$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa File: ad70148b-73be-3a2f-b582-410330333317.roa (raw, json) Hash identifier: sPfwuP/0qLgZL73cDo9/bXONA6bFPr/ylGkv+K+IvDs= Subject key identifier: 1E:15:51:27:F7:05:4D:9D:BB:14:21:7B:17:99:90:12:FD:86:3C:FB Certificate issuer: /CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Certificate serial: 010D0C9F4328584D31C00BA8B0C1CE12CD6E3BE0 Authority key identifier: A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa Signing time: Sat 21 Feb 2026 18:08:58 +0000 ROA not before: Sat 21 Feb 2026 18:08:58 +0000 ROA not after: Fri 22 May 2026 17:08:58 +0000 asID: 10823 IP address blocks: 209.204.64.0/21 maxlen: 21 209.204.112.0/21 maxlen: 21 209.204.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:c0:0b:a8:b0:c1:ce:12:cd:6e:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Validity Not Before: Feb 21 18:08:58 2026 GMT Not After : May 22 17:08:58 2026 GMT Subject: CN=59f73ded-a0e2-45bc-a7f2-a4610c5cd3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:59:1f:4f:23:b3:e2:ac:a7:c7:b3:05:63: ca:0c:86:b3:db:8e:e3:e8:1c:6b:a4:72:43:74:ee: 90:36:26:6f:61:f5:88:7d:42:2e:6c:39:2f:ba:a4: e3:23:b0:ed:de:ea:70:46:92:45:42:28:46:e6:90: 75:71:03:98:9d:9b:bc:c4:40:f3:67:44:53:d6:84: a8:57:96:78:53:c9:33:ff:af:47:a2:6b:eb:76:eb: 94:2e:7c:32:ea:90:ee:53:36:fd:36:46:e1:19:b5: 23:a4:be:71:87:4e:40:6c:41:02:a6:de:0d:ce:e7: 67:9f:2d:03:80:fe:6b:1a:75:f6:4e:8e:2b:2a:cd: 4c:71:db:bb:75:dc:39:ae:d2:d5:62:e0:c6:8b:6d: 99:df:80:5e:23:77:6c:f3:f8:5d:cd:ba:1d:b8:11: 9e:5e:8e:2b:94:cc:df:62:59:78:b6:d7:31:d8:10: 18:29:71:dd:d4:62:b1:7d:59:e0:79:db:ef:01:b9: 8c:3e:7d:41:51:0b:64:15:3a:56:8a:86:1c:41:02: 08:fe:0e:00:60:01:5b:c3:d6:97:05:58:0c:30:a7: 16:a6:2a:3c:96:74:56:c6:8d:2c:92:0b:67:f5:94: 2e:e8:eb:19:36:f0:d1:f1:c2:38:97:8a:57:4f:12: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:51:27:F7:05:4D:9D:BB:14:21:7B:17:99:90:12:FD:86:3C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl X509v3 Authority Key Identifier: keyid:A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer sbgp-ipAddrBlock: critical IPv4: 209.204.64.0/21 209.204.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:40:8d:7d:51:cf:a8:5f:f6:1a:4c:fb:b3:02:04:ab:79:eb: 4c:15:84:c4:01:bc:6d:77:e8:74:c8:4b:b4:7e:33:65:e3:2a: 15:2d:ee:f7:5f:2b:94:10:36:53:c3:82:0c:2f:1a:0c:bd:4d: 3f:3a:cf:ee:48:47:09:bb:9b:19:0f:f8:ee:43:05:08:a4:7a: 2c:f2:99:02:49:b9:f6:1c:66:56:34:fa:00:ac:a4:f9:b0:eb: c1:3a:a8:88:27:10:93:55:eb:9f:1e:80:bc:5a:7a:de:99:b7: 4d:49:61:a7:31:9b:5b:9a:72:06:ad:8e:36:63:b2:fe:25:da: b7:7f:95:42:1f:22:6f:83:54:45:43:d0:85:d6:8b:82:8c:00: bc:99:a6:48:fb:0a:37:25:52:3e:80:2a:36:f1:5e:1f:79:70: 25:94:26:45:9d:91:84:91:ae:05:bc:2a:31:96:1b:ae:b6:99: f4:16:d2:37:4e:60:02:15:56:3c:87:65:cd:e4:02:9d:90:2d: 1d:41:fd:cd:b5:1b:a7:1b:ff:82:b6:20:f7:91:55:bf:39:94: c3:c6:36:22:f5:e7:fe:b0:3a:63:35:98:c1:82:45:f6:c1:a3: 7b:c0:1a:e6:f0:cc:9f:eb:3d:6a:8f:74:80:6a:30:2d:ec:76: 7d:53:0d:dc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0xwAuosMHOEs1uO+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIxNDc5ZDktMjQzOC00MmMxLWFhNDYtZWFkMzVmMmQz M2UyMB4XDTI2MDIyMTE4MDg1OFoXDTI2MDUyMjE3MDg1OFowLzEtMCsGA1UEAxMk NTlmNzNkZWQtYTBlMi00NWJjLWE3ZjItYTQ2MTBjNWNkM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFlZH08js+Ksp8ezBWPKDIaz247j6BxrpHJD dO6QNiZvYfWIfUIubDkvuqTjI7Dt3upwRpJFQihG5pB1cQOYnZu8xEDzZ0RT1oSo V5Z4U8kz/69HomvrduuULnwy6pDuUzb9NkbhGbUjpL5xh05AbEECpt4Nzudnny0D gP5rGnX2To4rKs1Mcdu7ddw5rtLVYuDGi22Z34BeI3ds8/hdzboduBGeXo4rlMzf Yll4ttcx2BAYKXHd1GKxfVngedvvAbmMPn1BUQtkFTpWioYcQQII/g4AYAFbw9aX BVgMMKcWpio8lnRWxo0skgtn9ZQu6OsZNvDR8cI4l4pXTxLJFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB4VUSf3BU2duxQhexeZkBL9hjz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0 NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQzNWYyZDMzZTIvYWQ3MDE0OGItNzNiZS0z YTJmLWI1ODItNDEwMzMwMzMzMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjIxNDc5ZDktMjQzOC00MmMxLWFh NDYtZWFkMzVmMmQzM2UyL2YyMTQ3OWQ5LTI0MzgtNDJjMS1hYTQ2LWVhZDM1ZjJk MzNlMi5jcmwwHwYDVR0jBBgwFoAUot8lNxMZrmG8vbfexse1zbOr0GIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQz NWYyZDMzZTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQD0cxAAwQD 0cxwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAhAjX1Rz6hf9hpM+7MCBKt560wVhMQBvG136HTIS7R+M2Xj KhUt7vdfK5QQNlPDggwvGgy9TT86z+5IRwm7mxkP+O5DBQikeizymQJJufYcZlY0 +gCspPmw68E6qIgnEJNV658egLxaet6Zt01JYacxm1uacgatjjZjsv4l2rd/lUIf Im+DVEVD0IXWi4KMALyZpkj7CjclUj6AKjbxXh95cCWUJkWdkYSRrgW8KjGWG662 mfQW0jdOYAIVVjyHZc3kAp2QLR1B/c21G6cb/4K2IPeRVb85lMPGNiL15/6wOmM1 mMGCRfbBo3vAGubwzJ/rPWqPdIBqMC3sdn1TDdw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:37:02 2026 by rpki-client