$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fa917d6-e102-3f14-a403-25b6e8e43b34.roa File: 5fa917d6-e102-3f14-a403-25b6e8e43b34.roa (raw, json) Hash identifier: mX/w1rB2DvAtfgdSZ15vIA2C6YH8Rj4cBBwOHI2TBso= Subject key identifier: 0E:45:2E:08:92:E2:AC:D7:C8:75:7C:71:B8:A1:0B:C3:49:73:85:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CD4074F56CB53F758587D5600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fa917d6-e102-3f14-a403-25b6e8e43b34.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 32787 IP address blocks: 209.200.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:4f:56:cb:53:f7:58:58:7d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=64e8efae-6710-4445-ba0e-bdc9cfd7fe55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:1f:ab:ea:cc:b2:38:b5:37:0a:25:2f:a2: 51:8c:6e:00:06:e6:a8:d0:4e:95:39:40:e3:4e:c9: c6:58:b5:bb:a3:3a:74:66:77:04:72:ca:fe:84:cd: 31:21:96:26:87:a3:b6:f4:f9:4d:d2:f5:3c:ec:10: e5:9c:b3:4a:11:30:bf:4c:40:16:4c:c2:9f:57:ae: fc:4e:e3:64:e6:ec:5f:e4:79:2b:ba:a2:39:4b:09: 11:5a:4e:00:9c:be:85:2f:a2:dd:98:d4:7e:da:30: 2f:ad:34:80:9c:8e:50:09:88:eb:3f:f7:27:80:bd: 25:21:c9:1b:3a:ed:58:9e:c9:a5:f0:9a:b3:8a:bd: 04:f8:7f:96:8c:24:73:ce:d8:d6:20:c2:7d:5b:31: f7:8e:e9:c9:99:47:7d:ab:b2:03:a4:f4:69:97:53: 28:d3:85:d7:57:5e:06:a9:7d:20:c7:3d:01:3f:3d: da:e4:0a:52:0b:be:b6:25:ed:e2:34:43:2b:77:a9: d3:62:4e:cc:39:a2:b8:99:c5:e6:ab:8a:2d:0c:22: 68:ff:43:08:38:7e:3d:42:63:ae:bd:f9:58:1d:cd: 91:27:0b:f7:ff:12:97:aa:6d:7a:3b:36:9c:14:62: e3:85:92:f9:49:80:ae:9c:4c:46:29:f4:18:71:a6: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:45:2E:08:92:E2:AC:D7:C8:75:7C:71:B8:A1:0B:C3:49:73:85:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fa917d6-e102-3f14-a403-25b6e8e43b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c2:ce:1b:48:2d:bf:bb:79:a8:07:9b:ca:ab:e7:de:c3:03: a5:fc:d4:4f:90:b7:bb:03:b7:3f:ac:91:e0:cf:90:eb:0b:eb: 03:43:92:ce:ed:cf:5d:15:25:82:b4:f6:d0:4e:3e:77:b2:9d: e1:b6:08:b6:21:d1:aa:44:42:b1:81:f2:ed:04:04:77:39:fc: 13:5f:0a:14:c3:0d:fd:a3:4d:6d:3c:5e:2e:65:00:38:69:30: 64:48:19:8a:ed:41:27:28:0a:71:19:c1:31:0f:5f:87:b3:5b: 64:14:41:bf:3f:c5:38:9b:18:6d:a7:04:10:5b:8c:23:42:79: f4:6c:87:57:3b:14:65:42:15:4e:c5:3f:98:80:d3:5b:25:ea: 42:b3:d5:37:1b:00:93:f4:2a:27:51:d8:dc:5d:9b:3e:d6:98: 7b:fc:d7:9f:7a:c1:67:b1:fe:b2:e9:ce:fd:48:2d:53:8a:b2: 8e:45:60:2a:55:a3:cb:d7:de:eb:2e:eb:8a:d6:27:d6:b1:4f: 89:cc:80:ba:73:8f:5f:69:c1:22:fc:32:1e:46:3e:8b:7b:9e: 69:dc:e3:e0:89:cb:c9:ab:f4:80:cc:6c:53:e8:50:a2:22:0e: ac:ec:66:31:87:5b:b4:a9:cb:bd:4b:1e:4e:40:75:76:68:ea: bc:25:a7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB09Wy1P3WFh9VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk NjRlOGVmYWUtNjcxMC00NDQ1LWJhMGUtYmRjOWNmZDdmZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Ifq+rMsji1NwolL6JRjG4ABuao0E6VOUDj TsnGWLW7ozp0ZncEcsr+hM0xIZYmh6O29PlN0vU87BDlnLNKETC/TEAWTMKfV678 TuNk5uxf5HkruqI5SwkRWk4AnL6FL6LdmNR+2jAvrTSAnI5QCYjrP/cngL0lIckb Ou1Ynsml8Jqzir0E+H+WjCRzztjWIMJ9WzH3junJmUd9q7IDpPRpl1Mo04XXV14G qX0gxz0BPz3a5ApSC762Je3iNEMrd6nTYk7MOaK4mcXmq4otDCJo/0MIOH49QmOu vflYHc2RJwv3/xKXqm16OzacFGLjhZL5SYCunExGKfQYcaY7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5FLgiS4qzXyHV8cbihC8NJc4UxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZhOTE3ZDYtZTEwMi0z ZjE0LWE0MDMtMjViNmU4ZTQzYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ci/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnCzhtILb+7eagHm8qr597DA6X81E+Qt7sDtz+skeDPkOsL6wNDks7t z10VJYK09tBOPneyneG2CLYh0apEQrGB8u0EBHc5/BNfChTDDf2jTW08Xi5lADhp MGRIGYrtQScoCnEZwTEPX4ezW2QUQb8/xTibGG2nBBBbjCNCefRsh1c7FGVCFU7F P5iA01sl6kKz1TcbAJP0KidR2Nxdmz7WmHv81596wWex/rLpzv1ILVOKso5FYCpV o8vX3usu64rWJ9axT4nMgLpzj19pwSL8Mh5GPot7nmnc4+CJy8mr9IDMbFPoUKIi DqzsZjGHW7Spy71LHk5AdXZo6rwlp5s= -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:09 2026 by rpki-client