$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa File: 2c11259a-f9d0-312c-a546-57c810ca6a5b.roa (raw, json) Hash identifier: fyYCkLT7Mp5pR51tlU8Jwq/YcfQbJFONIT2QJe5iJYk= Subject key identifier: EC:3C:75:85:2B:9F:55:EA:A1:C4:2D:33:0D:E5:E7:09:84:0D:CB:A0 Certificate issuer: /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Certificate serial: 010D0C9F4328584D0EA7BB73298FE4F7C75B3D00 Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 27425 IP address blocks: 209.137.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:bb:73:29:8f:e4:f7:c7:5b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=5a05e7cf-dac2-44a4-ae59-d2cb0dd7f500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:6c:61:f7:2a:68:21:2d:8b:00:ca:17:93: 40:b4:59:fe:a5:76:5c:08:d2:1a:9d:14:94:8e:ef: ff:41:c2:c1:a4:a6:c8:93:46:3f:d4:f2:77:05:09: a9:9a:48:fa:78:48:34:7e:6e:29:e1:e2:4e:f3:f4: d9:db:43:52:f2:d6:12:20:ee:94:14:39:e8:33:df: ef:bd:ca:0f:01:2f:63:f0:d7:39:7a:8d:ff:60:12: 50:6b:e3:31:b6:98:12:b7:9a:14:cf:0f:8e:98:20: 15:29:29:5e:3e:c2:a7:bd:d2:25:17:86:7b:5d:03: 7b:26:f9:a1:ea:fe:c3:ee:f6:e2:fc:bd:25:91:e0: f1:ec:50:f8:c0:5a:02:4b:d0:f1:8e:29:0f:b7:e3: 02:79:ee:85:82:18:9a:1b:ae:23:f5:65:08:12:b7: 8b:be:fe:b3:ec:94:8c:37:e8:a1:c7:1f:c8:b9:50: 52:d9:21:db:f8:20:09:ed:98:07:93:cf:d5:ba:9d: db:97:4b:eb:91:19:5d:5e:35:75:20:58:aa:c9:f0: 37:7b:e5:bd:12:a9:f1:7f:99:38:9e:29:a4:bc:09: 04:3e:a3:7e:7c:04:f1:80:1a:3b:45:d9:32:d6:50: 10:ad:01:07:14:e6:42:7a:8f:48:d7:55:24:c4:14: 78:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3C:75:85:2B:9F:55:EA:A1:C4:2D:33:0D:E5:E7:09:84:0D:CB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl X509v3 Authority Key Identifier: keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer sbgp-ipAddrBlock: critical IPv4: 209.137.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ea:56:26:fe:ea:6b:ec:ff:2b:cb:be:1a:2e:a9:0c:ca:5c: 54:cd:2f:27:5b:24:70:b7:b5:21:4b:2e:30:2f:4e:f5:67:5b: 80:96:73:ee:ab:b2:26:75:71:a0:af:70:07:64:b5:4d:29:4d: 8f:72:70:bf:d6:06:bd:e9:30:b1:b5:b5:b1:38:3a:d7:07:06: 59:4e:b7:56:66:22:23:9a:17:f3:ae:c9:46:c0:8d:12:bd:ac: 56:39:81:cf:2c:99:ca:26:6b:58:15:fb:56:90:52:b7:3b:fd: 43:09:98:e7:41:59:2f:bf:8a:12:ce:04:48:1a:6c:a8:ea:43: 09:59:de:62:76:8f:eb:c6:7e:1d:8f:32:a1:9f:b7:5b:f4:62: 10:64:0f:05:4d:fb:b5:cb:a8:af:b6:31:08:ac:41:47:89:07: 0f:50:a9:03:74:bf:ee:48:a4:78:7d:12:72:f6:49:51:32:2a: 9c:9d:3c:f7:db:af:77:0d:9a:f8:9f:8e:2a:7b:b0:6c:31:25: a5:59:79:56:fb:9f:de:03:09:a5:eb:a9:e8:2b:fc:78:8c:04: dd:40:4c:c8:0d:a7:4f:8d:2c:99:ae:05:5e:42:3b:01:ca:e4: a3:d4:a8:2a:47:ab:c7:b7:46:0c:5e:7b:8b:53:b3:ce:7b:9a: 97:a4:46:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7tzKY/k98dbPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUy YzBjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NWEwNWU3Y2YtZGFjMi00NGE0LWFlNTktZDJjYjBkZDdmNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD1sYfcqaCEtiwDKF5NAtFn+pXZcCNIanRSU ju//QcLBpKbIk0Y/1PJ3BQmpmkj6eEg0fm4p4eJO8/TZ20NS8tYSIO6UFDnoM9/v vcoPAS9j8Nc5eo3/YBJQa+MxtpgSt5oUzw+OmCAVKSlePsKnvdIlF4Z7XQN7Jvmh 6v7D7vbi/L0lkeDx7FD4wFoCS9DxjikPt+MCee6FghiaG64j9WUIEreLvv6z7JSM N+ihxx/IuVBS2SHb+CAJ7ZgHk8/Vup3bl0vrkRldXjV1IFiqyfA3e+W9Eqnxf5k4 nimkvAkEPqN+fATxgBo7Rdky1lAQrQEHFOZCeo9I11UkxBR4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw8dYUrn1XqocQtMw3l5wmEDcugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5 ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMmMxMTI1OWEtZjlkMC0z MTJjLWE1NDYtNTdjODEwY2E2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI3OWRkZjgtM2U2Ni00NWNmLTg5 NTUtNDUyZmJlNjUyYzBjLzQyNzlkZGY4LTNlNjYtNDVjZi04OTU1LTQ1MmZiZTY1 MmMwYy5jcmwwHwYDVR0jBBgwFoAUyqJkG6e3TH6KYINPDkK7eKRQ8IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJm YmU2NTJjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjqVib+6mvs/yvLvhouqQzKXFTNLydbJHC3tSFLLjAvTvVnW4CWc+6r siZ1caCvcAdktU0pTY9ycL/WBr3pMLG1tbE4OtcHBllOt1ZmIiOaF/OuyUbAjRK9 rFY5gc8smcoma1gV+1aQUrc7/UMJmOdBWS+/ihLOBEgabKjqQwlZ3mJ2j+vGfh2P MqGft1v0YhBkDwVN+7XLqK+2MQisQUeJBw9QqQN0v+5IpHh9EnL2SVEyKpydPPfb r3cNmvifjip7sGwxJaVZeVb7n94DCaXrqegr/HiMBN1ATMgNp0+NLJmuBV5COwHK 5KPUqCpHq8e3Rgxee4tTs857mpekRtw= -----END CERTIFICATE-----Generated at Sat Mar 14 20:43:56 2026 by rpki-client