$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa File: 9db22770-7fc9-33f5-b210-41b7efad06d2.roa (raw, json) Hash identifier: htIDAeHYe08E9bVyp/TC96FBm88cEcTkjWd4xzlO6kQ= Subject key identifier: B1:3D:85:85:CE:74:21:67:6D:44:0D:97:9D:3C:78:CF:A8:8D:93:EC Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584CE097AD858169E8BB03A409C0 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 21782 IP address blocks: 67.209.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:ad:85:81:69:e8:bb:03:a4:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=8f1a03f6-260a-4cc4-9375-3ae87e9b358f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:5b:99:00:d7:fc:6a:5a:4b:53:45:d4:eb: 74:39:c0:8a:de:57:39:e3:80:15:b9:55:97:ca:3f: cb:dd:c2:56:8e:a9:20:9b:83:24:34:a3:33:1a:17: a7:20:3d:b3:84:d7:f7:02:ed:b6:c6:d9:51:a4:97: ff:39:81:d6:c5:6a:e2:87:b5:51:7f:42:16:4e:be: 82:7a:7e:ac:ff:0e:55:1f:62:e1:33:d5:12:6e:4a: 08:d3:5a:80:54:60:04:79:5f:fb:e9:de:46:4b:11: 14:7f:ec:32:7b:c3:cc:20:a4:79:8b:9b:6c:4d:17: 28:21:ea:21:f6:ee:d8:72:14:99:27:56:eb:6c:21: e7:c8:31:d5:cf:8a:cf:4e:57:b9:f1:8e:09:42:7b: 58:01:82:6e:4a:c4:0d:be:f6:44:a3:49:c7:c8:a8: c2:be:03:a5:89:22:6b:34:0d:31:1a:66:94:68:65: 87:2e:d7:ea:71:f3:5d:83:e7:67:d1:44:29:c2:c7: d8:49:2a:51:d3:9d:c2:9a:ee:ff:bf:1c:d1:c9:10: ca:1f:f4:ca:83:9f:9d:3e:42:d8:f6:cc:8f:95:da: a2:fa:fe:05:fc:15:10:4e:7f:25:41:7f:cd:bb:8f: 02:b5:75:4a:30:0c:dc:91:46:99:d8:b9:57:87:d7: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3D:85:85:CE:74:21:67:6D:44:0D:97:9D:3C:78:CF:A8:8D:93:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:af:e4:2d:e5:a9:63:27:f4:98:cb:44:9b:bd:b5:91:02:06: 19:86:43:d9:3c:8d:74:6b:2f:b8:bb:6f:e8:e4:82:bc:2e:da: dd:c7:3a:7a:72:f2:5e:ff:ed:a6:59:59:d9:06:c1:e3:9a:da: 7e:07:85:55:bc:dd:52:e5:9b:5c:29:62:6c:76:07:07:ca:c5: ef:ac:f0:8c:a1:83:30:32:04:c1:9a:16:02:c0:55:b9:36:3b: 43:c9:9f:09:41:2a:81:d0:96:30:e1:c6:9a:ef:41:8a:a3:47: 7a:84:64:08:1b:2a:50:e4:f5:b8:4e:be:df:d9:ea:e5:e6:d6: c3:4a:d1:b4:24:53:49:cb:9c:25:80:d7:9c:4c:a0:c0:d9:06: 6a:d6:12:5f:63:a8:50:24:c5:d0:cb:3f:21:39:a0:be:4f:97: af:a8:f9:16:fa:79:cd:6b:b0:e6:0a:83:5b:1a:01:0b:27:2f: ba:ac:f0:f5:60:88:d7:82:7e:9a:02:b7:ab:56:6f:40:a7:cb: 02:2e:04:cb:b1:cf:da:71:40:20:2b:e9:7d:44:44:e8:a1:f0: 2a:d9:b9:0e:8b:6f:58:83:dc:22:fa:6f:fa:65:87:49:a5:a8: 03:6b:73:34:55:c2:49:05:f4:fd:5c:c1:f4:44:b2:86:13:ad: 56:ce:1c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl62FgWnouwOkCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk OGYxYTAzZjYtMjYwYS00Y2M0LTkzNzUtM2FlODdlOWIzNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGBbmQDX/GpaS1NF1Ot0OcCK3lc544AVuVWX yj/L3cJWjqkgm4MkNKMzGhenID2zhNf3Au22xtlRpJf/OYHWxWrih7VRf0IWTr6C en6s/w5VH2LhM9USbkoI01qAVGAEeV/76d5GSxEUf+wye8PMIKR5i5tsTRcoIeoh 9u7YchSZJ1brbCHnyDHVz4rPTle58Y4JQntYAYJuSsQNvvZEo0nHyKjCvgOliSJr NA0xGmaUaGWHLtfqcfNdg+dn0UQpwsfYSSpR053Cmu7/vxzRyRDKH/TKg5+dPkLY 9syPldqi+v4F/BUQTn8lQX/Nu48CtXVKMAzckUaZ2LlXh9fx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE9hYXOdCFnbUQNl508eM+ojZPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvOWRiMjI3NzAtN2ZjOS0z M2Y1LWIyMTAtNDFiN2VmYWQwNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAav5C3lqWMn9JjLRJu9tZECBhmGQ9k8jXRrL7i7b+jkgrwu2t3HOnpy 8l7/7aZZWdkGweOa2n4HhVW83VLlm1wpYmx2BwfKxe+s8IyhgzAyBMGaFgLAVbk2 O0PJnwlBKoHQljDhxprvQYqjR3qEZAgbKlDk9bhOvt/Z6uXm1sNK0bQkU0nLnCWA 15xMoMDZBmrWEl9jqFAkxdDLPyE5oL5Pl6+o+Rb6ec1rsOYKg1saAQsnL7qs8PVg iNeCfpoCt6tWb0CnywIuBMuxz9pxQCAr6X1EROih8CrZuQ6Lb1iD3CL6b/plh0ml qANrczRVwkkF9P1cwfREsoYTrVbOHEE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:15:48 2026 by rpki-client