$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json) Hash identifier: 9JCjO4+apqnWk5r94tmNpPNkib3vXz99Esi4dTS3878= Subject key identifier: A8:A9:72:17:8A:C6:4B:B4:D5:10:43:D0:E6:0B:E1:C5:6A:57:66:D5 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584CF9B78A307920561537E63F00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 398420 IP address blocks: 208.89.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:8a:30:79:20:56:15:37:e6:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=279620dd-c509-4e2e-83a8-74022f5a148e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:3a:3b:5c:cc:5a:65:b4:5c:d7:c8:b8:05: 98:0d:ab:db:a5:9c:f7:e0:0a:60:71:85:fe:da:d8: 0e:b6:b6:f7:57:a7:99:8a:d0:82:af:69:69:1e:40: 3c:67:9a:e3:11:0b:89:8c:69:7f:80:14:31:94:b1: 66:a7:d5:42:79:b7:39:1a:4e:a7:42:3c:77:43:1a: b4:39:b7:83:ad:56:48:ff:31:c7:3b:a5:09:0b:b0: 37:6c:e2:80:ea:97:15:e0:28:02:f6:4e:cb:f8:bd: 02:9d:22:31:d4:ba:95:71:00:8a:1b:66:02:77:06: aa:14:3f:d0:02:c6:6f:37:f7:14:eb:c5:40:44:7a: c0:35:de:b9:18:dc:7d:c3:e3:ef:dd:d9:10:ba:dc: dd:5c:6c:5e:02:79:61:d7:67:6c:23:60:3c:b6:b9: 39:eb:25:84:7b:81:92:d5:f1:11:da:ae:74:fc:62: c7:3c:6f:fb:f7:c0:ec:58:45:c1:49:d7:cc:20:bf: f3:92:5e:e0:6e:30:a8:b9:34:3a:86:a4:a7:81:d7: a5:94:cd:9e:b1:81:f4:ef:5f:14:55:c6:e0:a2:47: 54:ad:8b:9a:6b:96:05:56:e0:14:4b:e6:8b:d9:fb: 77:d5:cb:a5:63:a2:40:1d:fc:16:e0:0a:08:0e:57: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A9:72:17:8A:C6:4B:B4:D5:10:43:D0:E6:0B:E1:C5:6A:57:66:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:09:e3:df:35:18:b9:49:bd:be:ba:8e:82:06:90:84:7c:b3: 08:d0:3d:f1:ea:7b:6f:5f:85:29:a4:c5:ec:a7:a0:14:d5:ec: 84:0a:a1:5f:0d:d3:30:16:c0:3b:9d:a9:60:33:c5:54:c0:42: 31:10:80:97:d2:04:e4:64:8c:63:0d:ec:01:7e:dc:b0:53:d9: 81:4a:b8:67:0d:3c:1e:ac:a5:a8:09:14:80:9e:36:66:61:0e: d4:45:ae:73:14:0a:1a:0a:07:81:03:03:2b:73:39:d8:f7:ad: 0b:6c:71:e3:79:d2:a9:9e:0d:1d:64:d2:bd:57:85:99:ef:b6: e7:db:45:12:f4:b2:14:57:8f:f1:7b:22:86:2c:ff:1c:14:77: 7b:f4:f2:13:d9:c5:7f:79:3a:bf:5a:0a:58:67:ff:86:3e:ef: b4:5c:6a:0c:e3:36:87:04:a1:16:9d:a5:8b:85:0d:35:2f:6a: 89:36:0e:b9:08:cf:b1:dd:9c:d4:ff:d3:80:b5:88:dc:01:24: 08:39:c1:24:e9:c6:1a:d9:20:4b:10:ed:8c:6a:ee:d9:da:17: 7e:33:18:1c:5d:03:52:f6:05:a1:90:58:ec:d2:02:d1:0c:da: 5b:6b:0d:61:4d:11:45:d3:a1:05:e8:0a:bc:c6:fa:90:3d:ef: c4:e8:5e:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4oweSBWFTfmPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk Mjc5NjIwZGQtYzUwOS00ZTJlLTgzYTgtNzQwMjJmNWExNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7A6O1zMWmW0XNfIuAWYDavbpZz34ApgcYX+ 2tgOtrb3V6eZitCCr2lpHkA8Z5rjEQuJjGl/gBQxlLFmp9VCebc5Gk6nQjx3Qxq0 ObeDrVZI/zHHO6UJC7A3bOKA6pcV4CgC9k7L+L0CnSIx1LqVcQCKG2YCdwaqFD/Q AsZvN/cU68VARHrANd65GNx9w+Pv3dkQutzdXGxeAnlh12dsI2A8trk56yWEe4GS 1fER2q50/GLHPG/798DsWEXBSdfMIL/zkl7gbjCouTQ6hqSngdellM2esYH0718U VcbgokdUrYuaa5YFVuAUS+aL2ft31culY6JAHfwW4AoIDld37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKipcheKxku01RBD0OYL4cVqV2bVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTA3YmQ4NjktNmE5Ni0z Y2RmLWIzZTMtMjlhNjJlYTkwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMJ4981GLlJvb66joIGkIR8swjQPfHqe29fhSmkxeynoBTV7IQKoV8N 0zAWwDudqWAzxVTAQjEQgJfSBORkjGMN7AF+3LBT2YFKuGcNPB6spagJFICeNmZh DtRFrnMUChoKB4EDAytzOdj3rQtsceN50qmeDR1k0r1XhZnvtufbRRL0shRXj/F7 IoYs/xwUd3v08hPZxX95Or9aClhn/4Y+77RcagzjNocEoRadpYuFDTUvaok2DrkI z7HdnNT/04C1iNwBJAg5wSTpxhrZIEsQ7Yxq7tnaF34zGBxdA1L2BaGQWOzSAtEM 2ltrDWFNEUXToQXoCrzG+pA978ToXkU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:25 2026 by rpki-client