$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa File: 89909fdf-6692-3e87-bf0b-54e01c820bc1.roa (raw, json) Hash identifier: 5j1gXsCeW7HkLvy6GyKABZOLyI9YE8a7u2cAP5ShwWI= Subject key identifier: 13:04:66:EC:81:6B:73:58:02:6F:F8:39:44:38:F1:B3:DB:6B:DF:4F Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584C76816F750C5F08F136D72180 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 135391 IP address blocks: 206.161.232.0/24 maxlen: 24 206.161.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:6f:75:0c:5f:08:f1:36:d7:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=20ee3299-95b4-4db4-9688-6af532531671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:ea:b1:b3:df:df:85:be:bc:1d:78:84:11: bf:10:99:0f:1e:d6:0b:a2:3a:5a:89:ce:d1:e0:5a: c0:6a:84:be:90:fe:8a:ef:af:9c:3b:7f:60:df:2c: 89:3b:56:1f:79:41:1b:8c:82:74:2f:72:59:0b:dc: 1b:1d:ff:48:b6:a4:6d:d3:18:10:ef:0d:e0:92:0f: 51:dc:e5:bc:09:f1:08:c4:ee:99:1e:7f:f8:b6:d6: 54:0e:a4:f7:a5:99:ca:ef:04:0f:d0:e0:4f:f2:46: 0c:01:bb:ec:ad:b9:e2:a8:d6:4d:dd:41:7c:63:1d: 74:48:9e:43:8f:eb:ad:34:62:ac:51:07:be:ec:65: ba:c9:d1:6b:65:e7:36:55:f1:e5:a8:42:b4:76:ce: 29:a4:a5:d9:66:d1:72:c0:1f:bf:e0:71:9d:50:3a: 19:43:ea:dd:e0:a8:a8:68:f9:85:7e:8c:84:69:c3: 3d:a3:d0:79:d5:f6:c7:c0:e5:ae:fd:b4:54:a7:8a: 4b:d2:a1:ac:eb:b7:b7:69:86:0b:b0:e7:d6:c3:96: e9:90:44:e8:af:79:15:c6:39:5e:1d:a9:5e:36:3f: 64:79:9f:d9:8e:cd:f9:14:11:ab:61:32:1e:fe:ad: 53:ba:25:88:cd:61:63:c1:02:29:ab:cf:75:6f:fd: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:04:66:EC:81:6B:73:58:02:6F:F8:39:44:38:F1:B3:DB:6B:DF:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.232.0/24 206.161.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:53:bd:d0:70:df:7f:ac:15:76:95:fd:3f:82:46:12:bb:37: 20:91:c9:67:a4:a7:f9:3c:99:89:3d:56:2c:ed:fe:fe:09:28: 1c:66:16:c8:cc:a4:9e:55:4b:7a:44:4b:a9:75:47:7f:3c:12: f8:ff:e1:6c:97:ef:7e:6e:78:53:41:7d:2e:91:0b:3e:50:e6: 96:fd:db:59:b4:7a:f8:7e:c0:dd:07:4c:4c:42:dd:fb:a6:af: 5e:97:04:6f:7d:ea:87:4c:dc:77:c3:f1:a0:9c:7d:a1:b5:a8: 30:97:96:cb:d7:1b:3e:15:ad:ff:59:9a:37:0a:5b:ff:51:31: 45:0f:87:14:a9:30:fc:d6:6b:28:f3:5e:b0:54:85:ee:22:e1: 9f:ee:31:33:8d:30:ae:69:fa:79:89:9d:5a:41:4e:b9:20:d0: 42:3f:c0:7b:c1:f5:b9:e4:6e:9d:eb:3b:f2:00:9f:c4:ba:c1: fe:ae:88:57:e9:c3:af:2e:61:94:03:e4:86:7d:ba:91:0a:37: 7b:10:94:66:6a:d5:60:33:9c:27:32:07:f0:d8:a9:50:29:57: 1a:b8:3f:f6:ba:ea:0e:37:b2:2d:41:57:c4:25:d2:c3:bc:21: ca:2f:ab:2a:eb:a6:d2:ca:e7:c6:14:70:77:7a:ec:df:ac:bc: c3:87:49:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEx2gW91DF8I8TbXIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk MjBlZTMyOTktOTViNC00ZGI0LTk2ODgtNmFmNTMyNTMxNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/rqsbPf34W+vB14hBG/EJkPHtYLojpaic7R 4FrAaoS+kP6K76+cO39g3yyJO1YfeUEbjIJ0L3JZC9wbHf9ItqRt0xgQ7w3gkg9R 3OW8CfEIxO6ZHn/4ttZUDqT3pZnK7wQP0OBP8kYMAbvsrbniqNZN3UF8Yx10SJ5D j+utNGKsUQe+7GW6ydFrZec2VfHlqEK0ds4ppKXZZtFywB+/4HGdUDoZQ+rd4Kio aPmFfoyEacM9o9B51fbHwOWu/bRUp4pL0qGs67e3aYYLsOfWw5bpkETor3kVxjle HaleNj9keZ/Zjs35FBGrYTIe/q1TuiWIzWFjwQIpq891b/2fXQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBMEZuyBa3NYAm/4OUQ48bPba99PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvODk5MDlmZGYtNjY5Mi0z ZTg3LWJmMGItNTRlMDFjODIwYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqHoAwQA zqHqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIRTvdBw33+sFXaV/T+CRhK7NyCRyWekp/k8mYk9Vizt/v4J KBxmFsjMpJ5VS3pES6l1R388Evj/4WyX735ueFNBfS6RCz5Q5pb921m0evh+wN0H TExC3fumr16XBG996odM3HfD8aCcfaG1qDCXlsvXGz4Vrf9ZmjcKW/9RMUUPhxSp MPzWayjzXrBUhe4i4Z/uMTONMK5p+nmJnVpBTrkg0EI/wHvB9bnkbp3rO/IAn8S6 wf6uiFfpw68uYZQD5IZ9upEKN3sQlGZq1WAznCcyB/DYqVApVxq4P/a66g43si1B V8Ql0sO8IcovqyrrptLK58YUcHd67N+svMOHSSw= -----END CERTIFICATE-----Generated at Mon Feb 23 02:45:10 2026 by rpki-client