$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/ed276f00-0fe1-37e7-9db6-634e6a00d519.roa File: ed276f00-0fe1-37e7-9db6-634e6a00d519.roa (raw, json) Hash identifier: rrtg2q2yqcK3dD4DklvKPzJZ2R/5tpM8UXhACiKxsm4= Subject key identifier: AF:0C:E6:6B:53:44:35:BE:32:A6:78:D6:BE:D0:85:08:0E:EC:0A:D3 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584D300A4DAF622A49AF760F2880 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/ed276f00-0fe1-37e7-9db6-634e6a00d519.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 55286 IP address blocks: 209.234.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4d:af:62:2a:49:af:76:0f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d47c8a40-538c-4d04-8ad8-1c29394f6685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:74:bd:f7:1a:ac:c4:6a:b7:a4:e6:f4:47:98: 41:be:82:55:43:da:70:ed:98:88:22:bd:c4:ae:0f: 71:f1:df:2c:a1:06:b1:3f:29:e7:2a:af:e3:30:7e: 2c:42:f6:5a:1e:47:4d:0f:ac:ea:73:26:e7:44:69: ff:92:62:21:76:c4:2f:07:51:0e:4a:45:e2:51:67: 03:71:c5:cb:a6:29:99:85:80:38:68:be:b4:16:cc: 34:58:6a:b1:c9:5e:32:22:4a:88:f1:e8:9f:72:0d: 4d:29:77:80:26:76:b1:d1:0f:35:42:25:c4:83:0d: 28:3f:15:5b:a6:f2:36:14:ea:a4:04:b9:22:33:40: 34:2b:38:6c:bb:ac:f4:55:e4:4b:a6:5f:38:f6:f9: 91:ec:58:14:5c:2c:db:c8:93:40:d1:ee:aa:0b:ec: 19:f0:3e:9d:94:4d:d1:43:c9:bb:14:89:0b:5a:e3: d9:9c:63:8e:4a:d9:db:c0:36:9e:18:4b:31:2c:71: 76:e4:c0:99:86:71:da:61:bb:d3:ac:dc:b1:66:22: 20:f5:c6:e4:ba:fa:a9:68:24:5d:79:f0:9c:87:e4: 23:e1:0f:47:34:0e:a0:96:6d:4e:51:ef:85:ae:b9: 26:73:5e:c9:11:c9:25:63:0a:d2:61:f2:31:91:8a: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0C:E6:6B:53:44:35:BE:32:A6:78:D6:BE:D0:85:08:0E:EC:0A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/ed276f00-0fe1-37e7-9db6-634e6a00d519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.234.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e4:9d:d9:8d:03:bf:34:e0:c6:f1:73:3b:c3:44:b7:3f:58: aa:b8:3d:63:a0:d7:48:74:3c:b4:69:bd:04:5c:b1:3f:42:a5: a3:66:7e:db:fd:14:71:e3:85:35:e9:55:06:bc:0d:f4:4c:d3: ff:e4:0b:d9:20:2d:69:7f:7c:0b:51:a0:a7:14:ab:61:d1:c1: 93:7e:83:14:7f:b2:de:5b:1c:b3:30:6a:07:dd:a3:97:a9:1c: 4d:5e:d7:5e:91:aa:ff:5c:ae:9a:56:23:32:99:ab:e2:88:6b: 81:91:77:9c:a9:fc:20:cb:bc:ea:11:ae:ee:9f:ed:92:72:1c: 4e:9c:7d:85:a0:f9:19:4c:2b:07:01:b2:3a:6f:81:5f:6d:82: 6b:9c:4e:ff:96:d9:2f:2f:c2:ce:0a:cc:8d:61:d4:fc:b4:1f: 5e:17:4c:a4:18:c1:08:8a:d4:7c:31:06:af:e9:91:0d:96:c2: 9c:93:97:bb:fa:0e:15:d1:f6:9b:3b:6b:48:40:a7:07:26:92: 5b:13:bd:6b:72:2a:37:f9:95:05:4b:50:4a:0d:09:84:9b:9a: 4b:bd:d0:07:3f:f5:d8:ad:95:41:f0:f5:77:49:a2:79:71:cf: 46:52:ca:e7:4a:ca:37:78:81:ff:c5:35:c2:7e:32:82:d4:12: b2:d1:54:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCk2vYipJr3YPKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDQ3YzhhNDAtNTM4Yy00ZDA0LThhZDgtMWMyOTM5NGY2Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3S99xqsxGq3pOb0R5hBvoJVQ9pw7ZiIIr3E rg9x8d8soQaxPynnKq/jMH4sQvZaHkdND6zqcybnRGn/kmIhdsQvB1EOSkXiUWcD ccXLpimZhYA4aL60Fsw0WGqxyV4yIkqI8eifcg1NKXeAJnax0Q81QiXEgw0oPxVb pvI2FOqkBLkiM0A0Kzhsu6z0VeRLpl849vmR7FgUXCzbyJNA0e6qC+wZ8D6dlE3R Q8m7FIkLWuPZnGOOStnbwDaeGEsxLHF25MCZhnHaYbvTrNyxZiIg9cbkuvqpaCRd efCch+Qj4Q9HNA6glm1OUe+Frrkmc17JEcklYwrSYfIxkYr0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8M5mtTRDW+MqZ41r7QhQgO7ArTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZWQyNzZmMDAtMGZlMS0z N2U3LTlkYjYtNjM0ZTZhMDBkNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0er9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjkndmNA7804MbxczvDRLc/WKq4PWOg10h0PLRpvQRcsT9CpaNmftv9 FHHjhTXpVQa8DfRM0//kC9kgLWl/fAtRoKcUq2HRwZN+gxR/st5bHLMwagfdo5ep HE1e116Rqv9crppWIzKZq+KIa4GRd5yp/CDLvOoRru6f7ZJyHE6cfYWg+RlMKwcB sjpvgV9tgmucTv+W2S8vws4KzI1h1Py0H14XTKQYwQiK1HwxBq/pkQ2WwpyTl7v6 DhXR9ps7a0hApwcmklsTvWtyKjf5lQVLUEoNCYSbmku90Ac/9ditlUHw9XdJonlx z0ZSyudKyjd4gf/FNcJ+MoLUErLRVNM= -----END CERTIFICATE-----Generated at Sat Mar 21 15:08:54 2026 by rpki-client