$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a8576-a929-3b56-8616-9164c2181072.roa File: fb2a8576-a929-3b56-8616-9164c2181072.roa (raw, json) Hash identifier: xFzPQAKJ5nvC6ita2mvj/XmG/P3bi59jHzhkD+SBZS4= Subject key identifier: FE:EA:B1:2C:6F:DD:19:DD:17:39:AD:E2:4E:AC:2D:F8:9B:6B:77:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D09126DE857D136CA42CDE600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a8576-a929-3b56-8616-9164c2181072.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 32787 IP address blocks: 209.200.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6d:e8:57:d1:36:ca:42:cd:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=a825ddd8-7639-4cd0-b5fe-02fadc6c4c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:64:8e:96:c7:23:df:ab:e0:d4:9e:ad:ca: 69:08:9b:df:60:ef:7b:a9:6f:ce:15:1b:2d:ad:59: ec:d6:e7:ee:ae:7f:d5:3c:cd:3b:b9:65:f8:6b:0a: 69:b9:47:57:d8:b5:04:34:dd:7b:ca:60:c7:1e:c2: f1:4c:e8:a9:00:30:af:54:66:27:f2:dc:cd:b3:4c: ba:98:10:66:17:5d:55:2d:6f:6c:67:99:72:74:d7: f8:56:25:c3:46:4f:b3:b3:1e:93:3e:3b:4c:52:0e: a4:c4:d6:57:f3:11:78:f6:fd:de:fd:22:bd:c5:9a: 70:9e:dc:7f:8f:0a:8c:97:d6:f2:44:7b:3f:bc:0a: cb:09:5d:08:44:f2:b3:38:4f:89:34:9e:86:df:6b: 6d:85:86:b4:d6:88:d1:d5:56:08:e6:d7:12:42:e3: 46:e5:88:9f:51:aa:5a:bc:e8:aa:68:ca:d1:c0:ee: 75:55:c4:39:4e:4c:ab:06:5f:f2:a8:5f:94:20:fc: 85:6a:aa:11:e3:3d:ad:b7:81:2c:fc:4d:42:ce:8a: e0:10:de:e9:fb:9f:b0:d0:e0:80:25:d9:44:5a:cf: 57:43:e7:7e:c9:87:55:26:8d:99:28:11:ff:0e:95: 54:21:cd:8d:2c:c5:ee:20:99:b9:33:54:12:33:11: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:B1:2C:6F:DD:19:DD:17:39:AD:E2:4E:AC:2D:F8:9B:6B:77:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a8576-a929-3b56-8616-9164c2181072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a0:69:75:cc:63:05:c9:47:5e:ec:82:4d:af:e8:2a:12:ba: 05:2d:f5:1d:e1:6f:2e:fd:0b:67:d0:cc:6e:46:e5:d4:ac:4e: 39:35:13:87:6f:c5:ea:2f:0b:71:2d:35:08:a1:96:0f:04:1e: df:44:b6:27:25:d9:9e:36:67:9d:21:26:39:e2:ee:e6:84:3a: 21:31:75:d3:c2:43:0f:06:02:4d:4e:15:da:af:1f:b2:0e:df: 70:19:15:9e:24:0a:03:83:d9:79:fa:33:b1:ae:a6:74:b1:ee: bd:c3:bc:fa:f8:ed:d6:6a:e7:1e:6b:30:45:83:ec:b8:cd:f3: c7:ed:69:8f:fa:e0:94:a3:28:89:15:96:b5:0e:b6:fb:69:90: 87:71:4d:ac:e4:dd:f7:e2:c5:24:fc:99:3e:67:7a:ef:d0:d0: 29:e9:06:06:87:15:5d:6b:77:bb:f9:7a:b7:75:52:bd:2a:ad: 16:f8:6b:12:e8:6c:ae:f6:d2:84:47:ee:97:01:e1:17:25:63: 1d:72:f5:88:11:03:3e:3d:d8:83:12:0f:e2:93:8d:2d:16:1b: 2b:97:da:95:5e:a0:49:47:7e:83:fd:8f:1b:de:3e:52:d7:48: d6:04:d2:e7:fe:f5:64:2c:26:ba:a1:2c:83:9f:de:47:75:85: a7:a5:9a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEm3oV9E2ykLN5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTgyNWRkZDgtNzYzOS00Y2QwLWI1ZmUtMDJmYWRjNmM0YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf1kjpbHI9+r4NSercppCJvfYO97qW/OFRst rVns1ufurn/VPM07uWX4awppuUdX2LUENN17ymDHHsLxTOipADCvVGYn8tzNs0y6 mBBmF11VLW9sZ5lydNf4ViXDRk+zsx6TPjtMUg6kxNZX8xF49v3e/SK9xZpwntx/ jwqMl9byRHs/vArLCV0IRPKzOE+JNJ6G32tthYa01ojR1VYI5tcSQuNG5YifUapa vOiqaMrRwO51VcQ5TkyrBl/yqF+UIPyFaqoR4z2tt4Es/E1CzorgEN7p+5+w0OCA JdlEWs9XQ+d+yYdVJo2ZKBH/DpVUIc2NLMXuIJm5M1QSMxEehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7qsSxv3RndFzmt4k6sLfiba3fkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmIyYTg1NzYtYTkyOS0z YjU2LTg2MTYtOTE2NGMyMTgxMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2gaXXMYwXJR17sgk2v6CoSugUt9R3hby79C2fQzG5G5dSsTjk1E4dv xeovC3EtNQihlg8EHt9Eticl2Z42Z50hJjni7uaEOiExddPCQw8GAk1OFdqvH7IO 33AZFZ4kCgOD2Xn6M7GupnSx7r3DvPr47dZq5x5rMEWD7LjN88ftaY/64JSjKIkV lrUOtvtpkIdxTazk3ffixST8mT5neu/Q0CnpBgaHFV1rd7v5erd1Ur0qrRb4axLo bK720oRH7pcB4RclYx1y9YgRAz492IMSD+KTjS0WGyuX2pVeoElHfoP9jxvePlLX SNYE0uf+9WQsJrqhLIOf3kd1haelmpw= -----END CERTIFICATE-----Generated at Mon Mar 2 16:10:16 2026 by rpki-client