07:62:fe:e4:88:97:66:5a:20:e4:9f:3f:47:bd: 61:96:9f:d3:7a:6c:1e:35:91:d3:a6:6f:16:60:c6: cd:f2:46:26:45:1b:b0:f9:40:f3:5b:8d:1e:fa:29: a4:10:14:a2:3a:2f:99:45:90:f3:31:a6:7f:af:c3: 15:f3:23:17:df:ef:13:b5:c5:13:f3:3b:8b:5b:58: 1b:ed:65:a2:91:19:81:43:42:49:db:65:12:ef:37: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B3:4B:54:68:9A:FD:87:3F:D1:FF:1D:87:55:37:E9:62:77:35:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 209.71.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:83:57:42:d9:a8:d1:a6:84:70:ea:81:4f:a3:31:bd:c4:c0: d8:a3:f0:4d:08:4f:2e:65:8d:2e:19:31:a7:bd:b8:1d:df:24: 72:dc:69:7b:cf:bc:d9:4a:7a:cf:4b:dd:48:fc:47:79:05:84: 92:b4:78:fd:2c:e0:b7:52:93:eb:60:1b:80:a9:37:b8:b9:38: 90:8c:21:5e:77:6f:3e:e6:a2:4c:81:c5:7d:12:ce:ee:eb:68: ce:35:e4:57:68:9a:d5:90:86:05:d9:d5:c2:c9:6e:36:d9:d2: 48:dc:37:a6:0f:03:80:aa:4a:bb:54:2e:fd:df:e1:ac:95:65: 1d:9b:7d:2d:2e:e8:6d:ea:64:b0:57:1b:8b:71:4a:86:7a:cf: e0:d5:47:d8:7e:c1:e2:36:96:17:af:38:63:1e:ff:1d:71:7c: 4c:74:d8:c8:2b:85:68:11:5f:89:68:0b:0c:9b:85:d0:e2:a2: 5e:65:72:f5:90:22:a5:ca:98:6e:9c:62:b1:0e:9d:da:2d:2b: dd:62:7b:e2:d4:48:fc:79:a3:3d:8b:b9:31:a2:a7:3a:d8:e2: 53:6a:32:b3:32:73:f5:9c:bf:33:81:6e:56:ec:fd:08:c5:46: 89:e7:2e:fc:99:4a:8b:b7:49:1e:1e:a1:08:98:96:c0:bc:03: 19:f3:0d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz956lusf5rw2RjUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NDMyNmU3YzEtOTU0ZC00NDU0LWIxYTctMzA3ZmM2ZjVkYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC2IOBxD+nZeEEosES5crEAnABAxu7lK/Z2r 6+UxhJqAEXnAqZrR9jeIQOCZXNwIHmpvDfk2YYzmyvVi/HB0/w/wC3aP5hhP0UVS AXbuxkTdG37kQBq7WG5NdJRXowtNGvr4m/U9UVyMPcqiRQEUtHRuRTp3w1yr9jXb s8y3OTz2Cb+NOcqjnzcAxr56EQmmuwIYGE/vciWD9dz9soEczKfFf0fXB2L+5IiX Zlog5J8/R71hlp/TemweNZHTpm8WYMbN8kYmRRuw+UDzW40e+imkEBSiOi+ZRZDz MaZ/r8MV8yMX3+8TtcUT8zuLW1gb7WWikRmBQ0JJ22US7zdFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmzS1Romv2HP9H/HYdVN+lidzUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYjkwMjBkYTMtOGI1NS0z ZmM1LTgwYWMtNDk1ZTJiMmUxNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0UdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWDV0LZqNGmhHDqgU+jMb3EwNij8E0ITy5ljS4ZMae9uB3fJHLcaXvP vNlKes9L3Uj8R3kFhJK0eP0s4LdSk+tgG4CpN7i5OJCMIV53bz7mokyBxX0Szu7r aM415FdomtWQhgXZ1cLJbjbZ0kjcN6YPA4CqSrtULv3f4ayVZR2bfS0u6G3qZLBX G4txSoZ6z+DVR9h+weI2lhevOGMe/x1xfEx02MgrhWgRX4loCwybhdDiol5lcvWQ IqXKmG6cYrEOndotK91ie+LUSPx5oz2LuTGipzrY4lNqMrMyc/WcvzOBblbs/QjF RonnLvyZSou3SR4eoQiYlsC8AxnzDYU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:46 2026 by rpki-client