$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa File: bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa (raw, json) Hash identifier: 62h9Fd+kO7gMKeETTZ83BrLPEM/JyuTEb5WceHsPzxE= Subject key identifier: FD:61:E3:5B:55:D6:B5:81:BD:5A:F8:F4:3F:A6:B5:76:1E:59:29:90 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584CCD0CB0E9B65BE02388E1A8C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 271 IP address blocks: 209.87.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:b0:e9:b6:5b:e0:23:88:e1:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=d18e7aae-cece-4670-aea6-feb5f13b3e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:cd:b0:6d:aa:9b:7e:3c:3b:f3:50:57:00: f4:c0:76:8f:b5:fb:0d:a8:ef:fa:7c:bf:85:9f:e0: 13:ab:e6:fa:c4:36:00:7b:c5:fa:5e:d0:29:9a:52: f1:37:50:15:09:da:7f:12:1b:40:8e:4a:b0:a3:7b: e7:de:53:2d:c8:41:ce:73:41:12:ba:d4:50:f2:ba: 4e:a9:3a:2b:dd:a7:98:51:47:6a:f0:2c:84:96:74: 6a:fb:80:47:7b:41:07:bc:c6:6f:3a:00:bd:25:54: fb:1a:17:73:b4:0f:8a:5d:38:c1:cb:32:15:5f:83: 8b:36:6b:ff:0c:69:13:e9:73:83:a8:54:08:16:ca: fc:88:92:b1:f0:b7:c5:ba:c9:c5:db:ac:82:88:b9: e4:18:65:51:3b:44:2f:7e:2b:a4:a9:3d:5f:4f:19: 4e:31:78:47:8c:7c:89:4a:63:ac:fa:c7:a7:c2:b8: 10:ac:58:b1:ed:72:79:4d:7f:a5:29:eb:4b:55:c7: c4:08:8c:f3:97:55:39:f1:bf:7e:b9:d1:0b:04:4e: 8e:b4:41:a2:91:d1:36:36:41:b0:d9:aa:83:f9:81: 53:ca:b3:79:c2:e4:a9:7d:0f:b0:53:f3:65:c1:e5: 65:0c:4b:db:da:e8:a1:9e:4c:d2:b1:f6:cc:43:35: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:E3:5B:55:D6:B5:81:BD:5A:F8:F4:3F:A6:B5:76:1E:59:29:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b8:5d:ea:1a:c0:2b:65:f8:59:58:84:f6:29:39:6d:ce:cd: d9:ba:68:57:96:f1:ba:d3:17:e6:34:33:9c:49:1e:59:24:29: fb:0e:a9:45:15:b3:77:2e:35:ea:77:88:fd:58:8c:81:04:db: 1c:5f:73:54:83:0a:4e:9f:25:30:36:f1:c7:d7:6f:4b:1f:32: ed:a6:2d:75:68:32:69:7d:62:e4:d2:f7:62:1e:14:1b:81:c6: 04:a9:03:72:3b:40:c8:91:83:7b:fe:57:a2:5b:86:d5:95:e2: e7:39:64:44:c6:33:c5:62:b7:73:ca:eb:26:2f:fe:80:fd:b9: 5a:5c:6a:8c:03:8d:13:e4:86:49:92:bb:ea:13:b4:55:2c:30: 02:8e:1e:27:bc:d0:dc:25:a5:cc:d7:01:2a:cc:6c:9c:cd:1c: bf:3c:76:7e:c0:80:e7:10:91:c8:07:4b:66:83:5c:03:52:07: 79:b2:4b:51:b7:a7:78:f4:ef:85:c4:ab:d5:7a:b2:25:28:d1: 27:a0:a9:98:dd:32:a7:ab:ad:f3:4d:23:1c:d4:fa:c4:59:b8: 4d:52:13:36:15:fe:e4:57:cf:98:1f:b7:db:17:c1:a7:fd:9f: 33:76:43:bd:82:05:2e:c0:38:ff:2a:fe:fc:f4:40:b1:39:0a: e0:0b:4d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDLDptlvgI4jhqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDE4ZTdhYWUtY2VjZS00NjcwLWFlYTYtZmViNWYxM2IzZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrTNsG2qm348O/NQVwD0wHaPtfsNqO/6fL+F n+ATq+b6xDYAe8X6XtApmlLxN1AVCdp/EhtAjkqwo3vn3lMtyEHOc0ESutRQ8rpO qTor3aeYUUdq8CyElnRq+4BHe0EHvMZvOgC9JVT7GhdztA+KXTjByzIVX4OLNmv/ DGkT6XODqFQIFsr8iJKx8LfFusnF26yCiLnkGGVRO0QvfiukqT1fTxlOMXhHjHyJ SmOs+senwrgQrFix7XJ5TX+lKetLVcfECIzzl1U58b9+udELBE6OtEGikdE2NkGw 2aqD+YFTyrN5wuSpfQ+wU/NlweVlDEvb2uihnkzSsfbMQzVLEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1h41tV1rWBvVr49D+mtXYeWSmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYmQzMWMyMGQtZTZkMS0z NWVhLWFlY2QtM2Y4ZmYwYjAxNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO4XeoawCtl+FlYhPYpOW3Ozdm6aFeW8brTF+Y0M5xJHlkkKfsOqUUV s3cuNep3iP1YjIEE2xxfc1SDCk6fJTA28cfXb0sfMu2mLXVoMml9YuTS92IeFBuB xgSpA3I7QMiRg3v+V6JbhtWV4uc5ZETGM8Vit3PK6yYv/oD9uVpcaowDjRPkhkmS u+oTtFUsMAKOHie80NwlpczXASrMbJzNHL88dn7AgOcQkcgHS2aDXANSB3myS1G3 p3j074XEq9V6siUo0SegqZjdMqerrfNNIxzU+sRZuE1SEzYV/uRXz5gft9sXwaf9 nzN2Q72CBS7AOP8q/vz0QLE5CuALTYg= -----END CERTIFICATE-----Generated at Mon Mar 2 03:13:19 2026 by rpki-client