$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5464203-ee99-3ef4-910e-fe517dde4884.roa File: a5464203-ee99-3ef4-910e-fe517dde4884.roa (raw, json) Hash identifier: JDALEU02yPJXgSYd4oADEcgNnr3NdhhstRIOzDk3IOU= Subject key identifier: C9:A0:F1:EE:51:7E:FB:87:2D:4C:2E:16:EF:54:73:F2:E9:5E:4D:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBF1753D4382AA0A123C97E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5464203-ee99-3ef4-910e-fe517dde4884.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 31898 IP address blocks: 192.9.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:53:d4:38:2a:a0:a1:23:c9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=a5b758d5-308e-4b0a-b23a-2087075c3d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:34:47:ae:29:2a:c4:ab:e2:b7:0f:0f:0b: 43:78:26:83:df:3b:0d:2d:65:59:96:d4:1c:ad:aa: 7d:c6:58:b6:8c:24:a4:48:bc:e4:87:2e:a5:79:e5: d0:1a:70:92:8e:a3:08:9d:c9:d4:0b:33:b0:59:9e: f0:b4:60:5c:db:36:d2:49:1e:ab:fd:61:05:4c:40: f3:85:43:6c:e3:05:f1:9f:57:d1:93:20:53:6e:76: fb:26:99:b6:ab:49:94:17:29:8c:a8:7b:13:fa:fd: 79:72:05:b0:06:35:44:9d:c6:b9:f0:19:17:67:33: e5:4d:59:f6:4c:c8:d7:0c:ed:6b:77:06:42:fd:1f: 88:42:50:03:c6:fd:45:26:7d:72:ba:72:13:e0:6b: 32:75:a7:37:15:99:44:bf:cb:27:5c:cd:a1:7d:6b: 83:24:06:e9:de:8f:b0:8b:7d:0f:0d:9d:76:7d:8a: 1c:3b:ef:a9:4e:27:b0:3c:e9:29:4f:0e:2f:d0:00: 5c:0e:2f:10:0a:31:69:6b:4b:d7:65:d2:7e:03:63: f7:a2:0c:d0:ad:03:1e:71:7a:c2:31:b2:48:3a:0c: 93:93:3d:c0:cf:aa:00:37:c5:06:9d:96:93:90:d2: 7e:f7:b8:af:97:a7:d0:5a:09:0e:54:79:53:1e:2c: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:F1:EE:51:7E:FB:87:2D:4C:2E:16:EF:54:73:F2:E9:5E:4D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a5464203-ee99-3ef4-910e-fe517dde4884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.9.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:28:99:e5:3f:0f:35:0d:f5:46:a3:c8:5f:1a:a9:d4:00:e7: d7:fa:80:d6:3a:ed:af:5b:f6:31:e9:5f:60:b0:bd:b3:2d:12: 2a:8b:23:e0:f8:aa:e2:1a:4e:23:fe:7b:8b:63:69:23:7b:56: 59:db:69:c5:f9:eb:c4:9b:87:a3:50:f0:f1:01:1e:ae:75:2e: e7:ef:1a:ad:ce:2e:79:1c:01:ca:6a:d5:62:8a:a7:8b:7d:7e: 88:94:96:c7:48:c1:1a:57:0d:b2:8c:8a:a1:59:e4:bb:31:c5: cd:50:6b:45:54:30:40:23:5a:db:81:1d:2e:88:11:ed:b4:fc: 8d:92:38:0e:eb:be:be:af:7d:56:ee:e5:93:5a:06:31:f1:da: f8:ff:68:64:ae:7d:dd:00:2c:72:dc:b5:61:25:1e:ac:4a:78: c9:6e:50:b3:be:d0:55:61:64:3c:88:e5:ec:aa:73:44:76:50: 43:5d:fd:e0:91:4b:35:70:ae:1e:8e:cc:5a:91:87:56:ad:ce: 10:83:62:d1:56:63:f6:e0:4a:5c:55:8b:53:69:67:46:5e:54: 29:54:f9:27:a5:ca:81:68:3b:a7:75:0c:d7:48:28:7a:3d:6c: 22:ad:6a:a4:f8:f6:89:54:8e:3d:64:3c:f7:7c:55:fb:9c:32: 07:f5:a6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1PUOCqgoSPJfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk YTViNzU4ZDUtMzA4ZS00YjBhLWIyM2EtMjA4NzA3NWMzZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+I0R64pKsSr4rcPDwtDeCaD3zsNLWVZltQc rap9xli2jCSkSLzkhy6leeXQGnCSjqMIncnUCzOwWZ7wtGBc2zbSSR6r/WEFTEDz hUNs4wXxn1fRkyBTbnb7Jpm2q0mUFymMqHsT+v15cgWwBjVEnca58BkXZzPlTVn2 TMjXDO1rdwZC/R+IQlADxv1FJn1yunIT4Gsydac3FZlEv8snXM2hfWuDJAbp3o+w i30PDZ12fYocO++pTiewPOkpTw4v0ABcDi8QCjFpa0vXZdJ+A2P3ogzQrQMecXrC MbJIOgyTkz3Az6oAN8UGnZaTkNJ+97ivl6fQWgkOVHlTHiyvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmg8e5RfvuHLUwuFu9Uc/LpXk3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTU0NjQyMDMtZWU5OS0z ZWY0LTkxMGUtZmU1MTdkZGU0ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAnJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwomeU/DzUN9UajyF8aqdQA59f6gNY67a9b9jHpX2CwvbMtEiqLI+D4 quIaTiP+e4tjaSN7VlnbacX568Sbh6NQ8PEBHq51LufvGq3OLnkcAcpq1WKKp4t9 foiUlsdIwRpXDbKMiqFZ5Lsxxc1Qa0VUMEAjWtuBHS6IEe20/I2SOA7rvr6vfVbu 5ZNaBjHx2vj/aGSufd0ALHLctWElHqxKeMluULO+0FVhZDyI5eyqc0R2UENd/eCR SzVwrh6OzFqRh1atzhCDYtFWY/bgSlxVi1NpZ0ZeVClU+SelyoFoO6d1DNdIKHo9 bCKtaqT49olUjj1kPPd8VfucMgf1piY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:14 2026 by rpki-client