$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa File: 2c800565-0350-3f92-96a1-5c4ba4fe455c.roa (raw, json) Hash identifier: TFzjGc4xgqEiuuQgzrL/D3saclqfdIMQ4T+JqV4zLdY= Subject key identifier: C7:52:4E:C7:42:09:6B:AD:FE:C6:5D:BF:8C:3F:BB:76:3E:9A:76:F5 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584C751C26C39FB5BC253247BCF0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 29889 IP address blocks: 209.9.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:26:c3:9f:b5:bc:25:32:47:bc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=b41364cf-8800-430a-8053-d010fba5ad01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:54:d4:76:38:9d:3e:21:b7:b0:c0:b9:03: c3:eb:56:d5:2d:bd:04:17:7e:56:04:72:91:8d:1d: bb:7d:cb:49:ae:64:2d:56:b5:3c:a0:3b:cd:e8:65: a9:d4:b9:67:b5:fe:c2:0e:40:30:5f:59:69:47:63: 3f:8e:c2:e9:5d:86:7e:8a:9c:d4:ef:99:5e:03:eb: 67:32:89:ff:5d:90:d6:a5:3f:c4:43:52:5b:9a:af: ac:b8:c2:27:69:9f:48:c2:9d:b0:99:8f:f9:ae:bc: ed:48:62:54:19:cf:2d:df:94:66:91:16:6c:71:bd: 33:f8:36:5a:c9:b3:d7:ba:ca:42:88:a7:90:fb:61: ff:6c:5b:63:b6:02:a8:fb:23:8a:ba:1b:8d:cc:96: ba:e9:1a:c3:25:a0:a8:f7:36:bc:15:3c:c9:52:12: 4b:39:1d:c5:05:08:8f:4a:c9:52:1f:7a:b0:ba:00: 3e:44:54:9f:9f:61:02:8e:8a:81:45:09:84:8a:be: 8f:e5:96:cc:fe:37:b3:8e:1d:d4:aa:81:c7:42:14: dd:b2:e9:39:37:bf:c8:20:be:5c:e3:b2:a2:ac:68: 3b:63:0a:d0:9a:0f:c2:eb:84:af:f7:0c:67:dd:8f: 03:7d:7a:5a:49:71:ce:33:0a:35:75:a7:36:92:6b: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:4E:C7:42:09:6B:AD:FE:C6:5D:BF:8C:3F:BB:76:3E:9A:76:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:11:59:75:f3:35:53:35:98:fb:43:c7:51:0d:d7:3f:f7:1d: b6:30:82:01:05:ad:1e:c3:c6:72:af:ff:2e:bb:84:cc:68:46: d4:b4:ac:35:38:c4:df:07:af:d4:a9:ca:b2:7d:ba:99:7e:f4: b7:d4:38:5c:61:2d:91:c5:58:cf:0e:e2:68:72:36:4c:78:db: fd:27:5c:7a:83:7e:70:f0:82:09:98:d9:5a:63:8d:7c:2c:c8: 49:6d:b6:fa:f5:a3:39:16:98:02:e3:85:a8:cf:6f:80:7b:7e: 86:c8:4b:ff:bf:b8:0c:1b:48:be:f4:53:53:04:96:6f:6d:63: bb:bc:dc:7b:3a:70:f5:9c:80:ab:02:d8:1e:8e:b8:84:09:46: 79:eb:18:31:2f:2d:f8:ce:6f:47:15:63:13:12:d5:2e:9e:70: 60:93:7b:96:17:1d:a8:06:e5:32:0b:92:a8:e3:2d:14:39:7f: 9c:fa:03:76:dc:17:13:fd:a1:18:18:58:52:17:f3:bb:fd:e1: ac:2c:91:a1:cb:15:4c:b9:3e:b9:e0:02:31:50:ed:05:0c:0e: d7:be:e8:14:d4:1b:70:62:b3:49:32:45:d9:0a:f4:a2:7e:e8: bf:eb:2b:4e:e2:91:38:6e:35:44:a3:d4:8b:95:42:a8:c6:06: 54:57:6e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HCbDn7W8JTJHvPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk YjQxMzY0Y2YtODgwMC00MzBhLTgwNTMtZDAxMGZiYTVhZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/pU1HY4nT4ht7DAuQPD61bVLb0EF35WBHKR jR27fctJrmQtVrU8oDvN6GWp1Llntf7CDkAwX1lpR2M/jsLpXYZ+ipzU75leA+tn Mon/XZDWpT/EQ1Jbmq+suMInaZ9Iwp2wmY/5rrztSGJUGc8t35RmkRZscb0z+DZa ybPXuspCiKeQ+2H/bFtjtgKo+yOKuhuNzJa66RrDJaCo9za8FTzJUhJLOR3FBQiP SslSH3qwugA+RFSfn2ECjoqBRQmEir6P5ZbM/jezjh3UqoHHQhTdsuk5N7/IIL5c 47KirGg7YwrQmg/C64Sv9wxn3Y8DfXpaSXHOMwo1dac2kmuDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdSTsdCCWut/sZdv4w/u3Y+mnb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmM4MDA1NjUtMDM1MC0z ZjkyLTk2YTEtNWM0YmE0ZmU0NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoRWXXzNVM1mPtDx1EN1z/3HbYwggEFrR7DxnKv/y67hMxoRtS0rDU4 xN8Hr9SpyrJ9upl+9LfUOFxhLZHFWM8O4mhyNkx42/0nXHqDfnDwggmY2VpjjXws yElttvr1ozkWmALjhajPb4B7fobIS/+/uAwbSL70U1MElm9tY7u83Hs6cPWcgKsC 2B6OuIQJRnnrGDEvLfjOb0cVYxMS1S6ecGCTe5YXHagG5TILkqjjLRQ5f5z6A3bc FxP9oRgYWFIX87v94awskaHLFUy5PrngAjFQ7QUMDte+6BTUG3Bis0kyRdkK9KJ+ 6L/rK07ikThuNUSj1IuVQqjGBlRXbnE= -----END CERTIFICATE-----Generated at Thu Feb 26 06:35:22 2026 by rpki-client