$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa File: 2c199e06-0061-3f8d-8062-186a6d89c327.roa (raw, json) Hash identifier: Fn3fSfiz2c8c7gY/Pcy2CB58uXoa+lYE2fQv8rru9PI= Subject key identifier: 46:12:30:57:01:46:04:FE:DF:D1:63:B8:47:28:AA:D7:30:D5:50:0E Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584C7D7C555FF6B2551031064C80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 17057 IP address blocks: 209.8.5.0/24 maxlen: 24 209.8.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:55:5f:f6:b2:55:10:31:06:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=4503a02c-a76b-4d60-99a1-face5dac551a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:dc:66:47:1e:98:36:f0:bc:47:db:51:ac: d8:9f:6d:d2:83:6c:26:0c:33:3d:78:a9:6b:08:27: fb:aa:00:a7:b8:98:84:64:9e:24:3e:52:c5:86:33: 76:5b:98:33:a0:60:9e:f8:e3:7b:1e:bb:8c:07:da: 70:68:19:5c:94:78:ac:06:d6:be:b3:65:8b:51:f4: ba:00:d0:83:58:e5:8b:e9:27:34:58:4d:63:b7:98: 60:0b:8c:51:6c:93:7f:bf:ad:28:81:f3:42:67:64: 95:16:df:65:15:a9:c2:8a:03:cb:f7:69:74:33:58: 94:eb:e2:20:fb:3d:89:d0:48:61:03:6e:40:77:2f: 3a:ac:fd:e1:eb:36:11:14:88:98:e1:69:f7:74:00: cc:6a:3f:64:d9:59:85:cf:73:fb:cb:e5:cb:47:92: a3:1a:91:50:1c:74:22:d3:9d:8e:ca:5a:a3:bb:43: b6:7f:21:76:0a:39:b8:ce:ad:4c:3a:ea:8a:e1:20: c9:37:98:22:30:ef:c8:50:b9:f1:c9:34:7c:6d:d5: 9d:19:87:cb:15:96:be:f9:5c:29:5a:04:30:46:f0: 10:2b:d7:0a:d2:25:2e:ef:01:18:2a:96:21:f9:33: 46:35:d2:82:d3:31:82:0b:fe:d8:31:28:02:8b:63: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:30:57:01:46:04:FE:DF:D1:63:B8:47:28:AA:D7:30:D5:50:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.5.0/24 209.8.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a8:fd:9e:b0:c6:4d:73:7a:7a:27:a7:e2:8d:c2:56:d5:be: 3d:c4:7c:aa:d6:6d:3d:b2:15:4f:77:9c:d6:ed:db:18:9e:40: fa:2a:fa:bd:ec:f1:a6:0a:0c:c5:97:90:3b:af:53:8a:5e:66: af:5d:6a:55:f9:cb:56:0d:26:87:d4:81:ad:07:d6:59:95:ea: e3:f3:9c:fa:40:f4:5d:7d:b2:42:33:90:8e:b7:76:8a:5d:63: 80:52:64:ec:81:ba:5d:67:55:e4:4e:32:04:11:00:af:f3:58: ed:9b:7c:38:73:d1:a0:13:3a:1d:dd:31:82:c0:ea:8a:39:39: 4b:f7:77:ed:5e:2b:ec:91:27:6e:6e:5f:ba:a5:b1:c0:5e:ab: 7d:26:69:92:bb:53:dd:20:26:8a:7c:eb:1b:98:d2:84:a3:a6: 3a:e6:f4:60:b8:a6:c9:a3:06:52:44:83:ac:a3:d5:e0:66:9d: cc:4c:2b:73:72:75:05:92:da:63:75:3a:e6:88:51:a0:01:87: 67:94:7f:b2:ab:17:27:d2:64:26:f2:e0:04:be:65:6a:57:43: 57:58:1f:6f:3b:ce:88:29:36:4d:8c:43:97:85:02:b3:53:f2: fb:e9:9d:3c:e1:b2:de:ca:af:4d:d7:f3:b9:8d:9a:f5:0e:6d: f8:4e:38:3d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEx9fFVf9rJVEDEGTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk NDUwM2EwMmMtYTc2Yi00ZDYwLTk5YTEtZmFjZTVkYWM1NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnvcZkcemDbwvEfbUazYn23Sg2wmDDM9eKlr CCf7qgCnuJiEZJ4kPlLFhjN2W5gzoGCe+ON7HruMB9pwaBlclHisBta+s2WLUfS6 ANCDWOWL6Sc0WE1jt5hgC4xRbJN/v60ogfNCZ2SVFt9lFanCigPL92l0M1iU6+Ig +z2J0EhhA25Ady86rP3h6zYRFIiY4Wn3dADMaj9k2VmFz3P7y+XLR5KjGpFQHHQi 052Oylqju0O2fyF2Cjm4zq1MOuqK4SDJN5giMO/IULnxyTR8bdWdGYfLFZa++Vwp WgQwRvAQK9cK0iUu7wEYKpYh+TNGNdKC0zGCC/7YMSgCi2OkOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEYSMFcBRgT+39FjuEcoqtcw1VAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmMxOTllMDYtMDA2MS0z ZjhkLTgwNjItMTg2YTZkODljMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QgFAwQA 0QgHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA6o/Z6wxk1zenonp+KNwlbVvj3EfKrWbT2yFU93nNbt2xie QPoq+r3s8aYKDMWXkDuvU4peZq9dalX5y1YNJofUga0H1lmV6uPznPpA9F19skIz kI63dopdY4BSZOyBul1nVeROMgQRAK/zWO2bfDhz0aATOh3dMYLA6oo5OUv3d+1e K+yRJ25uX7qlscBeq30maZK7U90gJop86xuY0oSjpjrm9GC4psmjBlJEg6yj1eBm ncxMK3NydQWS2mN1OuaIUaABh2eUf7KrFyfSZCby4AS+ZWpXQ1dYH287zogpNk2M Q5eFArNT8vvpnTzhst7Kr03X87mNmvUObfhOOD0= -----END CERTIFICATE-----Generated at Thu Feb 26 06:35:24 2026 by rpki-client