$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa File: dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa (raw, json) Hash identifier: V9fhAlL2aOzgUGd5+iyBDJigZ1ngSwgqHAQmtuEfGnA= Subject key identifier: FC:25:D8:AA:12:78:FA:6B:62:B2:77:CB:53:25:E8:E4:9B:92:33:42 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584CB8EA82E730A671FE34A59700 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa Signing time: Sun 01 Feb 2026 20:55:53 +0000 ROA not before: Sun 01 Feb 2026 20:55:53 +0000 ROA not after: Sat 02 May 2026 19:55:53 +0000 asID: 214022 IP address blocks: 208.70.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:ea:82:e7:30:a6:71:fe:34:a5:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Feb 1 20:55:53 2026 GMT Not After : May 2 19:55:53 2026 GMT Subject: CN=1aa7d6c2-52b0-4feb-9238-a6fbe37058f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:6d:1f:25:b3:aa:11:be:00:10:f2:c5:37: 2b:aa:df:69:7b:a1:4b:0f:9e:f1:ca:7d:38:2e:cd: 1d:a3:97:78:cf:a4:15:95:dc:26:2d:e2:6b:af:e0: 81:3a:91:39:be:e3:3d:cb:32:6a:bf:2a:0a:1c:08: 6c:bc:f7:57:33:c9:b5:d2:7f:5b:59:69:5b:73:74: 42:0e:12:36:04:b2:8d:91:6e:09:72:ba:55:6d:7f: 5d:6d:9c:1c:35:79:28:0b:c0:44:30:2e:8c:14:c9: fe:96:83:7b:dc:7e:6a:2b:bf:b3:91:28:8e:35:98: 8c:f0:fd:9d:13:76:77:82:fa:7f:f5:d3:ff:7c:81: aa:ff:33:79:41:ee:5d:bb:91:27:96:60:fc:cd:6b: e6:a4:f4:50:35:8f:85:44:4f:a7:b0:e6:bb:b6:f0: 72:ff:6a:c6:eb:79:19:a9:a9:e2:be:c7:3c:a3:84: e2:61:ae:0c:62:5a:eb:b5:74:88:b4:9f:7f:81:10: c0:1d:cf:9b:6d:a4:5a:9b:25:96:8e:aa:21:60:7b: f7:09:21:81:5d:96:60:f1:76:ba:34:e4:99:bd:6b: 8e:52:c5:da:50:3a:32:1d:52:78:36:4f:8b:da:8a: a6:e3:d7:ff:d9:59:e2:1e:02:9e:2e:aa:0c:1c:4e: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:D8:AA:12:78:FA:6B:62:B2:77:CB:53:25:E8:E4:9B:92:33:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e1:9f:05:39:fd:b3:00:0e:36:63:a1:33:22:2d:25:9b:c5: 33:47:26:68:e4:c7:59:11:ad:b3:6c:86:7b:7f:bb:58:5c:a0: 78:82:da:13:1b:73:56:89:39:d5:2f:43:a5:77:eb:cd:d8:a5: 64:55:bd:e5:dd:f7:54:91:75:3a:ed:58:f1:e4:94:76:95:a6: ae:dc:32:70:8e:d0:e6:60:5a:75:20:3b:5f:c9:b3:c4:2f:9d: 01:4f:f5:b9:10:68:0a:50:b9:b5:9f:82:b3:05:a6:c8:8a:07: 7c:58:49:40:2f:98:9c:c8:0f:71:7c:58:aa:e7:2e:79:29:40: f0:9c:05:95:a1:0a:98:4f:e6:c7:4d:4d:58:29:25:19:30:23: ad:08:a1:7f:5b:6a:69:2b:27:e6:dd:9a:17:2e:4f:5a:8c:bc: e8:c3:03:de:6d:7f:d0:46:7e:75:14:43:b3:b2:30:c7:25:e9: 49:14:54:68:7a:c8:6e:fa:0d:70:e2:de:89:ad:b7:b4:2a:f1: 30:f9:37:f2:cf:a5:23:8c:c0:66:e9:6f:ef:ff:99:c5:f9:6e: cc:1f:b0:89:f0:29:38:73:73:49:de:3d:fd:78:41:c1:df:cb: b6:61:86:d7:44:ee:7c:91:99:be:e9:24:1a:09:7a:0e:f4:23: e1:8e:be:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy46oLnMKZx/jSllwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI2MDIwMTIwNTU1M1oXDTI2MDUwMjE5NTU1M1owLzEtMCsGA1UEAxMk MWFhN2Q2YzItNTJiMC00ZmViLTkyMzgtYTZmYmUzNzA1OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymBtHyWzqhG+ABDyxTcrqt9pe6FLD57xyn04 Ls0do5d4z6QVldwmLeJrr+CBOpE5vuM9yzJqvyoKHAhsvPdXM8m10n9bWWlbc3RC DhI2BLKNkW4JcrpVbX9dbZwcNXkoC8BEMC6MFMn+loN73H5qK7+zkSiONZiM8P2d E3Z3gvp/9dP/fIGq/zN5Qe5du5EnlmD8zWvmpPRQNY+FRE+nsOa7tvBy/2rG63kZ qanivsc8o4TiYa4MYlrrtXSItJ9/gRDAHc+bbaRamyWWjqohYHv3CSGBXZZg8Xa6 NOSZvWuOUsXaUDoyHVJ4Nk+L2oqm49f/2VniHgKeLqoMHE6vIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwl2KoSePprYrJ3y1Ml6OSbkjNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvZGQ1M2I5ZjgtNjliNy0z NGY4LWI4NmUtYWY2NjBhNTMwZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzhnwU5/bMADjZjoTMiLSWbxTNHJmjkx1kRrbNshnt/u1hcoHiC2hMb c1aJOdUvQ6V3683YpWRVveXd91SRdTrtWPHklHaVpq7cMnCO0OZgWnUgO1/Js8Qv nQFP9bkQaApQubWfgrMFpsiKB3xYSUAvmJzID3F8WKrnLnkpQPCcBZWhCphP5sdN TVgpJRkwI60IoX9bamkrJ+bdmhcuT1qMvOjDA95tf9BGfnUUQ7OyMMcl6UkUVGh6 yG76DXDi3omtt7Qq8TD5N/LPpSOMwGbpb+//mcX5bswfsInwKThzc0nePf14QcHf y7ZhhtdE7nyRmb7pJBoJeg70I+GOvgs= -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:50 2026 by rpki-client