$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: Rvt4itq5GW861LtINdtxuVX7NgBBDKGdrOr1nOzL/3M= Subject key identifier: 1B:EA:BA:B0:D4:58:DA:AD:81:40:61:63:8B:6E:2D:77:C3:7E:58:F3 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584C550125D53345D23005043980 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:25:d5:33:45:d2:30:05:04:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=fc11bdcd-9b02-4885-abed-f86070f3e588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e3:d4:b4:6c:2e:c9:6d:27:ce:25:c3:ad:01: a2:a0:14:36:d5:ed:de:96:f8:7e:63:71:5c:f3:ad: 33:02:09:dd:54:a2:ee:13:a5:15:95:a4:46:88:93: d9:00:44:b7:66:6c:81:4a:1e:98:82:77:f5:1c:60: ca:6a:9c:9f:6f:30:6d:1d:bc:ad:74:02:a7:3a:2b: 80:d1:15:06:5c:17:26:ce:f6:ef:93:89:1d:a1:94: fa:84:c2:23:0d:eb:b4:ef:5c:1f:2e:47:91:f8:d6: e6:c7:1d:9d:2f:08:6c:b1:31:55:b4:fe:1b:98:27: 4c:af:99:f8:c8:6f:03:ac:a8:70:52:a8:7f:52:a7: 5f:ba:3a:d7:c4:03:6a:77:8c:e8:02:46:a6:51:c1: c3:64:4e:ae:43:ec:29:e2:81:7a:c5:64:2d:c7:c1: 67:59:e6:20:ad:8f:42:f9:c2:c2:65:f6:f2:00:2c: 4b:a6:de:1f:99:20:a9:55:d6:9e:fb:4b:a1:ff:a0: 39:38:d6:fb:2d:41:e8:e3:2b:89:c4:bd:36:6c:48: e5:88:a5:49:4c:47:04:59:fb:6e:d6:70:96:a5:1d: 5a:89:61:d2:af:8f:c9:e7:e4:bf:cb:99:a3:96:b6: d6:c7:03:61:ba:28:ac:2c:62:e6:bd:ce:6d:66:7b: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:BA:B0:D4:58:DA:AD:81:40:61:63:8B:6E:2D:77:C3:7E:58:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:9f:20:ac:76:1c:44:ac:4b:95:31:04:2f:8d:b8:3c:08:8c: 9e:47:c5:12:de:f1:2b:fe:4e:3c:3d:ee:66:b3:10:0b:e5:1b: eb:29:7e:e9:9a:98:45:6e:84:3c:28:ac:ec:b8:a7:97:5f:d7: b2:8d:07:5f:f8:a3:67:4e:4c:ea:52:6a:e5:db:85:55:17:73: 55:02:77:25:9a:b2:28:ed:b0:0c:61:7c:45:ce:0f:d5:b4:56: a8:b9:72:2e:0b:28:42:ec:09:e7:b1:79:0b:11:dd:e5:40:d9: 97:4a:9d:8c:d4:d2:89:9e:cf:67:20:dc:95:5c:41:99:bb:2a: 7c:77:58:bc:0d:3f:25:3b:a2:3c:e1:a9:64:43:c2:0a:7a:33: 8b:14:83:58:24:a8:b4:20:5e:ec:15:0b:c7:9e:bd:4e:d7:81: 20:b6:ee:79:de:4d:10:25:3f:6e:b4:00:40:02:49:eb:29:63: d2:4a:29:ab:d3:fd:93:5a:2a:ea:18:78:38:bc:4b:1c:70:34: 99:c0:5e:ce:91:df:14:a1:c5:e2:b0:e0:4c:c2:a6:4a:0b:9d: 12:81:cb:7a:8c:e7:0d:16:46:52:b7:b9:0c:c8:52:71:9e:3b: 58:7f:ad:2e:d7:d0:87:b6:64:af:83:23:7e:93:38:6a:de:70: 00:0b:56:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVASXVM0XSMAUEOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk ZmMxMWJkY2QtOWIwMi00ODg1LWFiZWQtZjg2MDcwZjNlNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OPUtGwuyW0nziXDrQGioBQ21e3elvh+Y3Fc 860zAgndVKLuE6UVlaRGiJPZAES3ZmyBSh6Ygnf1HGDKapyfbzBtHbytdAKnOiuA 0RUGXBcmzvbvk4kdoZT6hMIjDeu071wfLkeR+Nbmxx2dLwhssTFVtP4bmCdMr5n4 yG8DrKhwUqh/UqdfujrXxANqd4zoAkamUcHDZE6uQ+wp4oF6xWQtx8FnWeYgrY9C +cLCZfbyACxLpt4fmSCpVdae+0uh/6A5ONb7LUHo4yuJxL02bEjliKVJTEcEWftu 1nCWpR1aiWHSr4/J5+S/y5mjlrbWxwNhuiisLGLmvc5tZnvp8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvqurDUWNqtgUBhY4tuLXfDfljzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGfIKx2HESsS5UxBC+NuDwIjJ5HxRLe8Sv+Tjw97mazEAvlG+spfuma mEVuhDworOy4p5df17KNB1/4o2dOTOpSauXbhVUXc1UCdyWasijtsAxhfEXOD9W0 Vqi5ci4LKELsCeexeQsR3eVA2ZdKnYzU0omez2cg3JVcQZm7Knx3WLwNPyU7ojzh qWRDwgp6M4sUg1gkqLQgXuwVC8eevU7XgSC27nneTRAlP260AEACSespY9JKKavT /ZNaKuoYeDi8SxxwNJnAXs6R3xShxeKw4EzCpkoLnRKBy3qM5w0WRlK3uQzIUnGe O1h/rS7X0Ie2ZK+DI36TOGrecAALVsY= -----END CERTIFICATE-----Generated at Fri Feb 27 04:49:46 2026 by rpki-client