$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa File: 91aea890-0b43-3899-bfc5-bab3755a801e.roa (raw, json) Hash identifier: 0bFaDWu6zzHh1+gjw97ABVfGRVYDuFAteknpZeX1PUI= Subject key identifier: 8E:E7:75:07:AD:38:48:83:A0:87:93:60:89:BB:07:92:26:B0:CC:72 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584CAE5E7452F531D697FFC14A00 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 12129 IP address blocks: 209.124.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:74:52:f5:31:d6:97:ff:c1:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ffc630a5-5e07-4dbe-a9ed-5d72431c39ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:51:e1:1b:aa:1b:d1:e9:95:57:b4:7f:31: db:cc:28:e4:2c:64:ab:64:29:d5:00:38:24:8c:59: e1:e5:c9:76:3f:8a:13:14:e6:66:5b:93:7f:29:b6: 67:74:22:f6:98:3a:61:5e:56:e1:53:57:d0:c0:05: cd:b8:6f:7e:64:2f:6c:aa:30:60:8e:2a:d6:23:e4: 14:a1:a6:7e:2f:8c:6d:62:4a:8f:2b:6f:1b:41:01: ef:e8:dc:c5:89:bd:ae:30:67:60:33:95:7f:2f:2e: dd:ec:20:f9:22:1c:b4:71:dd:f9:e7:c4:51:a1:3d: 6f:2e:19:3e:76:84:28:6c:c8:a4:e9:d1:b2:7c:60: 3c:6b:ab:d3:81:99:3f:df:2b:f9:38:49:b0:b4:75: 16:80:44:93:6b:20:59:04:e9:7b:ac:2f:e1:62:40: 65:d1:de:73:15:74:bd:9a:66:1d:9e:ec:f6:a9:9c: a2:70:12:f2:d2:74:79:d5:19:64:ac:fd:4c:30:f6: d5:f0:9f:81:a3:7e:5b:59:b9:f7:52:e2:21:55:8a: e3:39:d4:37:45:4a:93:a0:c2:7e:66:09:ea:66:c9: 5d:c0:49:41:f3:7a:c2:6d:a6:dc:0b:cc:f2:83:c5: 81:2d:6f:9c:97:f8:67:c8:09:0f:fc:c0:70:61:7e: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:75:07:AD:38:48:83:A0:87:93:60:89:BB:07:92:26:B0:CC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:97:ed:9e:a3:63:1e:21:54:eb:50:2e:9d:aa:d2:42:6c:47: 79:d5:f1:1a:ef:7c:b8:0f:b9:4e:54:9c:c5:9d:9a:02:ac:87: 97:ad:7c:08:63:70:b8:1e:84:d2:29:b7:3e:b2:4c:ea:17:46: ec:a5:b4:21:39:af:9b:58:a5:15:d4:0f:96:86:4f:8e:e6:ef: e2:97:f5:f5:90:f3:f8:b7:c3:95:df:a5:00:01:1f:fe:90:58: cd:47:fc:ff:47:75:84:11:a0:83:ba:42:7f:28:fd:32:fa:e6: 8f:79:4b:da:b9:b6:43:8f:71:d6:42:59:2a:69:b4:b5:76:ad: 1c:a5:89:f8:22:2d:59:0e:4d:ee:cb:c8:0a:06:4c:03:26:13: c1:1e:59:46:55:ad:f3:3b:ca:86:2a:1b:07:e6:32:b5:58:3b: 74:7f:d4:d8:56:aa:30:68:06:c6:32:5c:8d:92:8e:cc:71:21: 01:5a:ac:b7:79:41:ea:7a:fd:27:ae:6f:44:f9:f7:c2:a0:47: 5f:73:3c:04:68:4a:fb:42:97:90:f9:c3:58:8b:c3:07:40:46: ad:08:86:45:0b:91:c5:bb:35:65:a9:09:b8:ab:64:8e:8d:04: d3:9d:49:32:4b:38:9f:85:01:75:ad:60:53:3d:58:f3:ce:53: 31:a3:f2:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXnRS9THWl//BSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmZjNjMwYTUtNWUwNy00ZGJlLWE5ZWQtNWQ3MjQzMWMzOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqJR4RuqG9HplVe0fzHbzCjkLGSrZCnVADgk jFnh5cl2P4oTFOZmW5N/KbZndCL2mDphXlbhU1fQwAXNuG9+ZC9sqjBgjirWI+QU oaZ+L4xtYkqPK28bQQHv6NzFib2uMGdgM5V/Ly7d7CD5Ihy0cd3558RRoT1vLhk+ doQobMik6dGyfGA8a6vTgZk/3yv5OEmwtHUWgESTayBZBOl7rC/hYkBl0d5zFXS9 mmYdnuz2qZyicBLy0nR51RlkrP1MMPbV8J+Bo35bWbn3UuIhVYrjOdQ3RUqToMJ+ ZgnqZsldwElB83rCbabcC8zyg8WBLW+cl/hnyAkP/MBwYX6EpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7ndQetOEiDoIeTYIm7B5ImsMxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOTFhZWE4OTAtMGI0My0z ODk5LWJmYzUtYmFiMzc1NWE4MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Xw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaX7Z6jYx4hVOtQLp2q0kJsR3nV8RrvfLgPuU5UnMWdmgKsh5etfAhj cLgehNIptz6yTOoXRuyltCE5r5tYpRXUD5aGT47m7+KX9fWQ8/i3w5XfpQABH/6Q WM1H/P9HdYQRoIO6Qn8o/TL65o95S9q5tkOPcdZCWSpptLV2rRylifgiLVkOTe7L yAoGTAMmE8EeWUZVrfM7yoYqGwfmMrVYO3R/1NhWqjBoBsYyXI2SjsxxIQFarLd5 Qep6/Seub0T598KgR19zPARoSvtCl5D5w1iLwwdARq0IhkULkcW7NWWpCbirZI6N BNOdSTJLOJ+FAXWtYFM9WPPOUzGj8jY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:54:36 2026 by rpki-client