$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/654ee4e1-1111-3c9a-8893-a280803bd358.roa File: 654ee4e1-1111-3c9a-8893-a280803bd358.roa (raw, json) Hash identifier: Fjgatu2GTwIaS8kbHdPKfJ1YkfU6PZ79dHJrpQPJl8s= Subject key identifier: FB:07:87:51:83:92:0E:B8:1E:0A:8C:EF:96:9F:85:03:A1:77:FA:1A Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584DC565C05FF7CFD7F36C09CD80 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/654ee4e1-1111-3c9a-8893-a280803bd358.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 396998 IP address blocks: 209.237.140.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:c0:5f:f7:cf:d7:f3:6c:09:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=1a1ece9a-a4a9-4d17-a176-c389119e4f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:78:e1:61:8f:e8:a6:83:35:bc:29:2c:75:ca: f4:69:dd:b6:b3:95:c5:c9:f1:b1:43:ba:bb:e7:f8: 8c:83:54:bb:3c:7f:be:ac:07:ad:0c:ea:0e:29:68: 1b:7b:4a:b6:67:bd:40:e3:f1:ee:59:56:bc:62:55: 61:59:a0:98:4b:c9:98:07:28:aa:b5:f7:3d:85:35: 1b:ae:ea:79:58:b8:76:88:31:13:94:d6:e1:31:bc: 2b:b1:b2:5a:08:0a:7d:25:0c:cb:7c:ef:9b:43:de: 76:64:ab:2c:3c:05:59:b1:ea:58:e3:13:bf:02:ce: 62:48:a5:a4:3a:be:5a:19:1f:3b:b7:f4:11:02:8b: 94:ef:0e:e4:a2:f9:df:99:31:99:8d:5a:39:9c:c1: 2e:9d:ae:28:98:61:24:a2:90:5e:e3:d8:55:57:38: a3:59:f6:9d:67:3a:c5:3b:3d:c3:ef:cb:ff:61:1d: cb:06:31:25:79:45:4d:59:34:93:49:c6:df:81:a0: 9e:a5:d8:45:ba:10:95:8c:72:d4:ba:4e:32:bf:d1: bd:fe:0e:0f:a9:5a:ef:65:47:28:9e:1c:26:0b:5f: 72:2b:c7:42:62:e4:86:77:32:ce:ff:24:82:9d:f4: 23:e2:a4:45:93:e6:30:48:4e:68:25:6b:d5:24:75: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:07:87:51:83:92:0E:B8:1E:0A:8C:EF:96:9F:85:03:A1:77:FA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/654ee4e1-1111-3c9a-8893-a280803bd358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv4: 209.237.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9a:53:cb:65:a1:67:5e:dc:6d:60:a5:08:f0:90:64:65:47: 46:8f:7c:88:ff:a0:51:be:d7:ad:80:6d:f1:df:37:74:43:6e: a6:16:6f:4b:b2:e6:cd:87:9d:19:20:44:4d:b2:c8:f9:3e:40: b8:43:91:f3:f4:cf:09:ce:9e:1a:68:ab:fa:3a:05:43:55:2a: 3b:47:cc:62:d0:0b:e8:78:1f:5d:b7:86:71:5c:53:8e:3c:b4: c0:12:fe:25:7f:47:ed:24:f7:9a:ac:f8:a6:7b:ff:78:cc:94: fc:46:ac:e1:43:e9:e3:9e:82:c1:c2:75:8e:8a:69:d5:db:8f: 6a:b6:81:bc:60:ec:39:c9:fe:c5:6a:1d:d8:2f:e2:dc:a7:2a: ae:4e:4c:18:c1:aa:a4:01:d3:82:92:9f:6b:fd:3e:20:d7:11: 66:47:9c:68:91:93:9a:f1:7b:d8:18:5e:3b:6f:4b:15:08:07: 95:8c:4c:dc:6a:45:e3:bd:d8:77:67:23:68:c1:2b:e3:24:2b: 15:73:52:92:0d:4a:5d:2e:6c:d4:2c:db:b8:5f:bc:ae:d1:20: ea:b5:d7:3c:c2:d1:7b:38:f8:0c:6d:c9:8c:ff:db:ac:db:bb: b3:38:b1:b1:98:7f:7d:69:3e:22:6b:9d:7b:df:37:7c:45:79: bf:db:50:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcBf98/X82wJzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk MWExZWNlOWEtYTRhOS00ZDE3LWExNzYtYzM4OTExOWU0ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43jhYY/opoM1vCksdcr0ad22s5XFyfGxQ7q7 5/iMg1S7PH++rAetDOoOKWgbe0q2Z71A4/HuWVa8YlVhWaCYS8mYByiqtfc9hTUb rup5WLh2iDETlNbhMbwrsbJaCAp9JQzLfO+bQ952ZKssPAVZsepY4xO/As5iSKWk Or5aGR87t/QRAouU7w7kovnfmTGZjVo5nMEuna4omGEkopBe49hVVzijWfadZzrF Oz3D78v/YR3LBjEleUVNWTSTScbfgaCepdhFuhCVjHLUuk4yv9G9/g4PqVrvZUco nhwmC19yK8dCYuSGdzLO/ySCnfQj4qRFk+YwSE5oJWvVJHU0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsHh1GDkg64HgqM75afhQOhd/oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvNjU0ZWU0ZTEtMTExMS0z YzlhLTg4OTMtYTI4MDgwM2JkMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCaU8tloWde3G1gpQjwkGRlR0aPfIj/oFG+162AbfHfN3RDbqYWb0uy 5s2HnRkgRE2yyPk+QLhDkfP0zwnOnhpoq/o6BUNVKjtHzGLQC+h4H123hnFcU448 tMAS/iV/R+0k95qs+KZ7/3jMlPxGrOFD6eOegsHCdY6KadXbj2q2gbxg7DnJ/sVq Hdgv4tynKq5OTBjBqqQB04KSn2v9PiDXEWZHnGiRk5rxe9gYXjtvSxUIB5WMTNxq ReO92HdnI2jBK+MkKxVzUpINSl0ubNQs27hfvK7RIOq11zzC0Xs4+AxtyYz/26zb u7M4sbGYf31pPiJrnXvfN3xFeb/bUHc= -----END CERTIFICATE-----Generated at Wed May 13 19:04:14 2026 by rpki-client