$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa File: 8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json) Hash identifier: miXn5/cc/XrxJTLMxnWCOhC9oKNTcGTNA5u5r1/PoL0= Subject key identifier: E5:54:D8:42:54:5B:A5:67:CA:6A:B5:50:2E:32:12:A5:CA:81:F7:60 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584C794C301EB6726F398E47E9C0 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 209.142.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:30:1e:b6:72:6f:39:8e:47:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=21e40527-af18-45c5-94f7-a681fdcfa7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:7b:1f:b1:b5:23:b4:6e:11:41:81:bc:e4: 73:b8:cc:b3:47:e9:44:de:34:a6:a7:f8:ba:7c:07: 69:b2:de:a5:89:aa:e8:16:fa:fa:56:3e:a6:2a:2c: ca:fb:13:e2:52:4c:d2:fb:fd:a7:8d:5e:85:35:28: 2b:06:26:cc:c1:5a:6d:ed:2c:de:ea:aa:68:3e:ee: 8a:9e:62:fc:54:6d:ce:18:85:8d:98:19:25:7a:4e: 8c:e1:d5:65:49:e9:43:b1:66:b6:7e:af:f7:bf:7c: 70:a0:23:bd:e0:e5:5d:5b:f8:c6:c3:c3:59:13:30: 44:33:eb:fd:1d:1a:00:0a:43:bd:8e:de:75:e9:c1: 5e:9d:14:bd:b7:21:30:4a:79:c8:3c:ca:a1:13:9c: fe:14:c7:66:0d:3e:55:2f:69:05:b1:aa:a5:c0:da: 97:33:e8:0d:c2:61:56:5c:ce:49:79:3c:5b:66:65: 8d:28:ec:35:98:02:09:6a:84:f6:c3:13:59:b1:c6: 6f:4a:14:f4:c1:3f:db:3b:c9:4d:58:27:50:7b:cc: 56:b0:42:6a:00:0f:d8:48:72:56:a1:d8:f0:21:8f: 4e:c5:e4:b2:8a:5a:d2:5f:73:bd:5e:b0:5b:9d:81: 6a:6c:94:79:b9:3f:95:80:40:c2:04:5a:ab:9e:40: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:D8:42:54:5B:A5:67:CA:6A:B5:50:2E:32:12:A5:CA:81:F7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 209.142.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ae:ec:50:4c:b7:f5:eb:3d:2f:2b:8e:3e:90:53:1f:d8:0f: 6f:9b:8a:ac:a3:b4:9b:ed:32:ac:68:49:57:31:11:23:18:81: 76:34:9c:43:81:fd:15:6e:2e:af:8c:7d:ec:80:3e:83:c0:06: b1:ea:9a:33:4b:b0:0b:da:7f:a4:c1:06:f2:d1:37:c7:84:db: 91:c1:6a:8b:86:7f:9f:6d:b0:ce:49:c4:59:cf:64:77:c1:eb: 91:2d:e7:3d:48:88:4d:12:38:be:b0:71:84:49:bb:f1:84:ee: 69:0c:a9:3c:02:57:35:06:9a:66:46:fc:a4:9f:37:bd:95:f3: 9f:38:45:4b:cf:f3:ce:aa:cc:81:6f:76:03:de:36:b5:8c:2a: 0b:33:d2:aa:a6:18:2c:fc:01:65:d2:d1:d5:56:44:7d:d1:00: ce:7d:dc:a3:72:f8:00:4c:1d:cc:a6:c2:0e:ec:05:95:9b:b2: 42:45:da:13:0c:91:00:43:5a:06:a5:ae:2c:2b:ec:9d:6c:fb: ed:18:66:cb:3a:59:51:97:2a:9e:9c:38:5a:76:22:a8:f9:9c: ae:b3:d1:3b:65:f2:2f:97:f0:e5:d4:76:a9:98:6f:03:58:b0: 3c:76:4a:e6:e9:b4:89:7f:d7:8f:02:3a:78:3f:44:99:82:dc: b2:44:71:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TDAetnJvOY5H6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk MjFlNDA1MjctYWYxOC00NWM1LTk0ZjctYTY4MWZkY2ZhN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc17H7G1I7RuEUGBvORzuMyzR+lE3jSmp/i6 fAdpst6liaroFvr6Vj6mKizK+xPiUkzS+/2njV6FNSgrBibMwVpt7Sze6qpoPu6K nmL8VG3OGIWNmBklek6M4dVlSelDsWa2fq/3v3xwoCO94OVdW/jGw8NZEzBEM+v9 HRoACkO9jt516cFenRS9tyEwSnnIPMqhE5z+FMdmDT5VL2kFsaqlwNqXM+gNwmFW XM5JeTxbZmWNKOw1mAIJaoT2wxNZscZvShT0wT/bO8lNWCdQe8xWsEJqAA/YSHJW odjwIY9OxeSyilrSX3O9XrBbnYFqbJR5uT+VgEDCBFqrnkBVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVU2EJUW6Vnymq1UC4yEqXKgfdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvOGMwY2YzZjctMzNmYS0z NTkxLWFiNTgtOTYwZDcwOGM5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiu7FBMt/XrPS8rjj6QUx/YD2+biqyjtJvtMqxoSVcxESMYgXY0nEOB /RVuLq+MfeyAPoPABrHqmjNLsAvaf6TBBvLRN8eE25HBaouGf59tsM5JxFnPZHfB 65Et5z1IiE0SOL6wcYRJu/GE7mkMqTwCVzUGmmZG/KSfN72V8584RUvP886qzIFv dgPeNrWMKgsz0qqmGCz8AWXS0dVWRH3RAM593KNy+ABMHcymwg7sBZWbskJF2hMM kQBDWgalriwr7J1s++0YZss6WVGXKp6cOFp2Iqj5nK6z0Ttl8i+X8OXUdqmYbwNY sDx2SubptIl/148COng/RJmC3LJEcSo= -----END CERTIFICATE-----Generated at Sat Feb 21 07:29:43 2026 by rpki-client