$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa File: 8ac69690-c3b8-3bba-82fc-102f743b397b.roa (raw, json) Hash identifier: F8uFJSbg4DpDX9IrlmzU4RUkL/gynIvnZCXVg76XSu4= Subject key identifier: 06:EA:73:46:47:84:11:B9:3F:CF:36:8B:B7:65:57:C9:89:13:3B:0F Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584C751C269FE0B0A608BB4D2A00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 136448 IP address blocks: 209.9.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:26:9f:e0:b0:a6:08:bb:4d:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=c796895a-081f-48e4-8846-81485c451b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:66:c6:b1:68:ab:77:e2:52:4f:20:47:b9: 42:62:c3:70:e6:dc:52:a7:30:41:6d:07:46:50:47: d4:45:52:a5:f7:7d:7a:96:d1:e6:61:12:46:af:67: 5f:93:4d:d1:01:09:5c:70:90:b0:f5:97:ab:e4:0f: bc:0e:9c:b2:ee:84:c6:3e:d9:8f:12:78:dd:43:3c: b4:98:a2:ee:b4:63:0c:57:f1:bc:c2:c6:59:5d:26: d7:6c:94:75:eb:d8:22:4b:1f:43:9a:83:71:1d:0d: 9c:94:6f:10:65:2b:bb:9d:e4:79:ea:03:ff:aa:a2: d8:20:41:34:bb:c5:45:ef:9f:bd:6a:6b:94:f8:0d: f1:b7:d8:88:2a:7e:f9:62:0a:90:ac:19:fd:7f:f8: 77:64:ba:5c:82:72:df:5b:1b:09:52:9c:ef:31:c0: d6:f5:27:29:35:3e:1d:8f:74:7a:b6:48:da:a1:e3: bb:26:3e:45:24:c4:e6:cc:c3:0f:50:14:42:cc:c6: 00:c2:fa:3b:fc:af:a0:39:95:5f:ed:15:e5:6d:ba: 5c:b1:49:74:2f:8e:e7:4c:b6:0c:30:f1:08:c6:44: b5:86:17:d0:bc:6c:1d:82:70:4b:9d:76:2a:eb:13: b6:29:35:f1:c1:36:fc:4e:fd:0d:c7:72:77:87:2b: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EA:73:46:47:84:11:B9:3F:CF:36:8B:B7:65:57:C9:89:13:3B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:33:54:8a:ad:2d:cf:ce:5e:f2:46:68:6d:5a:f4:06:6b:5b: f4:ed:3d:9e:a1:cc:02:4f:0a:92:01:b2:fb:a6:95:83:70:23: 7e:df:f2:b0:1e:62:d6:62:0d:7d:c1:93:3f:ad:4b:05:2f:81: b5:a7:2e:95:fd:8b:13:72:d4:f1:ab:af:50:82:c7:5e:99:d8: a9:09:7a:ea:64:49:7c:48:61:7d:fb:3c:6d:27:55:53:2b:fd: c3:f8:83:20:9f:8f:8c:4c:32:6c:f1:8c:51:14:85:91:e8:92: a8:0d:ff:71:81:89:b5:39:e8:78:97:89:38:a9:3e:3b:55:69: 96:71:05:92:6a:e0:4c:1f:1f:68:16:8a:08:3d:0f:69:f5:f4: 28:ce:b7:55:c4:b2:e8:06:6b:87:df:cf:6d:37:ed:f3:36:3a: 80:22:82:ee:2b:70:c7:d2:e1:41:9d:d3:46:c0:26:af:b2:00: 74:c5:4c:46:3d:d5:9e:4b:03:e9:f3:28:f3:0d:d4:8d:0b:9f: d0:4c:d1:dc:92:a7:25:63:1a:63:53:ba:4f:0c:0b:10:86:e7: 8f:fa:c7:a6:15:8b:8a:2b:2e:c0:1f:e2:fc:04:e2:a0:3b:7c: 26:3e:db:37:8b:0d:8d:25:38:d2:ec:2e:bb:00:52:b6:32:44: 4d:54:d8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HCaf4LCmCLtNKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk Yzc5Njg5NWEtMDgxZi00OGU0LTg4NDYtODE0ODVjNDUxYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuxmxrFoq3fiUk8gR7lCYsNw5txSpzBBbQdG UEfURVKl9316ltHmYRJGr2dfk03RAQlccJCw9Zer5A+8Dpyy7oTGPtmPEnjdQzy0 mKLutGMMV/G8wsZZXSbXbJR169giSx9DmoNxHQ2clG8QZSu7neR56gP/qqLYIEE0 u8VF75+9amuU+A3xt9iIKn75YgqQrBn9f/h3ZLpcgnLfWxsJUpzvMcDW9ScpNT4d j3R6tkjaoeO7Jj5FJMTmzMMPUBRCzMYAwvo7/K+gOZVf7RXlbbpcsUl0L47nTLYM MPEIxkS1hhfQvGwdgnBLnXYq6xO2KTXxwTb8Tv0Nx3J3hyvRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbqc0ZHhBG5P882i7dlV8mJEzsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGFjNjk2OTAtYzNiOC0z YmJhLTgyZmMtMTAyZjc0M2IzOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8zVIqtLc/OXvJGaG1a9AZrW/TtPZ6hzAJPCpIBsvumlYNwI37f8rAe YtZiDX3Bkz+tSwUvgbWnLpX9ixNy1PGrr1CCx16Z2KkJeupkSXxIYX37PG0nVVMr /cP4gyCfj4xMMmzxjFEUhZHokqgN/3GBibU56HiXiTipPjtVaZZxBZJq4EwfH2gW igg9D2n19CjOt1XEsugGa4ffz2037fM2OoAigu4rcMfS4UGd00bAJq+yAHTFTEY9 1Z5LA+nzKPMN1I0Ln9BM0dySpyVjGmNTuk8MCxCG54/6x6YVi4orLsAf4vwE4qA7 fCY+2zeLDY0lONLsLrsAUrYyRE1U2PI= -----END CERTIFICATE-----Generated at Thu Feb 26 06:35:18 2026 by rpki-client