$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa File: 24ee7603-c18e-3075-87a3-2e79abe90370.roa (raw, json) Hash identifier: /SUJpS/Pw8ChwJlAWpPuhYRbraNOozVwgLCApfCuRA0= Subject key identifier: 9E:B6:83:61:EF:C8:AD:11:AE:39:7B:4C:40:E8:22:10:2D:6D:07:32 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584DA8157D629277126A5E9BFB50 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 209.114.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:7d:62:92:77:12:6a:5e:9b:fb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=8b356990-a526-478d-9e64-b07aabb52b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:9c:1b:eb:15:2a:f0:9c:b5:e7:c1:1b:cb: 1f:95:67:fa:43:d9:d5:6a:11:fb:cc:ce:56:e3:3d: 65:cb:59:e7:1b:46:9e:4d:19:ca:9e:27:21:8c:a7: e9:ca:4a:c0:4d:11:55:f7:31:e9:e3:7e:eb:96:3d: ee:bd:3b:7a:17:84:7a:1d:91:f8:4b:8b:49:54:a8: 98:fb:aa:d4:17:9b:b5:96:b9:3c:fb:7f:23:15:43: ac:88:31:de:d0:37:c7:0e:c1:3f:16:c7:ad:7a:1d: 78:a2:06:85:f2:ad:28:3d:5b:4c:a5:66:61:ea:95: 7c:5d:2e:7b:38:0e:6e:d4:9b:90:b0:9d:6d:b1:d0: 37:52:8b:50:ce:27:94:60:db:10:fd:5f:cb:11:96: 2d:a1:54:d6:26:ca:3e:48:4e:b5:da:24:f3:4d:bb: b8:6b:c9:66:72:a1:61:b5:d2:54:c8:3a:56:01:69: db:41:59:5f:d8:09:fa:cd:ee:24:e3:58:5c:a5:f2: ca:cd:58:06:40:4e:18:d8:07:8c:10:d0:f1:86:79: 94:31:a1:47:bd:e6:2e:fd:6f:ca:0a:2d:6e:d6:f9: 36:8e:b7:97:f2:ac:3e:ce:dc:bc:3c:22:7b:2b:d3: d0:72:63:06:b8:6e:08:64:36:20:6f:b6:9d:19:be: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B6:83:61:EF:C8:AD:11:AE:39:7B:4C:40:E8:22:10:2D:6D:07:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cd:0b:09:ff:25:3d:96:7a:9e:dd:25:01:f6:40:ea:7a:8a: c7:5b:12:7d:ba:51:b1:74:51:97:d5:10:bc:7f:13:27:39:2b: 5c:8e:63:9e:21:56:07:c9:51:6b:ce:1a:a0:89:75:3f:03:d3: 4b:e9:78:e8:70:72:50:0b:fb:00:61:e3:72:1d:33:a1:1a:a2: f3:91:b5:82:0e:e5:2b:22:a8:14:0e:5b:d6:dd:38:f2:c9:7f: 62:56:ce:d7:51:67:68:f9:85:6e:40:27:75:42:dc:af:29:4e: 0f:6d:90:84:84:2d:38:31:1b:20:6a:d1:4b:e9:80:b0:ba:2a: 7a:16:cc:51:a3:43:e2:6e:12:95:a6:a1:da:96:c0:cf:5d:62: ad:81:49:36:27:06:c5:fa:a5:96:a7:ec:a3:83:43:15:ba:72: 04:37:d4:90:b5:30:2c:11:36:4e:63:9a:c0:68:6d:02:ad:a1: 7e:a8:ac:22:7d:a7:5a:2d:d1:3c:42:dc:c4:4a:e0:3b:74:33: 19:b8:03:88:f2:27:3a:19:21:df:37:dc:63:40:87:5f:65:f2: 7e:08:f3:a9:ae:b8:e0:04:3d:85:a2:50:6b:dd:95:2d:1f:48: 24:6f:e3:f6:22:f2:8e:28:c7:5a:64:ca:20:8c:df:93:41:68: 9c:87:68:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFX1ikncSal6b+1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk OGIzNTY5OTAtYTUyNi00NzhkLTllNjQtYjA3YWFiYjUyYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPGcG+sVKvCctefBG8sflWf6Q9nVahH7zM5W 4z1ly1nnG0aeTRnKnichjKfpykrATRFV9zHp437rlj3uvTt6F4R6HZH4S4tJVKiY +6rUF5u1lrk8+38jFUOsiDHe0DfHDsE/Fseteh14ogaF8q0oPVtMpWZh6pV8XS57 OA5u1JuQsJ1tsdA3UotQzieUYNsQ/V/LEZYtoVTWJso+SE612iTzTbu4a8lmcqFh tdJUyDpWAWnbQVlf2An6ze4k41hcpfLKzVgGQE4Y2AeMENDxhnmUMaFHveYu/W/K Ci1u1vk2jreX8qw+zty8PCJ7K9PQcmMGuG4IZDYgb7adGb5lQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ62g2HvyK0Rrjl7TEDoIhAtbQcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMjRlZTc2MDMtYzE4ZS0z MDc1LTg3YTMtMmU3OWFiZTkwMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXNCwn/JT2Wep7dJQH2QOp6isdbEn26UbF0UZfVELx/Eyc5K1yOY54h VgfJUWvOGqCJdT8D00vpeOhwclAL+wBh43IdM6EaovORtYIO5SsiqBQOW9bdOPLJ f2JWztdRZ2j5hW5AJ3VC3K8pTg9tkISELTgxGyBq0UvpgLC6KnoWzFGjQ+JuEpWm odqWwM9dYq2BSTYnBsX6pZan7KODQxW6cgQ31JC1MCwRNk5jmsBobQKtoX6orCJ9 p1ot0TxC3MRK4Dt0Mxm4A4jyJzoZId833GNAh19l8n4I86muuOAEPYWiUGvdlS0f SCRv4/Yi8o4ox1pkyiCM35NBaJyHaKU= -----END CERTIFICATE-----Generated at Wed May 13 12:33:48 2026 by rpki-client