$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f8e491a-a51d-32bf-b35a-268496e5be98.roa File: 0f8e491a-a51d-32bf-b35a-268496e5be98.roa (raw, json) Hash identifier: F3+A4turAiiHlMwA+H8h9GmGKbR+1mqjX36bM2lmz/k= Subject key identifier: C9:B5:9F:B8:65:7B:B6:A3:15:7C:A0:6E:19:6A:17:02:D0:6E:1B:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D09126E0ED3D6FC9985298080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f8e491a-a51d-32bf-b35a-268496e5be98.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 32787 IP address blocks: 209.200.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6e:0e:d3:d6:fc:99:85:29:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=6f1cdb91-7e68-48ba-8fec-363f2672f80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:63:d4:0e:85:b0:a3:81:ca:f7:b0:a4:36: f4:c6:73:1d:45:52:8a:97:58:81:3a:46:03:09:4b: fd:25:e9:3a:dd:48:3c:56:80:28:3c:2c:39:f1:3d: 54:52:a5:61:f2:e7:67:2c:a6:6d:13:54:e3:65:4f: 42:ff:c5:c3:37:4b:55:de:e3:fc:4f:94:cd:d2:3b: 5d:92:1a:12:42:b7:30:1e:b8:f3:e0:24:15:42:a2: 7c:b1:59:34:ff:1a:6b:6e:43:2f:90:a6:54:7b:b7: 9d:98:78:c1:f3:15:6c:2a:75:f6:89:05:c2:40:ea: b7:ad:00:52:39:51:e8:42:f7:fb:b1:c4:5f:e5:67: 1e:ef:ec:25:79:34:95:59:f1:24:30:9e:dd:79:e3: 37:84:d2:67:b8:00:2d:d8:15:6d:0a:76:8e:52:4a: 3a:ff:be:ed:db:f1:9d:64:09:37:32:c7:3e:01:f0: 56:2d:49:3f:55:c7:06:4e:a7:4c:01:64:7c:82:8a: 6d:24:e1:c6:cf:fe:ae:b2:38:c6:29:76:82:df:51: e8:bf:b2:bd:56:a4:c9:c6:cd:41:c5:fd:ae:2b:d8: 1c:5f:9a:df:39:89:f8:86:a6:9c:fa:d9:a0:52:71: e0:72:dd:0c:ec:69:0d:f9:c0:07:9b:fc:df:47:02: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B5:9F:B8:65:7B:B6:A3:15:7C:A0:6E:19:6A:17:02:D0:6E:1B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f8e491a-a51d-32bf-b35a-268496e5be98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c4:48:a1:b8:86:c4:e1:0f:85:26:3b:cf:59:4b:bf:f1:1e: 63:da:2a:b0:c1:ed:51:41:3a:8a:9e:43:a5:e6:d0:99:4f:d0: ed:82:1f:d5:47:72:53:cd:4f:8f:a3:21:95:c2:97:ca:32:36: 21:10:fd:e9:f3:65:09:6c:22:e5:98:89:5f:35:ae:4b:86:6e: 98:e3:60:a3:34:8a:67:a6:41:25:05:09:63:72:aa:4b:2f:9a: de:80:27:37:c4:38:d2:94:e0:2e:76:fd:72:cd:65:ed:6a:f9: 58:56:d1:2c:24:ab:fa:52:4e:5d:3a:e7:dc:08:22:59:d8:22: d5:ca:94:23:3a:71:97:c6:b3:a1:dc:bc:7c:6c:78:fe:d5:81: bc:97:82:fe:95:80:94:10:8d:5b:a4:9f:bd:ab:e3:51:4a:bf: 57:bd:a1:45:ac:1b:f5:cb:6c:cd:f9:b2:86:31:22:af:f5:c4: 43:e0:e6:dc:14:91:72:36:f2:3d:a1:4c:26:3a:8f:2f:20:c5: 5d:24:0e:8f:9c:a7:fa:87:20:f8:bd:b3:71:34:64:8d:c1:71: 5e:b2:4f:f5:d3:d6:df:9f:2b:e0:ad:5e:fe:65:8b:22:2d:de: 0a:c9:92:8e:fc:13:d7:a7:3e:72:01:53:5e:e4:53:cf:5c:46: cf:5c:15:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEm4O09b8mYUpgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NmYxY2RiOTEtN2U2OC00OGJhLThmZWMtMzYzZjI2NzJmODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvRj1A6FsKOByvewpDb0xnMdRVKKl1iBOkYD CUv9Jek63Ug8VoAoPCw58T1UUqVh8udnLKZtE1TjZU9C/8XDN0tV3uP8T5TN0jtd khoSQrcwHrjz4CQVQqJ8sVk0/xprbkMvkKZUe7edmHjB8xVsKnX2iQXCQOq3rQBS OVHoQvf7scRf5Wce7+wleTSVWfEkMJ7deeM3hNJnuAAt2BVtCnaOUko6/77t2/Gd ZAk3Msc+AfBWLUk/VccGTqdMAWR8goptJOHGz/6usjjGKXaC31Hov7K9VqTJxs1B xf2uK9gcX5rfOYn4hqac+tmgUnHgct0M7GkN+cAHm/zfRwJZNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm1n7hle7ajFXygbhlqFwLQbhsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY4ZTQ5MWEtYTUxZC0z MmJmLWIzNWEtMjY4NDk2ZTViZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/ESKG4hsThD4UmO89ZS7/xHmPaKrDB7VFBOoqeQ6Xm0JlP0O2CH9VH clPNT4+jIZXCl8oyNiEQ/enzZQlsIuWYiV81rkuGbpjjYKM0imemQSUFCWNyqksv mt6AJzfEONKU4C52/XLNZe1q+VhW0Swkq/pSTl0659wIIlnYItXKlCM6cZfGs6Hc vHxseP7VgbyXgv6VgJQQjVukn72r41FKv1e9oUWsG/XLbM35soYxIq/1xEPg5twU kXI28j2hTCY6jy8gxV0kDo+cp/qHIPi9s3E0ZI3BcV6yT/XT1t+fK+CtXv5liyIt 3grJko78E9enPnIBU17kU89cRs9cFaI= -----END CERTIFICATE-----Generated at Sat Mar 7 13:32:20 2026 by rpki-client