$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa File: a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json) Hash identifier: H9Zlik4XyCBl23u6bXB5c410jmfHXpF16fq4j0a75a4= Subject key identifier: E7:F9:79:83:B9:EC:1D:02:62:A6:34:F5:BA:EA:D7:80:CD:B9:B9:0C Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584CE4C776096E1DF9C717560E58 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 14369 IP address blocks: 209.173.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:76:09:6e:1d:f9:c7:17:56:0e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=2f10fb22-0796-48bb-a3f4-7b763084612d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:8c:2f:a8:1f:63:5a:28:67:8b:d0:50:4c: 46:c5:b0:14:c0:89:0f:35:84:22:6c:0c:c6:90:74: 6a:81:a9:71:75:83:b8:b2:18:54:58:9a:76:4f:cb: fc:9f:e1:35:ed:9e:84:5e:55:8b:d3:f7:77:1d:5f: 77:d3:8f:ad:3e:36:ca:4b:7f:66:a4:91:31:79:f8: e6:63:c5:c3:df:a0:a1:19:0b:41:3d:d2:3e:8f:ae: b3:3c:e8:09:b3:f7:bf:20:db:1c:58:09:67:01:dd: db:36:08:b9:0b:ff:1b:85:50:de:fe:c6:e1:87:b3: ef:e0:55:f1:fa:15:93:48:c2:56:47:72:69:7b:e2: 53:47:f1:ec:2f:3f:6e:6a:a4:ef:1a:1a:23:6d:d3: 0e:f8:a0:d3:40:29:56:0e:fc:a0:61:f0:f8:bc:91: 13:69:17:b9:75:c0:e8:39:bf:8e:85:3c:a2:45:57: ff:0a:c1:41:08:8b:cb:50:39:5f:fe:ee:1a:08:dd: 66:f4:76:de:bb:19:bb:d1:41:90:13:5b:98:e6:f3: 1c:0d:80:39:c4:4d:22:a7:da:7b:5a:56:d7:7f:df: 65:c0:a7:12:72:e4:16:9e:b9:4f:33:05:68:6e:30: 24:ac:79:a8:8d:09:a3:6e:fa:1e:9f:dd:fa:2f:4c: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:79:83:B9:EC:1D:02:62:A6:34:F5:BA:EA:D7:80:CD:B9:B9:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.173.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d3:98:48:5c:21:05:37:6c:67:dc:0c:8c:50:8c:9f:e9:1b: 2c:b2:2c:98:1d:00:2b:d8:6f:ec:5d:97:20:68:8b:6f:8c:71: 7d:d2:91:dc:97:6c:c2:1b:28:44:40:27:28:f5:7c:1e:6a:73: 8a:50:f5:11:d2:1f:21:af:c2:53:e3:34:26:57:38:9d:b9:65: f4:11:a2:e8:d7:3a:81:85:65:38:9d:e1:e2:26:ee:0c:89:a8: a8:3f:81:e0:e6:ff:76:24:7e:73:18:cd:1c:af:c7:02:ab:bc: ec:23:95:15:7d:75:81:6c:07:87:9b:d7:11:77:b9:51:63:a9: 02:8a:2b:9a:a7:48:c3:0d:8b:51:30:07:cd:fe:ab:0c:91:6c: 5c:0d:64:5a:1e:b7:05:7f:ef:6e:33:2b:20:b3:5e:0f:ce:dc: 0e:2f:eb:53:df:62:a5:13:bf:75:ff:72:90:1d:d0:ca:fb:da: 4c:fb:94:f6:7f:6c:6b:6d:d8:4a:f4:79:07:97:da:ca:a1:60: ae:00:55:89:04:04:76:14:13:20:43:ad:9c:76:c4:50:7c:18: 91:b3:f1:d8:97:50:02:57:61:c0:e2:14:63:e8:55:e3:36:eb: bc:84:71:8c:2d:0d:1c:c0:06:54:7c:37:50:6f:f9:27:5b:26: de:3b:d1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkx3YJbh35xxdWDlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk MmYxMGZiMjItMDc5Ni00OGJiLWEzZjQtN2I3NjMwODQ2MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoaML6gfY1ooZ4vQUExGxbAUwIkPNYQibAzG kHRqgalxdYO4shhUWJp2T8v8n+E17Z6EXlWL0/d3HV9304+tPjbKS39mpJExefjm Y8XD36ChGQtBPdI+j66zPOgJs/e/INscWAlnAd3bNgi5C/8bhVDe/sbhh7Pv4FXx +hWTSMJWR3Jpe+JTR/HsLz9uaqTvGhojbdMO+KDTQClWDvygYfD4vJETaRe5dcDo Ob+OhTyiRVf/CsFBCIvLUDlf/u4aCN1m9Hbeuxm70UGQE1uY5vMcDYA5xE0ip9p7 WlbXf99lwKcScuQWnrlPMwVobjAkrHmojQmjbvoen936L0z23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf5eYO57B0CYqY09brq14DNubkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYTUwMmI0MzItMTYzMi0z OTQwLTg3MmYtY2QyNGVlN2U5MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnTmEhcIQU3bGfcDIxQjJ/pGyyyLJgdACvYb+xdlyBoi2+McX3SkdyX bMIbKERAJyj1fB5qc4pQ9RHSHyGvwlPjNCZXOJ25ZfQRoujXOoGFZTid4eIm7gyJ qKg/geDm/3YkfnMYzRyvxwKrvOwjlRV9dYFsB4eb1xF3uVFjqQKKK5qnSMMNi1Ew B83+qwyRbFwNZFoetwV/724zKyCzXg/O3A4v61PfYqUTv3X/cpAd0Mr72kz7lPZ/ bGtt2Er0eQeX2sqhYK4AVYkEBHYUEyBDrZx2xFB8GJGz8diXUAJXYcDiFGPoVeM2 67yEcYwtDRzABlR8N1Bv+SdbJt470Rk= -----END CERTIFICATE-----Generated at Thu Feb 26 21:39:33 2026 by rpki-client