$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa File: 40314b4d-9789-377e-9741-c7a9e2e27829.roa (raw, json) Hash identifier: 5mkyNSe2I+05ZcLbZwxv4/A0M3R8L54D8BEfadEo+UY= Subject key identifier: 7F:AA:96:0D:BB:9E:6B:C6:11:E6:DE:77:0D:15:47:5C:78:8E:68:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8AC550393FF32F60FFA86300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 7342 IP address blocks: 209.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:50:39:3f:f3:2f:60:ff:a8:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=42c6b261-4d78-409e-9707-4da310c7cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:d3:7d:22:e8:21:e6:9c:c3:4f:93:3e:19: 00:5a:df:b0:6d:b7:43:92:61:f1:0d:6f:99:7d:16: f0:da:75:2f:e8:ef:d9:ff:49:c0:a5:8b:08:9f:56: 3a:f1:52:1e:bb:e4:6d:be:42:fe:0d:9b:13:62:a9: f4:5f:60:c7:93:e8:9d:3e:61:40:18:f9:53:57:83: 37:e3:00:b7:e4:4a:c4:a6:dd:9a:76:d6:73:f4:14: 33:e5:4f:b7:e7:d6:4f:85:25:d7:9f:a0:7a:77:d7: f2:11:f9:ce:19:d0:bd:17:02:07:ea:f6:f7:01:b8: 65:13:f1:76:47:d9:03:ae:83:39:71:b7:29:74:f3: 65:0f:cf:eb:f9:7a:a9:c1:02:b0:23:e4:0c:72:0d: 10:ee:ec:b1:35:38:4b:2f:3a:0f:6c:55:01:52:35: bc:f1:5b:58:47:6b:d2:a8:4d:bd:01:c4:57:9b:d2: e3:39:24:0d:17:41:db:32:99:36:b4:73:ee:e3:ff: 8f:c1:69:a3:a9:d3:03:d8:1e:50:5f:3c:c2:ed:7e: e4:96:e2:a7:f6:2a:32:ca:dd:70:1e:5c:56:0b:9e: 69:3d:09:8c:c0:41:89:fd:8a:8c:65:8e:6d:d7:bb: 01:d4:c8:f7:16:94:a7:ea:75:f5:9d:6e:68:ea:4f: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AA:96:0D:BB:9E:6B:C6:11:E6:DE:77:0D:15:47:5C:78:8E:68:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2b:54:07:2e:19:7b:1b:4b:9a:76:55:8e:ec:b4:25:8a:3f: 9f:fa:53:cf:5a:bd:62:e8:d7:b7:39:74:2e:f0:a0:fe:96:df: b7:b9:44:7e:15:e5:22:ce:5e:b4:be:71:98:2a:ab:12:cd:2e: 8d:e8:d4:ec:a8:33:29:6b:ac:e5:73:84:5a:9d:4a:17:ef:63: 65:f2:f9:93:f8:c2:a7:ec:cc:6f:c3:8b:5c:34:e8:f8:03:d2: 14:9b:6c:7f:8b:12:24:d8:02:5f:f7:5a:c4:55:cf:64:64:c2: ef:88:06:b8:a0:59:59:81:6c:ff:b8:a9:1c:6e:16:ed:73:25: ec:b2:c0:38:c2:d2:39:ba:b6:02:ee:8d:46:66:23:cb:16:1c: 18:28:17:89:31:c5:42:8e:f5:38:ac:47:36:c3:25:e3:3a:7e: ce:40:3d:ef:7b:4b:74:a4:7b:3a:d9:af:98:3b:18:69:15:ae: f6:ab:30:3f:43:d5:cb:66:1b:af:67:05:a2:95:17:7d:59:5f: 83:46:4b:fe:cc:67:29:73:04:e7:e8:be:4b:e9:4e:05:27:fc: ba:a2:4e:e7:d6:e1:80:af:1d:98:39:6e:87:c7:20:ee:57:9a: 24:5e:5a:00:e0:4f:37:04:89:ef:65:71:be:21:67:7b:0d:dc: cf:1f:1a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVA5P/MvYP+oYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NDJjNmIyNjEtNGQ3OC00MDllLTk3MDctNGRhMzEwYzdjYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnjTfSLoIeacw0+TPhkAWt+wbbdDkmHxDW+Z fRbw2nUv6O/Z/0nApYsIn1Y68VIeu+RtvkL+DZsTYqn0X2DHk+idPmFAGPlTV4M3 4wC35ErEpt2adtZz9BQz5U+359ZPhSXXn6B6d9fyEfnOGdC9FwIH6vb3AbhlE/F2 R9kDroM5cbcpdPNlD8/r+XqpwQKwI+QMcg0Q7uyxNThLLzoPbFUBUjW88VtYR2vS qE29AcRXm9LjOSQNF0HbMpk2tHPu4/+PwWmjqdMD2B5QXzzC7X7kluKn9ioyyt1w HlxWC55pPQmMwEGJ/YqMZY5t17sB1Mj3FpSn6nX1nW5o6k8AAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+qlg27nmvGEebedw0VR1x4jmhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAzMTRiNGQtOTc4OS0z NzdlLTk3NDEtYzdhOWUyZTI3ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwrVAcuGXsbS5p2VY7stCWKP5/6U89avWLo17c5dC7woP6W37e5RH4V 5SLOXrS+cZgqqxLNLo3o1OyoMylrrOVzhFqdShfvY2Xy+ZP4wqfszG/Di1w06PgD 0hSbbH+LEiTYAl/3WsRVz2Rkwu+IBrigWVmBbP+4qRxuFu1zJeyywDjC0jm6tgLu jUZmI8sWHBgoF4kxxUKO9TisRzbDJeM6fs5APe97S3SkezrZr5g7GGkVrvarMD9D 1ctmG69nBaKVF31ZX4NGS/7MZylzBOfovkvpTgUn/LqiTufW4YCvHZg5bofHIO5X miReWgDgTzcEie9lcb4hZ3sN3M8fGio= -----END CERTIFICATE-----Generated at Wed May 13 11:41:09 2026 by rpki-client