$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6f9835ac-561b-3734-b331-01e10881901e.roa File: 6f9835ac-561b-3734-b331-01e10881901e.roa (raw, json) Hash identifier: QPSBr1LUgAl+2Pwk7iwsPEIXt8pN6xeJ/qcynmQ4/DY= Subject key identifier: 0B:B3:8D:12:03:57:37:AC:73:0E:F3:7D:98:B4:00:AE:26:69:78:8C Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CD13CB8A24BBAD2EA3F42E780 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6f9835ac-561b-3734-b331-01e10881901e.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 55081 IP address blocks: 209.127.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:b8:a2:4b:ba:d2:ea:3f:42:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=ace647cd-ae5d-4ec1-a734-71cd5e5913c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3c:f8:63:63:40:06:45:70:43:22:7a:1c:99: 5a:95:98:4e:81:0e:3e:83:76:63:bd:c4:2d:29:6e: 09:9d:d9:a8:34:7c:11:59:2a:93:f6:54:17:28:c6: c9:9b:a4:2e:49:da:27:6b:6b:df:25:c5:d1:7d:e0: f5:ad:a2:e2:e2:bd:91:67:81:79:f9:35:08:44:3d: ce:f0:49:1d:64:15:06:05:ff:9f:dc:45:f3:c1:9c: e4:6b:fb:45:3b:af:e7:fa:6d:3c:d4:1f:d3:60:37: 5f:0c:ad:1e:1d:34:39:c9:f1:6e:3c:81:53:ca:a6: de:a9:a2:04:d6:12:15:ed:3a:1c:23:95:a9:20:a1: f0:5a:b2:9b:d4:6c:81:19:67:fe:be:8c:01:28:52: 95:15:7c:d1:19:ee:c0:48:f6:70:0e:83:df:81:72: 40:3f:53:8b:25:cf:87:fb:7b:48:3a:06:ca:91:0f: f7:20:95:30:a7:14:5e:b6:a0:32:cb:0f:09:8a:39: a1:5c:a8:25:0a:c7:ca:3d:b3:76:d4:37:8a:94:ef: c9:53:b9:20:76:42:57:00:e1:77:46:1f:2c:74:4c: 10:5d:b7:07:c4:e8:b9:10:7b:b2:d0:01:b0:30:5c: 61:f9:cf:82:35:be:4a:58:f8:fb:d6:cb:5c:7b:44: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B3:8D:12:03:57:37:AC:73:0E:F3:7D:98:B4:00:AE:26:69:78:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6f9835ac-561b-3734-b331-01e10881901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5c:7d:83:ed:08:95:50:ca:08:b8:c0:4c:de:54:6b:f2:4e: d5:dd:ff:71:56:c3:27:73:d0:23:d6:68:c4:ed:17:b3:d6:ed: 6e:0f:2f:d8:3c:ee:6e:a6:97:d3:34:a0:50:91:4e:f8:81:b1: 43:3d:ff:52:db:5b:4e:73:e4:36:cc:98:52:23:ff:89:4d:0c: 54:5c:ef:73:b8:f8:2c:2e:ff:9f:76:b6:03:fb:73:0c:6a:7a: 32:75:b0:1c:ea:78:7f:e4:70:3a:92:40:9c:00:2e:67:ca:03: c7:5c:62:fe:25:bb:72:60:a7:ee:86:19:ab:67:47:94:df:a4: c1:46:90:66:e5:0c:b4:1c:e0:31:eb:f5:f1:92:2c:79:be:56: fb:fe:e9:50:23:03:9d:b3:19:23:4b:f9:5e:15:1f:9d:51:11: 17:fa:eb:dd:d8:e9:bc:9f:fe:67:1d:01:ff:6e:84:04:0c:58: 9a:cd:0e:d0:38:cc:73:0a:52:ec:c7:0d:94:4f:30:10:ba:80: ef:b3:2b:e2:2a:98:3a:00:f6:59:54:08:1a:72:f6:f4:bc:bf: c0:17:25:14:79:46:c3:b3:c7:5b:ce:76:e9:2c:27:48:0e:7b: d5:63:0e:75:06:df:49:a9:e4:33:a3:ac:35:c9:61:0e:6d:f6: ff:b7:7d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPLiiS7rS6j9C54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk YWNlNjQ3Y2QtYWU1ZC00ZWMxLWE3MzQtNzFjZDVlNTkxM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTz4Y2NABkVwQyJ6HJlalZhOgQ4+g3ZjvcQt KW4JndmoNHwRWSqT9lQXKMbJm6QuSdona2vfJcXRfeD1raLi4r2RZ4F5+TUIRD3O 8EkdZBUGBf+f3EXzwZzka/tFO6/n+m081B/TYDdfDK0eHTQ5yfFuPIFTyqbeqaIE 1hIV7TocI5WpIKHwWrKb1GyBGWf+vowBKFKVFXzRGe7ASPZwDoPfgXJAP1OLJc+H +3tIOgbKkQ/3IJUwpxRetqAyyw8JijmhXKglCsfKPbN21DeKlO/JU7kgdkJXAOF3 Rh8sdEwQXbcHxOi5EHuy0AGwMFxh+c+CNb5KWPj71stce0Q54wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuzjRIDVzescw7zfZi0AK4maXiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNmY5ODM1YWMtNTYxYi0z NzM0LWIzMzEtMDFlMTA4ODE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZcfYPtCJVQygi4wEzeVGvyTtXd/3FWwydz0CPWaMTtF7PW7W4PL9g8 7m6ml9M0oFCRTviBsUM9/1LbW05z5DbMmFIj/4lNDFRc73O4+Cwu/592tgP7cwxq ejJ1sBzqeH/kcDqSQJwALmfKA8dcYv4lu3Jgp+6GGatnR5TfpMFGkGblDLQc4DHr 9fGSLHm+Vvv+6VAjA52zGSNL+V4VH51RERf6693Y6byf/mcdAf9uhAQMWJrNDtA4 zHMKUuzHDZRPMBC6gO+zK+IqmDoA9llUCBpy9vS8v8AXJRR5RsOzx1vOduksJ0gO e9VjDnUG30mp5DOjrDXJYQ5t9v+3fdo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:28 2026 by rpki-client