$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a5c8421-8c8b-38ff-b6c4-f1c0d5bb7263.roa File: 7a5c8421-8c8b-38ff-b6c4-f1c0d5bb7263.roa (raw, json) Hash identifier: ksCoM9ve/mnz20PrCDNC/a+xn5rkRB1zer6wf37kjfk= Subject key identifier: 1B:B1:F3:3B:AC:54:40:A5:D3:C0:E6:39:65:D7:43:3D:39:CB:13:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA84F379A4D7C57D74A0FDA9C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a5c8421-8c8b-38ff-b6c4-f1c0d5bb7263.roa Signing time: Tue 28 Apr 2026 14:56:59 +0000 ROA not before: Tue 28 Apr 2026 14:56:59 +0000 ROA not after: Mon 27 Jul 2026 14:56:59 +0000 asID: 26134 IP address blocks: 209.131.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:4f:37:9a:4d:7c:57:d7:4a:0f:da:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 28 14:56:59 2026 GMT Not After : Jul 27 14:56:59 2026 GMT Subject: CN=ff51d3b9-44a4-4e9f-a940-f92c1fb1c75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:1a:f4:58:ef:24:71:fb:bc:1c:8f:19:45: 84:10:63:42:da:90:a6:30:f4:83:2e:50:f5:c1:a2: ed:e8:1e:1a:57:d6:24:3d:52:89:76:87:cd:9b:48: c1:e9:d1:d6:92:cd:48:bd:87:ba:8d:78:93:b0:31: a2:4a:91:16:f2:ad:b5:41:ae:ce:3f:ab:ff:47:68: a8:7c:2d:8c:ac:b8:f7:00:5a:35:f8:c4:ad:bd:66: e8:60:7f:63:2e:e4:47:47:26:68:9f:6c:b5:37:ad: e8:df:c3:a1:57:02:a8:a0:43:87:5e:7c:94:ca:ee: b8:24:36:d3:7d:bf:99:66:ea:55:d1:1d:27:ee:94: 1d:81:b2:f3:95:b3:cb:24:e7:33:81:f9:13:88:d7: 00:c0:41:79:2e:2b:90:29:7d:63:d4:58:e7:e7:f5: 20:73:65:5c:0a:0b:c5:62:5a:80:cb:61:3c:83:7a: e4:29:47:52:e3:fd:60:28:55:26:36:57:da:99:ea: 11:44:30:1a:2c:49:1b:6b:46:0d:4d:3a:4c:c0:cd: ca:c5:4c:9d:d5:dd:b6:b7:51:81:3e:a1:55:8d:a7: 69:4d:2f:35:3d:c4:08:3e:13:5d:a7:93:6f:14:43: a0:9b:81:91:bb:0c:79:28:e5:a1:3a:03:2c:28:28: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:F3:3B:AC:54:40:A5:D3:C0:E6:39:65:D7:43:3D:39:CB:13:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a5c8421-8c8b-38ff-b6c4-f1c0d5bb7263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4c:d4:1c:65:ed:30:df:b8:ab:7d:54:ed:4d:48:7a:26:90: 6a:b6:53:24:bf:f1:0c:e0:9f:0d:7c:99:3d:97:c3:79:d4:0f: 9e:1c:df:7f:55:75:18:3f:55:c3:5d:5e:1b:4b:03:f3:a3:77: 77:f4:a3:23:79:10:aa:2e:f7:70:dc:69:56:7d:45:fb:a6:6e: e5:82:76:ea:a4:2a:34:75:e3:6e:1b:e7:82:2c:5c:df:99:ac: b9:d2:b3:90:f5:57:c3:a1:93:c5:91:45:04:bf:8b:91:83:b4: fa:43:2f:00:6d:e9:c5:c0:33:bc:e5:9a:62:bc:c8:fc:15:d7: 26:49:34:53:2b:2b:e2:73:a1:f8:00:5c:af:04:99:52:21:93: 7e:d1:b4:27:62:8a:ef:b3:6e:d2:1d:5a:4b:79:b9:28:8f:7c: e4:51:b2:4b:c0:2d:4a:d5:be:8e:c8:a6:6c:20:16:90:c2:da: 95:08:17:62:d0:44:90:d5:bc:1d:9a:60:d3:c2:22:41:2f:e9: 50:4b:60:7d:e2:fc:5c:dc:57:32:94:4d:c3:aa:c1:b6:0b:30: 01:3c:10:96:c0:89:d2:a2:c9:10:ef:83:b2:5d:47:27:22:89: e8:e0:b1:a1:04:4b:30:e0:49:5e:f8:5a:a8:ee:09:89:4c:f6: b6:ec:7e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oTzeaTXxX10oP2pwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyODE0NTY1OVoXDTI2MDcyNzE0NTY1OVowLzEtMCsGA1UEAxMk ZmY1MWQzYjktNDRhNC00ZTlmLWE5NDAtZjkyYzFmYjFjNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDka9FjvJHH7vByPGUWEEGNC2pCmMPSDLlD1 waLt6B4aV9YkPVKJdofNm0jB6dHWks1IvYe6jXiTsDGiSpEW8q21Qa7OP6v/R2io fC2MrLj3AFo1+MStvWboYH9jLuRHRyZon2y1N63o38OhVwKooEOHXnyUyu64JDbT fb+ZZupV0R0n7pQdgbLzlbPLJOczgfkTiNcAwEF5LiuQKX1j1Fjn5/Ugc2VcCgvF YlqAy2E8g3rkKUdS4/1gKFUmNlfameoRRDAaLEkba0YNTTpMwM3KxUyd1d22t1GB PqFVjadpTS81PcQIPhNdp5NvFEOgm4GRuwx5KOWhOgMsKCgmSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBux8zusVECl08DmOWXXQz05yxOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E1Yzg0MjEtOGM4Yi0z OGZmLWI2YzQtZjFjMGQ1YmI3MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhM1Bxl7TDfuKt9VO1NSHomkGq2UyS/8Qzgnw18mT2Xw3nUD54c339V dRg/VcNdXhtLA/Ojd3f0oyN5EKou93DcaVZ9RfumbuWCduqkKjR1424b54IsXN+Z rLnSs5D1V8Ohk8WRRQS/i5GDtPpDLwBt6cXAM7zlmmK8yPwV1yZJNFMrK+JzofgA XK8EmVIhk37RtCdiiu+zbtIdWkt5uSiPfORRskvALUrVvo7IpmwgFpDC2pUIF2LQ RJDVvB2aYNPCIkEv6VBLYH3i/FzcVzKUTcOqwbYLMAE8EJbAidKiyRDvg7JdRyci iejgsaEESzDgSV74WqjuCYlM9rbsfvQ= -----END CERTIFICATE-----Generated at Wed May 13 09:21:08 2026 by rpki-client