$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa File: bdaab757-919c-3eca-9fcf-6149df229ffe.roa (raw, json) Hash identifier: kFt5XVSv5UNdiAH9sIxPE2gtJvEE7xDaenqpe1d+tog= Subject key identifier: 72:FB:CC:41:A7:5D:3F:59:76:A4:46:6B:74:60:97:8B:8F:24:A6:F4 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584CC1E1CCA727C89C2A0B5B5A80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa Signing time: Thu 05 Feb 2026 02:00:31 +0000 ROA not before: Thu 05 Feb 2026 02:00:31 +0000 ROA not after: Wed 06 May 2026 01:00:31 +0000 asID: 40097 IP address blocks: 209.137.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c1:e1:cc:a7:27:c8:9c:2a:0b:5b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Feb 5 02:00:31 2026 GMT Not After : May 6 01:00:31 2026 GMT Subject: CN=c78b7fa8-0d23-413d-9573-749413156705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:68:54:28:1a:a0:e8:59:bd:05:45:46:4e: dc:28:02:0e:62:57:04:67:73:09:ab:3e:ec:a7:b7: e9:c5:9c:f6:5f:58:70:96:85:0b:c4:1f:e1:83:72: 25:bf:4f:08:4e:81:5f:c1:97:61:f8:b8:71:3d:c3: da:57:1f:35:4e:de:05:64:df:1f:d6:bf:8e:2a:7d: 0a:6a:c3:0f:eb:8d:9d:64:aa:f3:65:ec:5f:7a:9f: 03:73:5c:24:d1:0b:de:0c:bd:b4:34:c3:23:02:80: 6e:1e:4c:ca:77:e0:48:53:44:5f:7a:2e:cd:0c:d7: c0:88:73:fa:81:84:bb:11:25:af:e5:03:f1:19:0a: 7f:99:d7:91:8c:4f:33:56:8c:53:60:e9:01:ae:57: 51:af:18:d2:c7:65:c4:e1:31:49:30:77:a0:61:71: 53:7e:88:c3:cc:8d:51:88:9e:68:62:93:03:32:42: 65:fb:16:52:26:e9:b0:e2:e8:18:6d:1f:93:f1:e1: 76:49:be:e7:7e:56:4d:49:4c:49:58:c9:a4:57:e3: bf:eb:b3:f6:a9:71:01:06:6d:e3:89:02:f1:06:3b: b0:c7:2a:c4:d8:ca:f3:04:b2:45:f3:d2:92:81:f6: c0:6a:e0:c9:ac:c5:ed:7a:03:75:74:ee:92:ea:4a: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:CC:41:A7:5D:3F:59:76:A4:46:6B:74:60:97:8B:8F:24:A6:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bdaab757-919c-3eca-9fcf-6149df229ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:ba:5f:6d:61:d3:37:fa:0f:2c:24:5b:40:dc:56:bb:ad: 02:59:81:6b:3a:5e:22:a5:f6:04:c5:40:49:8f:84:f9:92:cd: e9:68:24:f1:0a:1d:4f:47:35:64:aa:d5:11:cd:1d:35:f1:8a: 0d:20:2b:e6:cb:cc:b3:a9:ea:8f:89:1c:ed:62:a5:b1:2b:f2: e6:27:1a:ab:70:bf:4d:a0:e8:8a:db:d4:df:e1:52:31:97:91: 56:35:65:ac:30:df:3f:be:8f:57:95:2b:db:7c:6c:a3:fc:39: 0c:6b:c6:01:a9:54:01:cb:f7:2a:da:d2:f4:38:24:63:53:02: fa:23:f3:b4:b1:43:41:4d:17:0d:3f:71:f2:7f:36:b4:d1:46: 09:9a:35:57:7c:f4:68:ad:ed:c5:6e:f8:f0:dd:46:3f:f8:e3: 63:d8:49:4b:04:90:4d:54:d3:fe:22:ad:cf:4b:60:cf:46:5e: 54:16:0d:53:a2:c4:94:8f:9e:8a:23:30:c4:71:c6:9c:83:32: a4:d5:01:fc:48:c4:59:c9:98:8b:b1:e3:a5:e5:ec:65:d4:77: 2f:0f:69:1b:58:43:e4:0e:51:77:92:b5:4f:33:63:54:cb:3c: 22:22:47:52:44:0e:a2:94:77:02:1b:17:28:d9:0a:2e:e1:c2: c7:97:86:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzB4cynJ8icKgtbWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDIwNTAyMDAzMVoXDTI2MDUwNjAxMDAzMVowLzEtMCsGA1UEAxMk Yzc4YjdmYTgtMGQyMy00MTNkLTk1NzMtNzQ5NDEzMTU2NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJVoVCgaoOhZvQVFRk7cKAIOYlcEZ3MJqz7s p7fpxZz2X1hwloULxB/hg3Ilv08IToFfwZdh+LhxPcPaVx81Tt4FZN8f1r+OKn0K asMP642dZKrzZexfep8Dc1wk0QveDL20NMMjAoBuHkzKd+BIU0Rfei7NDNfAiHP6 gYS7ESWv5QPxGQp/mdeRjE8zVoxTYOkBrldRrxjSx2XE4TFJMHegYXFTfojDzI1R iJ5oYpMDMkJl+xZSJumw4ugYbR+T8eF2Sb7nflZNSUxJWMmkV+O/67P2qXEBBm3j iQLxBjuwxyrE2MrzBLJF89KSgfbAauDJrMXtegN1dO6S6kpnoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL7zEGnXT9ZdqRGa3Rgl4uPJKb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmRhYWI3NTctOTE5Yy0z ZWNhLTlmY2YtNjE0OWRmMjI5ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFodul9tYdM3+g8sJFtA3Fa7rQJZgWs6XiKl9gTFQEmPhPmSzeloJPEK HU9HNWSq1RHNHTXxig0gK+bLzLOp6o+JHO1ipbEr8uYnGqtwv02g6Irb1N/hUjGX kVY1Zaww3z++j1eVK9t8bKP8OQxrxgGpVAHL9yra0vQ4JGNTAvoj87SxQ0FNFw0/ cfJ/NrTRRgmaNVd89Git7cVu+PDdRj/442PYSUsEkE1U0/4irc9LYM9GXlQWDVOi xJSPnoojMMRxxpyDMqTVAfxIxFnJmIux46Xl7GXUdy8PaRtYQ+QOUXeStU8zY1TL PCIiR1JEDqKUdwIbFyjZCi7hwseXhtE= -----END CERTIFICATE-----Generated at Tue Mar 3 07:03:39 2026 by rpki-client