$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa File: 35e13aed-2cf4-360c-a349-f1543d28e72a.roa (raw, json) Hash identifier: TOVP5Rlqq8R1k2Yds9VSI595s5/EYpDBxtMUyWyylJ4= Subject key identifier: FD:9F:02:69:4F:F7:3F:B8:49:09:8C:45:FD:2C:23:29:C6:69:39:92 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584D00B269576D1B2BFA46CF9F80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 134963 IP address blocks: 209.9.216.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:69:57:6d:1b:2b:fa:46:cf:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=071b954c-705c-41a2-8bca-2cd7e88c2b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:fc:38:5d:32:7b:10:19:52:0d:c7:26:2d: a5:a0:7c:af:4f:0a:6c:01:c9:78:b2:77:51:cc:45: dd:d8:57:64:11:ab:f3:c2:e0:4b:d5:75:42:c4:c3: b9:00:10:4f:6a:5e:e1:3c:5b:92:94:c9:e9:90:ff: fe:6b:3b:e5:05:07:49:8a:51:1f:f7:96:2c:32:2d: 9a:65:fe:c8:21:a3:dc:a8:6f:fe:b7:73:dc:d9:66: bc:1a:46:17:49:c0:4f:f0:82:a8:03:9d:61:35:59: 27:63:28:c4:ec:42:66:64:79:1a:23:2a:20:70:7f: ee:af:96:e7:74:2f:1f:56:be:86:b2:1f:11:cf:de: 6e:44:d3:06:6d:bc:4c:29:07:03:fd:5c:2f:22:00: 2c:be:06:cf:d0:6b:5b:1c:42:d9:54:c9:b8:9a:18: f1:5a:7b:77:f3:73:d3:d7:29:1c:ed:31:cf:8b:be: 52:05:2d:55:9a:f8:a7:a2:7b:e9:6f:54:02:42:6c: 0e:8a:f5:29:54:e2:5c:5c:58:a2:44:4e:66:eb:3c: 95:24:7c:65:e8:2f:4c:41:79:fd:8d:51:4a:db:65: 2d:f6:53:f5:25:34:41:32:e2:dd:60:19:1f:6f:7a: d7:38:b1:cb:9f:d9:db:83:9c:10:fe:ea:8b:e9:9a: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9F:02:69:4F:F7:3F:B8:49:09:8C:45:FD:2C:23:29:C6:69:39:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/35e13aed-2cf4-360c-a349-f1543d28e72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3e:b3:80:61:c7:78:54:32:10:e6:0b:c5:e5:65:48:ab:66: 8b:06:c4:93:4e:37:35:40:73:48:1f:f0:6c:ac:10:31:7d:6d: af:33:d0:1a:98:77:7c:30:11:fe:a7:3b:5c:76:97:a8:1f:ab: a7:e0:60:d0:fe:8b:1f:3d:6f:44:8a:98:bc:5a:e8:66:ba:a6: 88:25:66:7f:c8:78:8a:2e:9a:40:ff:58:55:df:ae:17:c4:81: 32:15:3b:1d:e5:46:6d:bb:f7:4d:34:96:b6:2f:3e:39:a4:98: fd:de:ab:48:52:51:1b:d9:01:15:37:2c:8e:e1:94:5c:d4:c9: 50:4c:77:67:61:17:5e:ea:fc:7e:75:85:f5:94:8f:da:cc:12: 73:fd:4f:4a:64:1d:7e:2a:5c:c7:3c:7f:d3:5e:73:e9:9e:5d: 5a:35:a3:d5:f7:ec:f6:d7:02:0f:19:e3:28:67:9c:97:23:7d: fd:90:14:af:ab:53:28:36:0a:77:4e:29:53:68:60:b8:90:76: d2:0a:2e:2b:ee:55:89:e3:bc:a9:d9:03:5f:02:11:bd:6d:35: 8f:97:13:1d:71:25:f2:a5:d6:ab:ce:90:2e:11:03:56:16:83: a8:17:8f:5d:bc:0c:e5:ba:42:34:cc:bd:2d:c0:d1:4f:09:db: ec:cd:45:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsmlXbRsr+kbPn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MDcxYjk1NGMtNzA1Yy00MWEyLThiY2EtMmNkN2U4OGMyYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL38OF0yexAZUg3HJi2loHyvTwpsAcl4sndR zEXd2FdkEavzwuBL1XVCxMO5ABBPal7hPFuSlMnpkP/+azvlBQdJilEf95YsMi2a Zf7IIaPcqG/+t3Pc2Wa8GkYXScBP8IKoA51hNVknYyjE7EJmZHkaIyogcH/ur5bn dC8fVr6Gsh8Rz95uRNMGbbxMKQcD/VwvIgAsvgbP0GtbHELZVMm4mhjxWnt383PT 1ykc7THPi75SBS1Vmvinonvpb1QCQmwOivUpVOJcXFiiRE5m6zyVJHxl6C9MQXn9 jVFK22Ut9lP1JTRBMuLdYBkfb3rXOLHLn9nbg5wQ/uqL6ZpbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2fAmlP9z+4SQmMRf0sIynGaTmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMzVlMTNhZWQtMmNmNC0z NjBjLWEzNDktZjE1NDNkMjhlNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc+s4Bhx3hUMhDmC8XlZUirZosGxJNONzVAc0gf8GysEDF9ba8z0BqY d3wwEf6nO1x2l6gfq6fgYND+ix89b0SKmLxa6Ga6poglZn/IeIoumkD/WFXfrhfE gTIVOx3lRm279000lrYvPjmkmP3eq0hSURvZARU3LI7hlFzUyVBMd2dhF17q/H51 hfWUj9rMEnP9T0pkHX4qXMc8f9Nec+meXVo1o9X37PbXAg8Z4yhnnJcjff2QFK+r Uyg2CndOKVNoYLiQdtIKLivuVYnjvKnZA18CEb1tNY+XEx1xJfKl1qvOkC4RA1YW g6gXj128DOW6QjTMvS3A0U8J2+zNRX8= -----END CERTIFICATE-----Generated at Sun Mar 1 19:23:23 2026 by rpki-client