$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa File: d60bda9b-5558-3804-a4dc-7ef1d9647130.roa (raw, json) Hash identifier: sv5mpAM/x36QRPzSqJkFQRVyStRS7noWO+dwRIyoeGA= Subject key identifier: 72:7A:AB:8C:4C:72:55:29:79:DC:72:0F:2E:D5:3F:3D:A3:90:BD:C2 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584CF6ECD1923A4C21091A9F3C00 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 394195 IP address blocks: 209.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d1:92:3a:4c:21:09:1a:9f:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=1239eefd-b468-4dae-8c41-195eec077611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:e9:62:fd:8a:b5:7e:7e:ec:aa:94:5e:42: 62:9d:f2:e5:97:57:eb:88:8a:93:1f:d7:d0:7f:b1: db:70:b3:69:da:d8:c3:15:d7:6b:6b:95:7f:fd:66: 24:e1:1a:28:c2:38:1d:ee:ea:26:e5:57:c5:ad:62: ce:c9:2b:7d:40:4e:7b:89:3e:5c:ec:82:83:ba:78: cd:70:31:07:65:d7:99:f1:ef:bc:cc:81:7c:54:bb: 68:48:90:a9:a6:d5:a4:29:bc:67:be:81:92:91:1b: 40:68:e9:8e:79:4b:31:9f:37:48:cd:17:d4:4c:05: 1e:8f:37:87:0b:e2:28:de:70:ef:24:1b:e8:53:a8: 8d:e6:d2:9e:44:e2:13:79:28:80:6c:55:c0:ba:c4: 24:c0:7c:a8:89:26:88:29:6f:a0:d6:89:9c:33:64: cd:e9:b6:96:1e:62:79:71:b0:9e:51:89:63:25:89: 1b:5c:c2:f4:a8:7d:bc:de:c7:f9:a2:9f:09:df:c8: 9b:65:38:eb:5e:06:e0:9b:79:d2:53:2c:9a:01:b8: 19:58:ed:1f:63:d9:6e:7a:b4:27:4e:0a:05:2b:0a: 9b:b8:63:c6:df:bf:eb:2b:77:b4:98:0e:5e:bd:54: 8a:e2:7f:d9:33:94:3c:55:04:d3:26:fa:ed:76:97: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7A:AB:8C:4C:72:55:29:79:DC:72:0F:2E:D5:3F:3D:A3:90:BD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ae:bd:28:eb:8c:13:6c:b4:78:ab:da:b9:30:46:87:f7:b0: df:e6:f3:93:06:49:ba:f6:99:7b:57:7d:79:a0:1b:7e:1e:48: c2:2f:53:b0:d2:7b:6f:2d:74:ca:07:ec:63:bb:42:4d:8e:9d: 3b:d5:e7:a3:96:c2:95:d7:45:42:ac:5e:f1:db:b6:11:40:8e: a5:66:59:5c:d5:a7:99:44:b8:17:1e:f9:64:ba:9d:36:52:c3: 34:93:5e:01:87:c2:8f:32:dd:5e:3a:c9:b0:30:ca:f0:e1:c2: 71:13:51:38:e6:4c:c8:8a:03:4b:4f:14:bb:8c:6e:be:c7:4e: 34:0c:85:4f:d7:00:55:5c:e1:31:f8:b2:75:57:0a:9f:fd:f6: 2b:0d:cb:ba:96:6e:55:a1:57:37:13:22:13:6d:86:e3:6f:3a: 97:2b:f0:b3:62:38:19:08:85:24:c8:8e:35:13:4d:21:a8:f4: 31:cb:10:a3:b4:d7:b3:69:b6:b1:4c:b3:3d:93:d2:d5:85:3e: 46:1b:e1:2e:d3:bb:f8:43:fc:af:b5:34:6e:e1:45:cf:ff:3a: bf:56:b8:6c:89:2f:d2:d6:f1:56:cb:e7:5e:57:34:f2:e7:31: 88:59:db:ac:d9:13:2e:7c:b6:90:bb:ae:24:63:5b:6b:9f:77: 55:13:2e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NGSOkwhCRqfPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk MTIzOWVlZmQtYjQ2OC00ZGFlLThjNDEtMTk1ZWVjMDc3NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPHpYv2KtX5+7KqUXkJinfLll1friIqTH9fQ f7HbcLNp2tjDFddra5V//WYk4Roowjgd7uom5VfFrWLOySt9QE57iT5c7IKDunjN cDEHZdeZ8e+8zIF8VLtoSJCpptWkKbxnvoGSkRtAaOmOeUsxnzdIzRfUTAUejzeH C+Io3nDvJBvoU6iN5tKeROITeSiAbFXAusQkwHyoiSaIKW+g1omcM2TN6baWHmJ5 cbCeUYljJYkbXML0qH283sf5op8J38ibZTjrXgbgm3nSUyyaAbgZWO0fY9luerQn TgoFKwqbuGPG37/rK3e0mA5evVSK4n/ZM5Q8VQTTJvrtdpdDqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ6q4xMclUpedxyDy7VPz2jkL3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZDYwYmRhOWItNTU1OC0z ODA0LWE0ZGMtN2VmMWQ5NjQ3MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyuvSjrjBNstHir2rkwRof3sN/m85MGSbr2mXtXfXmgG34eSMIvU7DS e28tdMoH7GO7Qk2OnTvV56OWwpXXRUKsXvHbthFAjqVmWVzVp5lEuBce+WS6nTZS wzSTXgGHwo8y3V46ybAwyvDhwnETUTjmTMiKA0tPFLuMbr7HTjQMhU/XAFVc4TH4 snVXCp/99isNy7qWblWhVzcTIhNthuNvOpcr8LNiOBkIhSTIjjUTTSGo9DHLEKO0 17NptrFMsz2T0tWFPkYb4S7Tu/hD/K+1NG7hRc//Or9WuGyJL9LW8VbL515XNPLn MYhZ26zZEy58tpC7riRjW2ufd1UTLm0= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:57 2026 by rpki-client