$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa File: 1ce20416-7f37-33f9-9a62-528b71678539.roa (raw, json) Hash identifier: N7SM4AFqbkRcSs+Y71ZZhC//fb7k41DwM+/B8uMYs0o= Subject key identifier: 00:8D:8A:9B:CA:BC:05:EF:11:8B:1F:A0:A5:B7:AB:64:74:8C:2D:A9 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584D9E5016B578D0E860DD244580 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 7018 IP address blocks: 144.208.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:16:b5:78:d0:e8:60:dd:24:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=489088b5-c861-4abc-a2ff-21ef9dcf2c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:2e:a1:ad:32:11:b7:92:5e:6f:28:2a:3e: 02:26:f9:16:92:f5:1e:8d:9c:f8:a6:e7:03:be:f2: 96:18:0e:4c:4c:a0:bc:02:33:62:e0:da:72:41:83: a8:77:93:68:08:42:c4:7c:46:b9:51:b5:eb:e5:b5: b3:41:57:6d:5f:d3:d3:42:2e:90:51:f2:e6:ac:30: ce:d8:8c:54:9b:14:c4:c2:bc:32:53:27:36:ae:38: 0e:f1:9a:f0:16:d4:c8:85:64:c6:fc:31:29:3e:5e: 98:82:68:61:af:c9:19:68:2f:04:9c:43:60:9f:23: 99:82:d2:1d:d4:fb:59:a9:59:a6:9d:15:8d:9a:60: dc:c3:c4:49:c3:e8:be:79:79:89:18:8c:73:38:a8: fd:8f:56:ce:05:c8:a9:fd:ce:49:6c:06:ac:61:31: fb:10:ae:cb:c6:e9:b6:7e:bf:5f:62:e3:10:9b:04: b5:4f:d6:a2:67:96:54:72:a0:e1:44:f5:5a:6d:b1: 6c:65:96:20:e1:ab:3b:2e:73:cc:96:e8:c2:f7:cb: 90:65:24:fd:40:04:e0:8f:ef:18:f6:eb:4c:b1:0a: 7c:f2:89:12:f7:46:60:b2:db:44:87:cb:f1:7d:ac: 15:9d:39:70:9b:41:8c:87:f4:00:5a:f5:bb:0a:6f: 10:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:8A:9B:CA:BC:05:EF:11:8B:1F:A0:A5:B7:AB:64:74:8C:2D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2d:d3:0a:06:e2:5a:f6:3a:41:69:e7:41:7d:26:b2:ff:6e: dd:cd:5e:98:71:94:81:3d:4a:7d:99:5d:40:ee:2d:5a:8d:20: bb:16:cf:16:80:03:b0:0d:1b:d3:14:e7:d6:21:d3:10:5b:0e: aa:a7:a3:c6:49:7c:1a:ea:f9:d2:c6:8e:a6:38:8c:59:82:0d: 48:4b:cc:e1:09:25:84:eb:f2:0b:9f:35:a7:5c:0c:5a:da:d1: e6:89:96:bc:b8:e1:f4:47:66:f4:2b:1d:bf:77:62:df:c6:57: 55:73:70:72:cb:4a:df:9d:e5:74:e0:a0:50:81:39:c6:de:21: 38:d6:7a:5b:07:95:7d:a0:ff:d9:58:f3:ed:d0:f6:7a:68:13: 96:98:cc:b1:a8:4e:af:e0:1c:45:30:14:51:10:a7:87:be:78: 52:03:f6:d4:1e:18:66:54:14:1a:b5:68:b1:8e:56:23:df:00: c8:1f:d0:e5:94:fb:12:b2:a7:ad:47:cc:3f:84:a5:46:88:ab: 95:9d:6c:65:24:7a:cc:71:d9:16:ca:b4:a7:c4:a1:9a:42:b1: 35:a6:d9:fe:3e:12:05:62:c5:c6:22:dc:f5:31:c2:ba:86:b7: c5:f4:74:e3:ea:dc:76:a0:6e:6a:0e:51:2a:44:39:c8:19:d4: aa:ce:3c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBa1eNDoYN0kRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NDg5MDg4YjUtYzg2MS00YWJjLWEyZmYtMjFlZjlkY2YyYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWwuoa0yEbeSXm8oKj4CJvkWkvUejZz4pucD vvKWGA5MTKC8AjNi4NpyQYOod5NoCELEfEa5UbXr5bWzQVdtX9PTQi6QUfLmrDDO 2IxUmxTEwrwyUyc2rjgO8ZrwFtTIhWTG/DEpPl6Ygmhhr8kZaC8EnENgnyOZgtId 1PtZqVmmnRWNmmDcw8RJw+i+eXmJGIxzOKj9j1bOBcip/c5JbAasYTH7EK7Lxum2 fr9fYuMQmwS1T9aiZ5ZUcqDhRPVabbFsZZYg4as7LnPMlujC98uQZST9QATgj+8Y 9utMsQp88okS90ZgsttEh8vxfawVnTlwm0GMh/QAWvW7Cm8QowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACNipvKvAXvEYsfoKW3q2R0jC2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMWNlMjA0MTYtN2YzNy0z M2Y5LTlhNjItNTI4YjcxNjc4NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEst0woG4lr2OkFp50F9JrL/bt3NXphxlIE9Sn2ZXUDuLVqNILsWzxaA A7ANG9MU59Yh0xBbDqqno8ZJfBrq+dLGjqY4jFmCDUhLzOEJJYTr8gufNadcDFra 0eaJlry44fRHZvQrHb93Yt/GV1VzcHLLSt+d5XTgoFCBOcbeITjWelsHlX2g/9lY 8+3Q9npoE5aYzLGoTq/gHEUwFFEQp4e+eFID9tQeGGZUFBq1aLGOViPfAMgf0OWU +xKyp61HzD+EpUaIq5WdbGUkesxx2RbKtKfEoZpCsTWm2f4+EgVixcYi3PUxwrqG t8X0dOPq3HagbmoOUSpEOcgZ1KrOPAM= -----END CERTIFICATE-----Generated at Wed May 13 14:55:02 2026 by rpki-client