$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/3a6ef3bb-154f-3260-8a42-ee08b9dd7418.roa File: 3a6ef3bb-154f-3260-8a42-ee08b9dd7418.roa (raw, json) Hash identifier: knp6Hk9nCLW0CQ4QVlDVwYzKByzo0/x/2eloDPmIuQg= Subject key identifier: 32:CD:86:46:E5:C7:28:BB:8D:79:0E:EB:C2:11:64:50:A3:4B:8F:C2 Certificate issuer: /CN=548a2224-5b79-42e3-b397-0cb3e8f5d20e Certificate serial: 010D0C9F4328584CFC91A64C6B4D9C08F11C5400 Authority key identifier: D2:59:97:29:C7:10:34:9B:9D:47:7A:5D:92:76:DF:97:D0:0E:21:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/3a6ef3bb-154f-3260-8a42-ee08b9dd7418.roa Signing time: Thu 26 Feb 2026 02:31:48 +0000 ROA not before: Thu 26 Feb 2026 02:31:48 +0000 ROA not after: Wed 27 May 2026 01:31:48 +0000 asID: 393989 IP address blocks: 209.59.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/548a2224-5b79-42e3-b397-0cb3e8f5d20e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/548a2224-5b79-42e3-b397-0cb3e8f5d20e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:91:a6:4c:6b:4d:9c:08:f1:1c:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548a2224-5b79-42e3-b397-0cb3e8f5d20e Validity Not Before: Feb 26 02:31:48 2026 GMT Not After : May 27 01:31:48 2026 GMT Subject: CN=21fcd73d-706d-42a5-a641-699e1b1b0d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:00:fe:79:11:27:71:41:7d:21:e9:e6:0a:26: 4c:c8:a8:55:c3:ba:91:13:a1:a8:36:2c:78:97:44: df:5a:ad:fd:dd:3e:45:26:b0:9a:85:a5:b5:ce:e9: 8d:54:a5:4b:cd:52:e8:e8:43:c9:be:db:ef:a7:ce: 95:f8:66:a7:62:b4:34:cd:56:07:16:7a:a9:51:09: 2b:29:c2:59:4d:f4:7f:15:72:97:08:26:6a:94:ff: 86:14:c1:3f:bc:b2:b1:f6:be:73:80:b5:b2:31:90: 27:30:01:4b:a9:8e:65:e8:1f:c2:a6:2c:fb:0e:04: 57:25:6b:c4:bd:fb:ee:42:86:8d:89:95:15:65:e7: a8:09:d3:9c:00:b9:ad:55:60:c1:d5:dd:65:e9:63: a0:47:4b:27:15:e8:e9:78:02:bf:ad:40:3d:d4:e4: 7c:35:e8:28:20:4a:cf:7c:35:2f:41:1b:b5:fe:81: c6:57:a1:cc:45:76:e3:31:fe:f4:87:17:c5:b9:bd: 85:cb:70:b8:3c:f6:8f:25:fd:49:28:1e:46:44:3e: e9:99:d1:86:02:79:b9:e8:7a:f1:22:d9:be:93:bc: 1f:1f:16:70:fd:f2:0b:49:82:1f:e9:6c:ab:b2:0f: 66:54:ee:69:86:64:b4:3c:f2:ac:99:bb:de:33:a4: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:86:46:E5:C7:28:BB:8D:79:0E:EB:C2:11:64:50:A3:4B:8F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/3a6ef3bb-154f-3260-8a42-ee08b9dd7418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/548a2224-5b79-42e3-b397-0cb3e8f5d20e.crl X509v3 Authority Key Identifier: keyid:D2:59:97:29:C7:10:34:9B:9D:47:7A:5D:92:76:DF:97:D0:0E:21:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e.cer sbgp-ipAddrBlock: critical IPv4: 209.59.