$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd667c79-e188-38ad-b2af-1043a1736919.roa File: cd667c79-e188-38ad-b2af-1043a1736919.roa (raw, json) Hash identifier: YL6oAL2NPxHWDkiJvnsl8AKz/COZWFv1EGik9/5ODQc= Subject key identifier: 33:9F:70:C9:98:BD:20:72:F1:B9:00:7C:C0:13:C0:84:DE:D8:8A:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8AC55021649DCA4AFFBD9900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd667c79-e188-38ad-b2af-1043a1736919.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 7342 IP address blocks: 209.131.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:50:21:64:9d:ca:4a:ff:bd:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=e939781d-4a66-44fd-91c3-30f6a369b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:47:21:12:67:8b:5f:33:2d:cf:fe:f3:ef: 4d:a4:bf:fd:01:bd:7c:be:4b:cd:8d:28:80:38:53: ce:76:ab:2c:7b:dc:cc:3c:b0:1d:67:f7:12:e7:14: 6f:44:0d:a6:22:2c:1b:87:4d:7b:72:60:af:f2:87: 70:9a:e1:7a:65:cb:44:ec:9f:5d:7d:30:e2:ee:e5: d8:5b:53:19:7e:07:92:c0:43:78:ab:bc:fe:77:b1: 99:74:b7:1c:78:2a:2d:3b:7b:2f:a9:a2:8e:6d:01: 69:d5:4e:89:26:d8:0d:0e:8d:0c:97:0f:0d:4f:14: 37:d0:d0:b3:b5:ba:12:69:bd:be:75:aa:83:ab:40: e0:d9:90:f6:ce:59:59:b1:33:ac:26:e0:9f:bc:b2: 16:0c:23:e9:1d:12:86:c7:e5:33:16:44:8e:e2:2b: ad:d7:e6:71:cf:40:79:e0:d5:03:26:83:ad:07:be: 59:6d:eb:ce:1d:fc:87:44:ca:0e:af:ef:92:90:1b: b4:73:1e:b4:20:f0:f4:88:df:62:ae:65:19:50:cd: c3:d6:33:45:18:9f:6c:39:cb:17:a0:71:1e:4a:81: cd:b8:3c:f7:a8:98:02:50:66:ca:92:e6:8f:36:76: e4:ef:09:68:5d:8a:4e:4b:3a:4d:c9:5a:6e:08:a1: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:70:C9:98:BD:20:72:F1:B9:00:7C:C0:13:C0:84:DE:D8:8A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd667c79-e188-38ad-b2af-1043a1736919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:57:fc:c4:27:52:f4:15:43:b2:69:e4:6c:a7:0c:0e:b6:b9: 22:a7:b1:89:fa:6a:b8:30:2a:61:b4:ed:cb:b0:16:ed:8b:eb: 66:f2:7e:8c:0a:3d:05:b4:7d:f2:4e:54:e9:c1:88:2e:08:cf: 96:09:9f:d0:d9:23:6c:b3:1e:fb:a7:39:95:d2:9c:8b:c8:cc: 31:15:0d:c0:01:cb:c1:84:26:39:5c:f6:5a:96:ce:93:7b:c8: e5:c9:df:e2:79:34:4c:87:15:57:8a:38:46:f1:90:9a:8e:ff: 41:52:a3:64:34:47:6d:bd:fb:77:d3:88:18:31:80:a4:38:25: 91:4f:28:57:41:19:09:d6:0a:63:56:04:95:b2:c8:9d:47:93: 7a:c7:d5:c9:d9:8f:5c:42:b8:e5:74:81:9c:6c:3a:4a:37:12: ea:28:a9:fb:b4:e6:24:08:0b:ef:3f:15:68:84:35:73:47:5b: 61:ab:4b:ef:26:24:1a:96:bc:ef:1a:b2:76:ce:92:5c:1a:ab: 0f:8b:d4:03:26:3b:b7:25:d8:ec:b2:a6:8e:6f:f5:f9:b9:b3: 34:f4:18:15:0f:2b:5b:7b:2c:57:17:12:e1:06:61:33:e1:40: 30:5b:84:a6:20:c0:3a:69:9b:65:59:61:ac:39:7d:bb:e9:78: 14:cd:57:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVAhZJ3KSv+9mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTkzOTc4MWQtNGE2Ni00NGZkLTkxYzMtMzBmNmEzNjliNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxihHIRJni18zLc/+8+9NpL/9Ab18vkvNjSiA OFPOdqsse9zMPLAdZ/cS5xRvRA2mIiwbh017cmCv8odwmuF6ZctE7J9dfTDi7uXY W1MZfgeSwEN4q7z+d7GZdLcceCotO3svqaKObQFp1U6JJtgNDo0Mlw8NTxQ30NCz tboSab2+daqDq0Dg2ZD2zllZsTOsJuCfvLIWDCPpHRKGx+UzFkSO4iut1+Zxz0B5 4NUDJoOtB75ZbevOHfyHRMoOr++SkBu0cx60IPD0iN9irmUZUM3D1jNFGJ9sOcsX oHEeSoHNuDz3qJgCUGbKkuaPNnbk7wloXYpOSzpNyVpuCKH+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOfcMmYvSBy8bkAfMATwITe2IovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q2NjdjNzktZTE4OC0z OGFkLWIyYWYtMTA0M2ExNzM2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVX/MQnUvQVQ7Jp5GynDA62uSKnsYn6argwKmG07cuwFu2L62byfowK PQW0ffJOVOnBiC4Iz5YJn9DZI2yzHvunOZXSnIvIzDEVDcABy8GEJjlc9lqWzpN7 yOXJ3+J5NEyHFVeKOEbxkJqO/0FSo2Q0R229+3fTiBgxgKQ4JZFPKFdBGQnWCmNW BJWyyJ1Hk3rH1cnZj1xCuOV0gZxsOko3Euooqfu05iQIC+8/FWiENXNHW2GrS+8m JBqWvO8asnbOklwaqw+L1AMmO7cl2Oyypo5v9fm5szT0GBUPK1t7LFcXEuEGYTPh QDBbhKYgwDppm2VZYaw5fbvpeBTNVyk= -----END CERTIFICATE-----Generated at Wed May 13 13:34:49 2026 by rpki-client