$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa File: 95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa (raw, json) Hash identifier: ecFfPKa7Im0kBVsTqCrWhqOyXduqzntxbjlVivHBDUQ= Subject key identifier: E9:7D:9A:F9:69:B9:D6:E2:65:C9:70:2B:FC:2F:1B:79:8F:FE:0A:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB28716B07385ECA69D6BF2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 213120 IP address blocks: 209.200.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:16:b0:73:85:ec:a6:9d:6b:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=7de95e8e-5da6-4998-bb9a-d7735bf36085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:91:3d:c7:22:1c:f9:e7:f0:3c:e1:94:fd: c1:1c:6b:bd:88:71:da:5d:9d:6a:c7:85:14:f2:f2: bc:7d:89:98:df:a8:46:39:bc:e8:65:1e:53:3f:a3: 20:24:c4:5e:06:3c:38:d1:af:16:13:76:d7:39:71: b6:be:89:38:1b:61:4a:48:b7:06:f8:32:c4:54:b0: 39:50:99:bd:6d:9f:c1:d4:3f:b3:26:e4:b3:3a:6d: d6:91:4a:5f:0a:b4:f1:0a:78:be:e6:68:61:c0:c1: 80:a8:d9:da:0f:8c:ea:95:3a:f3:3d:1f:4f:6a:14: 16:91:d5:19:7c:f4:0c:41:da:f4:aa:b1:f7:7d:78: a0:43:2d:8f:b1:4f:0e:8c:24:c2:b1:3a:e8:d1:76: a8:9e:26:8a:c7:d5:9b:32:4c:bc:bb:da:a8:ce:92: 91:50:56:f5:52:2c:57:56:95:8a:b0:9d:56:8a:ce: 98:14:5c:7b:39:47:5a:06:43:b7:f1:6f:5c:17:7d: c2:ef:c4:eb:13:0b:8f:b3:09:67:6f:5b:26:e5:2f: bd:a7:ce:bf:70:23:63:72:30:b3:1a:41:f8:36:b6: 72:35:6e:12:7c:3a:9d:cd:06:bf:3a:1a:f6:ae:2d: c7:1e:cf:01:09:3c:cd:2c:b9:94:a8:f4:32:f0:10: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7D:9A:F9:69:B9:D6:E2:65:C9:70:2B:FC:2F:1B:79:8F:FE:0A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ec:c2:82:61:cc:3c:f9:ea:af:35:d8:95:10:ce:1d:62:3e: 4e:16:3a:07:0e:2d:3a:12:a8:2a:ff:07:ba:69:4e:7e:17:4e: 36:f7:be:fc:26:70:a2:6d:68:ed:9e:2c:65:1d:24:dd:07:fb: 1b:fb:48:6b:70:c4:dd:fa:fa:95:df:83:04:b7:8f:8a:c9:ef: 5b:97:e5:07:73:17:37:bc:42:96:d4:02:5b:9b:27:2d:fc:5d: a3:33:36:6f:e1:6e:03:5c:cc:3b:18:55:58:77:39:88:ee:e7: dc:7c:e1:77:06:a9:54:65:06:c0:dc:61:c8:96:53:cc:7c:56: c3:af:d1:a2:4b:2b:aa:29:45:1e:cc:80:6b:89:ce:f3:2f:dc: b2:76:59:99:4d:4c:80:87:e6:aa:9a:8b:bc:24:01:ed:7e:3e: 32:37:66:46:9a:00:49:da:c2:9d:3f:b4:c9:5e:97:6b:c0:b0: db:26:fb:88:3c:5e:da:e2:56:25:71:66:38:82:fa:96:fd:1d: a1:db:be:7b:31:9b:e8:06:f2:3b:d0:ca:10:6c:e4:68:73:8d: 48:49:ce:0b:a2:aa:5f:16:08:2d:ff:a8:20:7a:c9:af:45:80: ec:b9:81:1d:7f:c2:19:b4:a0:3c:99:83:f9:46:44:b6:d1:ed: fd:9e:cd:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhxawc4Xspp1r8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk N2RlOTVlOGUtNWRhNi00OTk4LWJiOWEtZDc3MzViZjM2MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeyRPcciHPnn8DzhlP3BHGu9iHHaXZ1qx4UU 8vK8fYmY36hGObzoZR5TP6MgJMReBjw40a8WE3bXOXG2vok4G2FKSLcG+DLEVLA5 UJm9bZ/B1D+zJuSzOm3WkUpfCrTxCni+5mhhwMGAqNnaD4zqlTrzPR9PahQWkdUZ fPQMQdr0qrH3fXigQy2PsU8OjCTCsTro0XaoniaKx9WbMky8u9qozpKRUFb1UixX VpWKsJ1Wis6YFFx7OUdaBkO38W9cF33C78TrEwuPswlnb1sm5S+9p86/cCNjcjCz GkH4NrZyNW4SfDqdzQa/Ohr2ri3HHs8BCTzNLLmUqPQy8BALPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl9mvlpudbiZclwK/wvG3mP/goAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTVhOTYzZTEtZjc4Yi0z ZmU4LWE5NWUtNTRlNzNjOTJiODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfswoJhzDz56q812JUQzh1iPk4WOgcOLToSqCr/B7ppTn4XTjb3vvwm cKJtaO2eLGUdJN0H+xv7SGtwxN36+pXfgwS3j4rJ71uX5QdzFze8QpbUAlubJy38 XaMzNm/hbgNczDsYVVh3OYju59x84XcGqVRlBsDcYciWU8x8VsOv0aJLK6opRR7M gGuJzvMv3LJ2WZlNTICH5qqai7wkAe1+PjI3ZkaaAEnawp0/tMlel2vAsNsm+4g8 XtriViVxZjiC+pb9HaHbvnsxm+gG8jvQyhBs5GhzjUhJzguiql8WCC3/qCB6ya9F gOy5gR1/whm0oDyZg/lGRLbR7f2ezUs= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:04 2026 by rpki-client