$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/820ab1af-90c5-325b-9fe4-b740882b85ef.roa File: 820ab1af-90c5-325b-9fe4-b740882b85ef.roa (raw, json) Hash identifier: Du/7u8GH08B9BgEhWuEA+p43zu09ddNV5x7BMW8E9UA= Subject key identifier: 69:37:39:6A:8F:C6:B1:C3:3F:4B:D5:54:3A:11:05:34:05:57:93:CA Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584CE1FCCD1CB8F384F31F6FE200 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/820ab1af-90c5-325b-9fe4-b740882b85ef.roa Signing time: Mon 16 Feb 2026 14:00:40 +0000 ROA not before: Mon 16 Feb 2026 14:00:40 +0000 ROA not after: Sun 17 May 2026 13:00:40 +0000 asID: 55185 IP address blocks: 209.87.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e1:fc:cd:1c:b8:f3:84:f3:1f:6f:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 16 14:00:40 2026 GMT Not After : May 17 13:00:40 2026 GMT Subject: CN=a78f28b3-ebe1-450a-8a8f-3553c541f0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:70:36:af:81:7c:8a:dd:12:81:7b:e8:86: 30:de:6e:1e:c3:59:69:5d:31:60:fe:7c:4b:02:61: 5a:ad:53:93:15:fc:fb:19:25:29:87:f4:25:a9:17: fc:0e:c2:a0:e8:6b:d5:6b:4e:86:b4:4f:ab:03:94: c3:98:24:93:fa:1f:e5:f7:84:6f:3d:d9:bd:8c:41: 8c:88:dc:59:fe:47:47:e8:c9:af:92:7d:54:aa:3f: e0:b4:c5:88:d6:07:03:71:6c:e2:a0:87:59:6b:c7: a4:73:10:6a:21:2c:6e:6a:5c:37:7e:29:dd:cc:94: 7b:5e:90:0c:e2:18:d6:49:4d:62:2c:7b:93:74:96: 8e:4b:b4:80:f7:41:9f:a9:f3:49:8b:e6:2c:44:be: 41:71:ed:e7:d6:52:42:76:5c:7f:fb:a2:5e:a5:77: 93:7a:13:77:6f:b0:c5:0e:56:a7:70:e3:94:33:c4: 44:05:23:0b:9e:c6:e5:ed:e0:37:a9:68:53:4b:41: 3e:3d:ac:85:86:e2:61:ba:78:75:64:30:26:c8:69: 3c:f8:62:2d:30:d1:ca:dd:b7:76:b5:ae:26:d0:63: 62:d4:07:c1:10:3b:3f:81:05:33:66:01:66:27:39: d4:a8:ed:56:23:1f:6d:a2:f7:58:87:ca:88:07:55: 7e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:39:6A:8F:C6:B1:C3:3F:4B:D5:54:3A:11:05:34:05:57:93:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/820ab1af-90c5-325b-9fe4-b740882b85ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:34:9d:95:3e:10:21:71:3c:d9:45:c8:ce:d5:9f:ff:b6:69: 50:34:3b:30:a6:b7:06:4e:a3:2e:dd:77:ba:42:9d:fc:f5:38: 29:e0:de:82:ba:bc:ab:2b:ce:51:f2:ad:e2:71:57:db:e1:f5: 4b:c2:2c:ae:1a:ec:bf:fa:e1:2d:c7:75:e6:7c:55:35:b6:8c: 93:99:44:36:d1:1d:c6:8d:04:6d:61:c3:00:92:e7:a3:42:71: a0:06:5f:38:ee:cd:60:0f:ce:9a:ac:67:3c:14:15:26:51:3b: 31:d2:c0:7b:a8:63:46:14:1f:02:77:4e:a4:eb:40:a7:e2:82: 17:6e:d2:42:9b:9f:06:39:bb:13:cc:cb:5f:b5:ab:f8:60:a7: 42:ae:ed:0b:75:31:ed:9f:d8:ec:be:a3:23:86:ca:ae:47:e0: cf:eb:39:05:9f:98:41:9e:bf:54:eb:c5:f0:e3:50:fa:56:1d: 0a:c9:cc:27:ef:59:0a:f0:c3:ed:75:51:91:4a:2c:10:f1:eb: 43:c9:0d:d8:b7:dc:e2:6c:9a:a5:fb:98:73:3c:07:72:13:39: 0e:8e:3f:e7:ee:20:f7:d6:46:58:0f:73:ba:5a:44:a4:50:9e: 38:17:0c:de:c9:0a:a6:11:97:25:ed:0d:f8:de:58:12:c0:d7: e2:04:e2:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/M0cuPOE8x9v4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk YTc4ZjI4YjMtZWJlMS00NTBhLThhOGYtMzU1M2M1NDFmMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m9wNq+BfIrdEoF76IYw3m4ew1lpXTFg/nxL AmFarVOTFfz7GSUph/QlqRf8DsKg6GvVa06GtE+rA5TDmCST+h/l94RvPdm9jEGM iNxZ/kdH6Mmvkn1Uqj/gtMWI1gcDcWzioIdZa8ekcxBqISxualw3findzJR7XpAM 4hjWSU1iLHuTdJaOS7SA90GfqfNJi+YsRL5Bce3n1lJCdlx/+6JepXeTehN3b7DF DlancOOUM8REBSMLnsbl7eA3qWhTS0E+PayFhuJhunh1ZDAmyGk8+GItMNHK3bd2 ta4m0GNi1AfBEDs/gQUzZgFmJznUqO1WIx9tovdYh8qIB1V+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGk3OWqPxrHDP0vVVDoRBTQFV5PKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODIwYWIxYWYtOTBjNS0z MjViLTlmZTQtYjc0MDg4MmI4NWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vc+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY0nZU+ECFxPNlFyM7Vn/+2aVA0OzCmtwZOoy7dd7pCnfz1OCng3oK6 vKsrzlHyreJxV9vh9UvCLK4a7L/64S3HdeZ8VTW2jJOZRDbRHcaNBG1hwwCS56NC caAGXzjuzWAPzpqsZzwUFSZROzHSwHuoY0YUHwJ3TqTrQKfighdu0kKbnwY5uxPM y1+1q/hgp0Ku7Qt1Me2f2Oy+oyOGyq5H4M/rOQWfmEGev1TrxfDjUPpWHQrJzCfv WQrww+11UZFKLBDx60PJDdi33OJsmqX7mHM8B3ITOQ6OP+fuIPfWRlgPc7paRKRQ njgXDN7JCqYRlyXtDfjeWBLA1+IE4iM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:53:03 2026 by rpki-client