$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa File: ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa (raw, json) Hash identifier: WbeVfbDfMZn11kEXKt2PkC95OM7qD6neT7w67pcb5K8= Subject key identifier: 34:72:96:F1:04:B6:60:87:9F:F5:54:82:F9:1F:84:19:F3:BD:F6:DB Certificate issuer: /CN=d7c772f5-c64d-4a1c-92fd-29cec8597ea6 Certificate serial: 010D0C9F4328584D0A77A0312A8CB95F43929C90 Authority key identifier: 71:B5:D7:F3:75:E1:6C:A8:1A:0B:99:37:A2:CE:46:8E:F5:74:34:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 398885 IP address blocks: 209.240.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a0:31:2a:8c:b9:5f:43:92:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c772f5-c64d-4a1c-92fd-29cec8597ea6 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=243f19af-a888-4903-a9d7-159e73932839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:f6:17:0b:e9:dd:90:53:af:e6:68:95:ab: 44:75:61:bd:ba:a9:eb:21:7e:94:aa:5c:6b:fd:bb: 9b:a9:73:42:11:1c:7e:3f:e0:f3:7d:c7:dc:26:91: 69:07:93:e2:bc:49:d6:34:46:92:9c:6f:01:d0:66: 46:f8:4f:14:f5:17:ed:a9:f1:66:93:50:fb:80:3c: d5:71:c9:4e:d8:4b:f7:c8:56:5c:ad:23:4a:7d:e4: 1e:72:c2:a8:81:d9:12:6c:b1:9a:4b:de:4a:b8:b8: f7:09:97:52:b9:10:0e:b9:bb:09:ac:c5:71:85:b9: 3e:be:c8:db:9b:ba:8f:c1:9d:e2:ee:d4:bc:f0:17: ca:5c:4f:be:cc:8f:40:fc:c6:62:ab:53:f2:97:55: 2d:69:cb:e1:15:fd:5b:77:a0:1e:b8:13:d6:18:43: 20:89:0e:fe:9f:42:af:d9:6d:53:9a:37:bc:5e:81: 06:a8:dd:59:22:03:a1:7a:a1:75:7e:5d:be:e2:e8: b1:51:fb:b3:a2:4b:ae:7e:54:f4:15:e5:96:8f:aa: 84:70:12:4b:ef:d3:96:8e:10:cd:07:2c:75:00:a5: 9b:1c:72:9c:2c:b7:a5:11:da:c0:ff:6a:aa:74:3d: 86:77:27:4e:23:49:7b:1f:59:fc:ac:ce:2a:6a:20: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:96:F1:04:B6:60:87:9F:F5:54:82:F9:1F:84:19:F3:BD:F6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.crl X509v3 Authority Key Identifier: keyid:71:B5:D7:F3:75:E1:6C:A8:1A:0B:99:37:A2:CE:46:8E:F5:74:34:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.cer sbgp-ipAddrBlock: critical IPv4: 209.240.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:da:4f:72:77:15:9f:dc:55:98:cf:c8:82:55:e9:71:12:d8: 1f:2b:c4:4a:0c:79:dd:e8:50:4a:b6:12:ee:13:9b:5e:48:2f: b2:53:bb:cb:33:ea:6c:ea:11:e2:47:46:ca:c8:ed:5d:c4:15: 91:07:b1:27:d5:9c:c0:32:48:72:9d:3d:2d:aa:da:fe:c9:b1: 7e:78:c7:10:81:b2:2f:e7:0d:ed:af:29:26:8a:5d:e5:35:04: 47:7f:db:0d:ca:b4:ee:f4:8b:84:10:f3:ec:5e:b2:ed:01:71: 26:f1:6d:05:f7:d2:34:5d:22:f3:87:15:f8:14:0d:79:cc:60: 4f:94:6b:32:57:9d:13:5e:66:79:d0:3c:a0:9a:c8:d2:3f:6e: 3f:bc:b6:b7:fc:78:e4:9d:4d:74:82:f7:d5:f3:57:c1:38:0d: 8e:8e:7b:6c:1f:4e:4b:b2:20:f8:2e:88:bd:03:a1:6b:e7:51: 90:7b:c2:56:64:11:46:9f:da:57:a7:46:fd:3a:ff:98:2a:13: 42:8c:d0:d6:eb:3a:c1:e8:be:02:bc:13:be:38:76:90:9a:c6: c0:48:50:a2:3e:6a:d0:a7:49:47:5e:bd:c6:59:11:ea:3c:82: a5:bc:1c:3a:19:0b:40:cc:d2:a9:22:79:11:62:b0:7d:27:b8: 3d:08:81:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6AxKoy5X0OSnJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNzcyZjUtYzY0ZC00YTFjLTkyZmQtMjljZWM4NTk3 ZWE2MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MjQzZjE5YWYtYTg4OC00OTAzLWE5ZDctMTU5ZTczOTMyODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsb2Fwvp3ZBTr+ZolatEdWG9uqnrIX6Uqlxr /bubqXNCERx+P+DzfcfcJpFpB5PivEnWNEaSnG8B0GZG+E8U9RftqfFmk1D7gDzV cclO2Ev3yFZcrSNKfeQecsKogdkSbLGaS95KuLj3CZdSuRAOubsJrMVxhbk+vsjb m7qPwZ3i7tS88BfKXE++zI9A/MZiq1Pyl1UtacvhFf1bd6AeuBPWGEMgiQ7+n0Kv 2W1Tmje8XoEGqN1ZIgOheqF1fl2+4uixUfuzokuuflT0FeWWj6qEcBJL79OWjhDN Byx1AKWbHHKcLLelEdrA/2qqdD2GdydOI0l7H1n8rM4qaiDFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRylvEEtmCHn/VUgvkfhBnzvfbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2M3 NzJmNS1jNjRkLTRhMWMtOTJmZC0yOWNlYzg1OTdlYTYvZmYwOTQwNWEtNmNhMy0z YjU0LTliNjEtZTlhN2VhMTYzNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdjNzcyZjUtYzY0ZC00YTFjLTky ZmQtMjljZWM4NTk3ZWE2L2Q3Yzc3MmY1LWM2NGQtNGExYy05MmZkLTI5Y2VjODU5 N2VhNi5jcmwwHwYDVR0jBBgwFoAUcbXX83XhbKgaC5k3os5GjvV0NDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2M3NzJmNS1jNjRkLTRhMWMtOTJmZC0yOWNl Yzg1OTdlYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLaT3J3FZ/cVZjPyIJV6XES2B8rxEoMed3oUEq2Eu4Tm15IL7JTu8sz 6mzqEeJHRsrI7V3EFZEHsSfVnMAySHKdPS2q2v7JsX54xxCBsi/nDe2vKSaKXeU1 BEd/2w3KtO70i4QQ8+xesu0BcSbxbQX30jRdIvOHFfgUDXnMYE+UazJXnRNeZnnQ PKCayNI/bj+8trf8eOSdTXSC99XzV8E4DY6Oe2wfTkuyIPguiL0DoWvnUZB7wlZk EUaf2lenRv06/5gqE0KM0NbrOsHovgK8E744dpCaxsBIUKI+atCnSUdevcZZEeo8 gqW8HDoZC0DM0qkieRFisH0nuD0IgXg= -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:44 2026 by rpki-client