$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa File: afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa (raw, json) Hash identifier: igpH4A3d+E0YCTDjQOod29mItk37jPnUvoQljigJklY= Subject key identifier: 4A:0F:F5:AA:33:59:3C:0D:A8:95:AF:9C:67:F3:6B:8D:D8:86:DB:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D09126DF9A69D162B321C9690 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 32787 IP address blocks: 209.200.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6d:f9:a6:9d:16:2b:32:1c:96:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=976b73fc-090c-4de9-9808-b722d0bcd787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:ad:be:a2:99:b8:2a:3b:18:a1:0a:e1:d7: 21:61:ad:36:fa:b2:47:55:cb:30:1b:4c:1a:8a:fa: 10:9f:47:33:90:f6:95:c4:ea:d6:51:68:34:71:f2: a9:ef:29:f3:05:12:22:72:ee:1f:e5:cd:5f:bd:e4: dc:95:43:13:19:bb:d8:d5:59:79:10:c1:c5:92:9c: d9:bf:b7:7a:35:98:85:61:05:d7:91:60:ca:55:9b: e0:5e:19:f4:f1:c5:07:32:81:e8:37:e1:40:45:9c: b1:71:4e:b8:1a:a4:07:d1:d7:12:72:63:89:16:a8: 4d:62:d5:f1:f4:32:05:fd:38:9b:f6:6b:40:f9:a7: c1:c4:f7:2d:9c:62:41:49:3e:c3:0e:c8:a6:4d:f0: 00:84:53:a8:04:51:f2:5a:24:a6:4a:09:db:43:3e: 23:51:c0:88:28:4e:7d:2f:70:66:45:88:69:ff:1f: 02:61:85:9a:5c:b8:44:c1:43:cc:9a:2b:4e:c8:d5: c1:1c:1c:03:72:1e:10:38:b0:9c:72:75:ad:52:f2: 34:8e:ed:3f:5b:f3:f3:e4:1e:fb:7d:66:47:8e:fb: 1e:c3:2e:9b:96:ab:bd:20:32:90:d9:e7:aa:6c:0b: 86:50:cf:b8:04:ff:ee:21:50:62:a0:39:37:ef:97: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0F:F5:AA:33:59:3C:0D:A8:95:AF:9C:67:F3:6B:8D:D8:86:DB:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afdaee7c-3f4f-31f6-a2c7-c9b6b0bb383a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:15:a7:b7:bb:5c:15:38:35:1b:72:a2:b6:77:f6:e6:c3:ab: 43:55:4a:13:32:16:f3:e3:36:29:c0:bf:8b:ab:27:b3:c5:72: d9:bd:fb:7a:72:3a:2b:37:76:03:8b:90:9d:85:5a:8b:01:c2: 1e:f8:b7:81:d4:9a:75:3b:0a:8a:b3:a7:84:87:7d:9f:ba:cb: c6:f7:af:26:f0:17:a5:6d:a2:78:93:b2:5b:70:62:15:55:a6: 50:1c:97:c5:fe:84:25:e6:a7:00:95:bb:b8:04:88:ec:01:74: 70:4f:8d:47:78:22:28:df:39:c5:bc:19:21:06:08:08:84:91: 9f:82:26:95:47:67:40:9e:6c:5f:01:e9:b6:ff:c7:17:3c:e2: 51:4e:f3:fb:31:93:fd:49:85:da:93:e6:3b:37:19:cf:9d:4f: cd:ef:e6:9b:d1:e8:09:5d:86:38:d6:68:8c:c9:b7:e0:45:2a: 36:eb:c7:88:ae:d6:eb:46:4d:6b:aa:dd:98:a2:47:75:c2:b3: 3a:94:2b:38:60:8e:82:79:33:8f:64:1a:49:17:e1:88:88:59: a7:63:85:32:cc:cc:e2:15:76:4b:c0:31:0c:99:c6:04:79:05: d5:70:a6:0e:4f:61:f8:97:aa:0f:50:93:39:1b:09:e4:a7:2b: d6:d3:0e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEm35pp0WKzIclpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTc2YjczZmMtMDkwYy00ZGU5LTk4MDgtYjcyMmQwYmNkNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzWtvqKZuCo7GKEK4dchYa02+rJHVcswG0wa ivoQn0czkPaVxOrWUWg0cfKp7ynzBRIicu4f5c1fveTclUMTGbvY1Vl5EMHFkpzZ v7d6NZiFYQXXkWDKVZvgXhn08cUHMoHoN+FARZyxcU64GqQH0dcScmOJFqhNYtXx 9DIF/Tib9mtA+afBxPctnGJBST7DDsimTfAAhFOoBFHyWiSmSgnbQz4jUcCIKE59 L3BmRYhp/x8CYYWaXLhEwUPMmitOyNXBHBwDch4QOLCccnWtUvI0ju0/W/Pz5B77 fWZHjvsewy6blqu9IDKQ2eeqbAuGUM+4BP/uIVBioDk375fITQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoP9aozWTwNqJWvnGfza43YhtufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkYWVlN2MtM2Y0Zi0z MWY2LWEyYzctYzliNmIwYmIzODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwVp7e7XBU4NRtyorZ39ubDq0NVShMyFvPjNinAv4urJ7PFctm9+3py Ois3dgOLkJ2FWosBwh74t4HUmnU7Coqzp4SHfZ+6y8b3rybwF6VtoniTsltwYhVV plAcl8X+hCXmpwCVu7gEiOwBdHBPjUd4IijfOcW8GSEGCAiEkZ+CJpVHZ0CebF8B 6bb/xxc84lFO8/sxk/1JhdqT5js3Gc+dT83v5pvR6AldhjjWaIzJt+BFKjbrx4iu 1utGTWuq3ZiiR3XCszqUKzhgjoJ5M49kGkkX4YiIWadjhTLMzOIVdkvAMQyZxgR5 BdVwpg5PYfiXqg9QkzkbCeSnK9bTDoY= -----END CERTIFICATE-----Generated at Sat Mar 7 11:55:26 2026 by rpki-client