$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa File: 509971a2-2e61-329b-aabd-5f74f8132974.roa (raw, json) Hash identifier: 65OZk5s7QymxwuLVHP4UN6o8ffUatD2u6QpYABt8T8w= Subject key identifier: DA:0F:C0:A6:28:3B:19:80:97:55:F7:45:2E:CD:11:CF:11:1D:A4:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D95F01CE9AC07AC3FA991CB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 7342 IP address blocks: 209.131.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1c:e9:ac:07:ac:3f:a9:91:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=76028bad-8b08-4f6f-bf43-accae85519f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:92:3f:0d:8a:cc:36:bd:04:03:3a:4d:ae: a7:8f:7b:58:7f:e4:fd:b0:58:05:6c:5d:1f:39:f7: f6:75:a4:63:d9:ae:cd:7d:62:36:fa:07:15:33:55: 68:0c:5a:82:71:cf:bd:f2:4d:96:cb:91:df:83:54: c0:bd:71:78:cb:56:b9:bb:f7:22:1f:c6:31:a9:35: d5:14:91:c6:d7:3b:7d:54:c3:e6:71:df:54:90:25: 00:bb:6b:ac:ac:1e:04:3b:73:aa:73:9a:8d:2a:b2: c7:54:04:e5:35:cd:8b:9d:ab:61:72:80:44:ed:8e: ab:bb:bf:13:33:c9:95:6a:dd:11:fd:7e:2e:cb:cc: 00:d4:14:4b:9e:90:47:af:94:58:9f:85:f4:69:1d: dc:f5:ba:f7:40:70:5f:da:24:2e:4d:07:f6:4f:d0: 2e:67:a0:be:e5:ef:95:a0:ad:dd:6f:04:00:d2:d5: 15:5a:9b:b3:75:0c:07:c0:16:21:62:08:5a:e3:ab: 64:4f:9b:d3:20:e5:9e:5c:8e:36:35:4b:2f:3d:2d: 56:52:7a:27:43:cc:af:5e:f3:62:e7:b8:24:b1:70: 32:9d:42:c4:79:d5:a7:f7:1f:7d:ce:d5:91:a9:f8: 72:f3:fe:1b:f5:ee:40:d0:80:86:ea:78:76:0f:e7: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:C0:A6:28:3B:19:80:97:55:F7:45:2E:CD:11:CF:11:1D:A4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0b:37:94:6d:ab:71:8f:2f:e0:97:bb:0b:40:c7:8a:67:dd: f9:cf:9a:f0:45:4c:bf:00:98:9b:67:3a:df:64:62:58:ab:04: 3d:92:cc:ca:5b:55:bb:a8:16:a6:38:02:67:05:3e:56:a8:50: 6d:d5:92:2f:83:f4:57:7b:36:08:33:82:b0:89:e6:9c:1a:23: 1c:34:29:c7:45:cd:1f:78:ac:61:dc:6f:0c:0d:53:61:5f:a6: 7f:2a:47:f1:f9:4b:ac:9c:eb:43:57:92:cc:c9:6a:f7:ca:4f: ba:94:f9:41:45:62:30:f1:f5:cb:3c:54:e1:d9:dd:57:c4:85: 44:d5:a3:9a:87:1a:a5:98:a3:ab:06:bf:f8:ee:10:cc:4f:67: ee:24:1d:3d:54:ee:5d:0f:ce:cf:35:97:d0:cb:ea:24:5a:bf: ea:8a:6b:4c:98:7d:0c:1c:55:c5:55:90:c2:2a:70:b2:da:98: 88:89:15:b6:44:32:bd:94:60:44:d0:c5:30:7f:df:70:71:f0: 61:eb:71:29:4a:48:84:25:28:68:06:ed:9d:61:9d:39:10:a8: ec:56:26:aa:a3:a3:d1:19:d0:27:84:92:3b:a4:97:da:4b:f5: 18:f5:d9:b7:58:8f:09:b3:98:98:db:65:13:c9:e6:91:f7:1d: be:bf:0f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8BzprAesP6mRy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NzYwMjhiYWQtOGIwOC00ZjZmLWJmNDMtYWNjYWU4NTUxOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLqSPw2KzDa9BAM6Ta6nj3tYf+T9sFgFbF0f Off2daRj2a7NfWI2+gcVM1VoDFqCcc+98k2Wy5Hfg1TAvXF4y1a5u/ciH8YxqTXV FJHG1zt9VMPmcd9UkCUAu2usrB4EO3Oqc5qNKrLHVATlNc2LnathcoBE7Y6ru78T M8mVat0R/X4uy8wA1BRLnpBHr5RYn4X0aR3c9br3QHBf2iQuTQf2T9AuZ6C+5e+V oK3dbwQA0tUVWpuzdQwHwBYhYgha46tkT5vTIOWeXI42NUsvPS1WUnonQ8yvXvNi 57gksXAynULEedWn9x99ztWRqfhy8/4b9e5A0ICG6nh2D+dRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoPwKYoOxmAl1X3RS7NEc8RHaS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA5OTcxYTItMmU2MS0z MjliLWFhYmQtNWY3NGY4MTMyOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAELN5Rtq3GPL+CXuwtAx4pn3fnPmvBFTL8AmJtnOt9kYlirBD2SzMpb VbuoFqY4AmcFPlaoUG3Vki+D9Fd7NggzgrCJ5pwaIxw0KcdFzR94rGHcbwwNU2Ff pn8qR/H5S6yc60NXkszJavfKT7qU+UFFYjDx9cs8VOHZ3VfEhUTVo5qHGqWYo6sG v/juEMxPZ+4kHT1U7l0Pzs81l9DL6iRav+qKa0yYfQwcVcVVkMIqcLLamIiJFbZE Mr2UYETQxTB/33Bx8GHrcSlKSIQlKGgG7Z1hnTkQqOxWJqqjo9EZ0CeEkjukl9pL 9Rj12bdYjwmzmJjbZRPJ5pH3Hb6/D8g= -----END CERTIFICATE-----Generated at Wed May 13 10:27:30 2026 by rpki-client