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a6:6c:ff:f0:e1:f7:c4:46:e9:a1:c2:22:6b:3c:b3:41:28: 52:64:03:c0:c5:cb:b2:a6:03:6d:e9:cd:f6:27:5d:18:5b:d2: f5:7d:a8:00:a5:44:da:75:a1:2b:81:b0:f9:72:fb:f1:9f:00: e8:0e:1f:71:aa:81:7d:00:99:6f:24:e5:1e:1b:4a:98:18:ae: b1:46:c2:b8:44:fa:08:3f:af:df:69:3a:e8:60:cb:f1:ff:20: 0b:be:1b:cf:f8:e3:c1:62:8a:6a:e0:e5:62:d3:d0:33:b6:0f: 72:9d:61:e9:a8:ba:45:4a:ab:92:67:3a:82:39:b1:31:c0:2b: 3a:4d:57:7f:24:8c:b0:93:26:0f:cc:54:1d:fb:b7:9a:21:02: d0:e6:35:bc:c5:02:26:29:ea:5f:4f:ef:ac:25:d3:fb:cb:48: d6:f7:50:ea:6e:e2:14:6b:67:c1:55:d6:f6:d9:b6:04:dc:12: b0:b5:7c:b8:9c:46:c0:33:c7:6e:87:95:e9:1d:34:e0:e0:9b: 36:c6:bb:03:80:e4:5e:ce:2a:cd:00:32:c1:59:2b:f4:5e:c3: 97:01:5f:c2:2c:7b:9c:ea:da:5a:5a:09:d1:4d:a1:96:4b:60: c0:e6:99:0c:8f:84:38:ee:a0:27:2c:22:4c:1d:d6:90:ac:fc: 43:8d:24:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8kaZMa02cCPEcVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ4YTIyMjQtNWI3OS00MmUzLWIzOTctMGNiM2U4ZjVk MjBlMB4XDTI2MDIyNjAyMzE0OFoXDTI2MDUyNzAxMzE0OFowLzEtMCsGA1UEAxMk MjFmY2Q3M2QtNzA2ZC00MmE1LWE2NDEtNjk5ZTFiMWIwZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQD+eREncUF9IenmCiZMyKhVw7qRE6GoNix4 l0TfWq393T5FJrCahaW1zumNVKVLzVLo6EPJvtvvp86V+GanYrQ0zVYHFnqpUQkr KcJZTfR/FXKXCCZqlP+GFME/vLKx9r5zgLWyMZAnMAFLqY5l6B/Cpiz7DgRXJWvE vfvuQoaNiZUVZeeoCdOcALmtVWDB1d1l6WOgR0snFejpeAK/rUA91OR8NegoIErP fDUvQRu1/oHGV6HMRXbjMf70hxfFub2Fy3C4PPaPJf1JKB5GRD7pmdGGAnm56Hrx Itm+k7wfHxZw/fILSYIf6Wyrsg9mVO5phmS0PPKsmbveM6QsJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLNhkblxyi7jXkO68IRZFCjS4/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81NDhh MjIyNC01Yjc5LTQyZTMtYjM5Ny0wY2IzZThmNWQyMGUvM2E2ZWYzYmItMTU0Zi0z MjYwLThhNDItZWUwOGI5ZGQ3NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTQ4YTIyMjQtNWI3OS00MmUzLWIz OTctMGNiM2U4ZjVkMjBlLzU0OGEyMjI0LTViNzktNDJlMy1iMzk3LTBjYjNlOGY1 ZDIwZS5jcmwwHwYDVR0jBBgwFoAU0lmXKccQNJudR3pdknbfl9AOIYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81NDhhMjIyNC01Yjc5LTQyZTMtYjM5Ny0wY2Iz ZThmNWQyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Tv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqmbP/w4ffERumhwiJrPLNBKFJkA8DFy7KmA23pzfYnXRhb0vV9qACl RNp1oSuBsPly+/GfAOgOH3GqgX0AmW8k5R4bSpgYrrFGwrhE+gg/r99pOuhgy/H/ IAu+G8/448Fiimrg5WLT0DO2D3KdYemoukVKq5JnOoI5sTHAKzpNV38kjLCTJg/M VB37t5ohAtDmNbzFAiYp6l9P76wl0/vLSNb3UOpu4hRrZ8FV1vbZtgTcErC1fLic RsAzx26HlekdNODgmzbGuwOA5F7OKs0AMsFZK/Rew5cBX8Ise5zq2lpaCdFNoZZL YMDmmQyPhDjuoCcsIkwd1pCs/EONJFA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:05:40 2026 by rpki-client