$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/2e9dc843-f02d-3b87-b047-7e650f5681ac.roa File: 2e9dc843-f02d-3b87-b047-7e650f5681ac.roa (raw, json) Hash identifier: 1vhE+huoGOaAyxeimI9fbWUkjnU8mb5COfy1M7YIgAM= Subject key identifier: 57:B5:2E:50:BB:8D:74:C8:FB:92:00:56:92:97:19:53:57:15:CE:20 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584D15A26CB7E0F1A9DE54D88240 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/2e9dc843-f02d-3b87-b047-7e650f5681ac.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 400400 IP address blocks: 209.112.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6c:b7:e0:f1:a9:de:54:d8:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=d1f9e716-10a9-4281-b65e-fa74a559f538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:97:47:5f:23:0f:3c:fc:22:b1:19:3b:0c: b2:e7:c2:ad:9b:16:23:24:00:69:23:60:70:ce:8f: 99:80:60:da:61:61:56:d3:12:da:8c:78:78:07:f3: 7d:fa:f2:56:c8:e4:0f:c2:ca:84:e6:b7:df:17:aa: 72:b9:5a:0e:78:5e:ed:29:20:1f:e5:ef:fb:3b:05: 96:64:f7:ed:94:03:72:a4:68:96:d1:09:00:af:e7: 87:47:3f:2f:dd:62:e8:4d:4e:b9:bd:80:a5:e6:cc: 83:34:89:9f:c2:76:07:c6:c8:0b:9e:0e:6f:12:47: eb:42:68:25:df:1e:6c:37:fe:0c:08:48:ad:38:b3: cd:32:3b:e9:7e:a0:30:1c:23:0a:c2:b1:a7:b2:04: 2e:85:0f:4e:28:8b:7e:8c:f9:12:4a:84:2f:f6:73: 68:53:ea:79:6c:84:ef:65:06:f0:47:5f:b8:7f:c3: ae:7b:55:88:f6:eb:ed:82:cb:0d:fa:88:56:21:a5: c5:99:e7:51:22:e9:6f:06:1a:5b:76:99:97:1f:ca: 6f:bd:f3:55:b9:d4:3b:f8:3c:e8:91:2b:e1:3d:45: ca:e1:84:9c:79:f5:2d:8d:68:48:bc:e2:e6:8f:c6: 79:91:49:6a:e8:a7:54:28:ec:7d:1d:2d:d6:c2:e4: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:2E:50:BB:8D:74:C8:FB:92:00:56:92:97:19:53:57:15:CE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/2e9dc843-f02d-3b87-b047-7e650f5681ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 209.112.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:09:a4:48:d3:bd:c4:f1:7e:85:bd:24:9a:2c:9d:e0:99:c8: 08:fd:1d:dc:1e:f3:03:dc:88:64:24:6b:1e:5c:ab:8d:1a:95: 0e:3b:55:4d:83:e5:f9:34:3a:74:f1:e6:ad:53:5c:70:9c:0f: b3:8c:5d:f1:64:07:f5:37:22:12:1c:8d:f0:b3:32:9c:73:94: da:e8:bc:29:f6:7e:ca:4d:45:10:26:fa:8d:c9:3c:6b:03:3b: bc:d6:35:8b:3b:93:ab:91:73:c6:56:99:50:38:40:6b:da:2d: 33:52:1d:c6:86:26:f4:8f:8d:b0:6c:98:50:bc:87:5d:d7:aa: bd:6c:8f:c8:c5:32:52:7f:e0:c8:b1:71:bd:42:25:c4:7f:c4: 97:94:75:26:2d:64:a8:d8:48:9f:87:0b:14:14:e1:cd:c6:f5: 59:fc:40:d9:7c:09:38:cb:88:99:38:e8:be:b2:43:15:fc:23: c2:8d:90:9a:0a:04:e2:32:3e:cf:ff:bf:14:23:8f:13:d4:b5: 84:27:87:b3:5f:00:ff:29:b5:8f:81:cf:06:19:ff:4c:e9:dc: 0d:1b:dc:37:cf:49:cc:29:fa:9f:bc:b1:b6:23:97:d6:c1:a1: 38:c8:5b:9a:f8:90:25:aa:40:9a:18:c0:8a:5b:e6:8d:03:d3: 88:85:ea:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vomy34PGp3lTYgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZDFmOWU3MTYtMTBhOS00MjgxLWI2NWUtZmE3NGE1NTlmNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfqXR18jDzz8IrEZOwyy58KtmxYjJABpI2Bw zo+ZgGDaYWFW0xLajHh4B/N9+vJWyOQPwsqE5rffF6pyuVoOeF7tKSAf5e/7OwWW ZPftlANypGiW0QkAr+eHRz8v3WLoTU65vYCl5syDNImfwnYHxsgLng5vEkfrQmgl 3x5sN/4MCEitOLPNMjvpfqAwHCMKwrGnsgQuhQ9OKIt+jPkSSoQv9nNoU+p5bITv ZQbwR1+4f8Oue1WI9uvtgssN+ohWIaXFmedRIulvBhpbdpmXH8pvvfNVudQ7+Dzo kSvhPUXK4YScefUtjWhIvOLmj8Z5kUlq6KdUKOx9HS3WwuQolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe1LlC7jXTI+5IAVpKXGVNXFc4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMmU5ZGM4NDMtZjAyZC0z Yjg3LWIwNDctN2U2NTBmNTY4MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0JpEjTvcTxfoW9JJosneCZyAj9Hdwe8wPciGQkax5cq40alQ47VU2D 5fk0OnTx5q1TXHCcD7OMXfFkB/U3IhIcjfCzMpxzlNrovCn2fspNRRAm+o3JPGsD O7zWNYs7k6uRc8ZWmVA4QGvaLTNSHcaGJvSPjbBsmFC8h13Xqr1sj8jFMlJ/4Mix cb1CJcR/xJeUdSYtZKjYSJ+HCxQU4c3G9Vn8QNl8CTjLiJk46L6yQxX8I8KNkJoK BOIyPs//vxQjjxPUtYQnh7NfAP8ptY+BzwYZ/0zp3A0b3DfPScwp+p+8sbYjl9bB oTjIW5r4kCWqQJoYwIpb5o0D04iF6mE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:34:20 2026 by rpki-client