$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa File: 823f045c-56e3-3844-8d04-8e44b7241d53.roa (raw, json) Hash identifier: xgCrZjgnv6nWLPUr1RTKTmwAugxkUnWMExowLbu/5Fs= Subject key identifier: 23:CC:AC:13:5A:B4:96:77:E7:85:51:94:6C:A8:60:CC:35:63:24:5D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D07AD03D7F4A5FE72B96BE088 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 394889 IP address blocks: 209.211.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:03:d7:f4:a5:fe:72:b9:6b:e0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=9f02914b-3b86-4324-95ec-13a593280826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:6f:d6:6a:be:1b:af:0e:7f:69:47:e2:92: 7b:ff:c2:35:95:86:5b:f0:eb:2e:7c:f9:d4:43:31: ba:51:94:23:2b:33:10:ee:ab:6d:ef:ba:79:19:d4: f3:18:6f:a7:50:9f:f6:80:9c:37:95:21:eb:11:67: 35:06:84:7a:0f:4c:f0:5d:fc:ec:f5:92:31:0c:1a: 11:cd:61:b4:e2:f1:67:7c:a3:94:5b:d9:52:33:de: 9e:e2:f2:89:25:78:aa:2b:b9:1a:52:7f:f7:d3:a6: b7:79:e7:3f:ad:50:81:a1:52:41:bf:56:02:82:2e: 93:21:1a:6d:d8:a3:6c:06:3c:23:c9:83:f9:ad:1d: 96:92:e9:41:cd:9d:23:24:4a:49:f1:3a:d3:45:f7: 4b:f6:38:6a:15:6f:a2:8d:5c:8a:94:5b:b4:89:57: 0a:e9:e4:ed:34:5e:30:f1:32:f0:dc:98:1c:98:17: 76:88:e9:f3:70:21:2d:ba:b5:95:5d:fc:c5:30:e5: 6d:88:39:08:77:71:1c:6d:07:fb:7a:65:b7:4b:98: c3:25:32:0a:97:c4:52:2b:5f:ab:a1:f9:c6:0f:55: 31:6c:72:1d:78:f5:bb:96:14:8a:44:b6:00:38:36: 4c:25:c4:23:cc:34:6a:c2:3c:90:13:42:29:3d:be: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:AC:13:5A:B4:96:77:E7:85:51:94:6C:A8:60:CC:35:63:24:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:38:46:8f:02:a5:d6:63:75:d4:94:98:68:72:1e:62:b4:d1: 9e:0d:c9:01:bc:dc:37:56:25:f8:ef:77:18:80:5c:d7:36:c2: 65:76:23:cc:cd:3e:73:43:26:ca:33:91:bc:50:ae:82:59:09: 87:eb:6c:d8:42:61:49:80:e2:32:47:b0:60:eb:36:2c:f5:67: 51:ba:5a:ba:4c:fd:5f:81:e9:0b:04:27:ec:c6:9b:30:f0:3e: 24:a3:de:df:71:a0:06:29:b9:1b:8d:19:59:fd:b6:20:41:22: 6c:2a:bf:65:aa:86:56:47:0f:45:f4:ec:b9:86:37:28:21:a3: fd:b1:bd:f3:2b:e7:eb:c3:d6:2a:df:30:94:66:37:b6:60:ba: be:19:a9:3d:5e:da:cb:f0:98:e4:99:5a:21:a6:82:1f:70:90: 2a:21:0a:0a:26:52:ff:86:3f:68:05:2b:c0:e0:d9:73:22:a6: 77:6b:ba:de:5a:7f:1d:80:10:cb:6f:4e:05:81:fb:37:45:0b: d7:86:e2:fc:c7:70:c5:e3:27:9f:a4:19:21:7b:42:e5:e9:fe: 17:9e:c5:4a:a5:ed:70:de:63:b0:d5:5a:51:d5:28:93:30:63: f0:e2:78:b5:5c:6e:eb:16:5d:c6:88:62:72:c6:70:27:01:59: 7e:50:22:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQPX9KX+crlr4IgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk OWYwMjkxNGItM2I4Ni00MzI0LTk1ZWMtMTNhNTkzMjgwODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolFv1mq+G68Of2lH4pJ7/8I1lYZb8OsufPnU QzG6UZQjKzMQ7qtt77p5GdTzGG+nUJ/2gJw3lSHrEWc1BoR6D0zwXfzs9ZIxDBoR zWG04vFnfKOUW9lSM96e4vKJJXiqK7kaUn/306a3eec/rVCBoVJBv1YCgi6TIRpt 2KNsBjwjyYP5rR2WkulBzZ0jJEpJ8TrTRfdL9jhqFW+ijVyKlFu0iVcK6eTtNF4w 8TLw3JgcmBd2iOnzcCEturWVXfzFMOVtiDkId3EcbQf7emW3S5jDJTIKl8RSK1+r ofnGD1UxbHIdePW7lhSKRLYAODZMJcQjzDRqwjyQE0IpPb5oVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPMrBNatJZ354VRlGyoYMw1YyRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODIzZjA0NWMtNTZlMy0z ODQ0LThkMDQtOGU0NGI3MjQxZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs4Ro8CpdZjddSUmGhyHmK00Z4NyQG83DdWJfjvdxiAXNc2wmV2I8zN PnNDJsozkbxQroJZCYfrbNhCYUmA4jJHsGDrNiz1Z1G6WrpM/V+B6QsEJ+zGmzDw PiSj3t9xoAYpuRuNGVn9tiBBImwqv2WqhlZHD0X07LmGNygho/2xvfMr5+vD1irf MJRmN7Zgur4ZqT1e2svwmOSZWiGmgh9wkCohCgomUv+GP2gFK8Dg2XMipndrut5a fx2AEMtvTgWB+zdFC9eG4vzHcMXjJ5+kGSF7QuXp/heexUql7XDeY7DVWlHVKJMw Y/DieLVcbusWXcaIYnLGcCcBWX5QImk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:57 2026 by rpki-client