$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa File: 8d49b5f3-420f-3eb8-b537-40a6e2988035.roa (raw, json) Hash identifier: xD0kIuDxG9iYq9inP8F1KE1AQNZ5ZUjfzYTiQ3CQIxI= Subject key identifier: 40:2A:41:F0:68:EE:6D:B2:7E:9A:7C:B6:66:59:F8:7C:1B:11:C0:DA Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Certificate serial: 010D0C9F4328584D9325434CF35DEB766D49BE80 Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 13213 IP address blocks: 209.95.32.0/20 maxlen: 24 209.95.48.0/23 maxlen: 24 209.95.54.0/23 maxlen: 24 209.95.56.0/24 maxlen: 24 209.95.58.0/23 maxlen: 24 209.95.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:43:4c:f3:5d:eb:76:6d:49:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=cc8a1ea6-d516-4cd3-ae37-750c1786e3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:9f:f2:93:79:24:e9:68:69:d8:a2:3a:dd: b2:60:6c:45:e7:de:a4:f0:0d:0e:4c:97:f1:64:47: 74:0d:79:6e:e6:5f:ca:68:2a:00:80:63:ac:14:19: cc:b5:10:0b:62:a6:62:8a:48:83:37:c7:8b:23:0f: 86:3d:b0:7e:f3:1e:ce:c5:a8:1a:e3:c9:7a:a8:a8: a5:45:27:9c:f6:b8:b1:b6:ab:e0:96:1a:2d:a0:0b: 21:28:4b:e3:30:38:56:b1:3d:55:66:e3:5f:dc:36: 2f:04:60:0a:7f:23:3d:75:8c:c2:de:f9:0a:03:a7: da:be:dc:34:b7:2a:41:0e:2a:de:82:c2:1c:7b:e8: 27:de:18:98:43:f8:53:3b:2b:c9:e1:a5:44:a2:da: 3c:1b:2d:e8:fd:e6:03:fc:28:96:c2:7f:6f:39:1d: 8e:82:34:5a:75:a0:cb:a8:c0:3c:f1:dc:0c:40:e4: d2:20:a7:fc:c2:6c:8f:88:24:4a:49:c7:ff:8b:61: f1:91:6a:4c:f6:28:00:c8:33:d6:5f:f2:5b:62:c9: a4:09:ab:0b:0b:63:d0:0a:a1:26:92:89:2e:7b:42: 0c:f8:0c:e5:af:ca:a3:8b:09:b3:78:89:8f:18:12: c2:ac:9d:86:c9:5b:f9:82:be:44:f8:3a:15:0e:5c: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:41:F0:68:EE:6D:B2:7E:9A:7C:B6:66:59:F8:7C:1B:11:C0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl X509v3 Authority Key Identifier: keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer sbgp-ipAddrBlock: critical IPv4: 209.95.32.0-209.95.49.255 209.95.54.0-209.95.56.255 209.95.58.0/23 209.95.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d0:94:6d:d0:ac:8e:08:40:bc:50:5a:c7:74:53:88:b0:fd: 5d:66:b0:6b:64:0c:9d:b7:a7:03:ae:e7:ec:93:e3:15:36:71: 2b:24:e5:db:c9:9f:b3:ab:46:85:b2:fc:92:68:51:40:9b:63: b5:0d:9b:76:9a:41:41:5d:30:d8:ef:59:b4:7b:a2:74:8e:dd: 52:65:b1:c2:45:93:0b:d7:04:e6:11:f5:7d:db:12:49:3f:94: 3e:03:7c:0a:02:46:5b:c0:66:b5:8c:fb:a5:c0:97:02:fc:97: 16:ca:f3:27:5c:af:08:c6:b4:f3:f4:bc:c5:7f:f5:3f:dc:3c: 66:ba:b4:1c:c5:f5:07:0d:d3:d8:c1:e2:20:19:c2:72:10:b0: b6:89:95:96:ac:cd:a8:77:6a:92:27:32:23:35:f7:a0:20:a6: 2b:66:bb:66:53:e3:81:12:83:a7:b0:32:cc:30:89:2d:5f:d8: 45:6f:83:07:ae:7e:82:28:f6:db:29:ae:05:a9:68:96:af:5e: 64:20:99:b7:89:da:9b:b7:f0:43:90:7e:2b:cd:a5:84:9d:5d: 28:a6:71:eb:3e:72:4f:94:10:59:13:d7:75:da:75:3a:bb:ce: e7:3a:75:35:79:f2:ef:e4:77:4e:3d:46:44:10:a7:97:d4:18: bf:12:b1:37 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE2TJUNM813rdm1JvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi MDNmMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2M4YTFlYTYtZDUxNi00Y2QzLWFlMzctNzUwYzE3ODZlM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRSf8pN5JOloadiiOt2yYGxF596k8A0OTJfx ZEd0DXlu5l/KaCoAgGOsFBnMtRALYqZiikiDN8eLIw+GPbB+8x7Oxaga48l6qKil RSec9rixtqvglhotoAshKEvjMDhWsT1VZuNf3DYvBGAKfyM9dYzC3vkKA6favtw0 typBDiregsIce+gn3hiYQ/hTOyvJ4aVEoto8Gy3o/eYD/CiWwn9vOR2OgjRadaDL qMA88dwMQOTSIKf8wmyPiCRKScf/i2HxkWpM9igAyDPWX/JbYsmkCasLC2PQCqEm kokue0IM+Azlr8qjiwmzeImPGBLCrJ2GyVv5gr5E+DoVDlxVGwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFEAqQfBo7m2yfpp8tmZZ+HwbEcDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGQ0OWI1ZjMtNDIwZi0z ZWI4LWI1MzctNDBhNmUyOTg4MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh Yzc1ZWIwM2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAXRXyAD BAHRXzAwDAMEAdFfNgMEANFfOAMEAdFfOgMEANFfPTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT0JRt0KyO CEC8UFrHdFOIsP1dZrBrZAydt6cDrufsk+MVNnErJOXbyZ+zq0aFsvySaFFAm2O1 DZt2mkFBXTDY71m0e6J0jt1SZbHCRZML1wTmEfV92xJJP5Q+A3wKAkZbwGa1jPul wJcC/JcWyvMnXK8IxrTz9LzFf/U/3DxmurQcxfUHDdPYweIgGcJyELC2iZWWrM2o d2qSJzIjNfegIKYrZrtmU+OBEoOnsDLMMIktX9hFb4MHrn6CKPbbKa4FqWiWr15k IJm3idqbt/BDkH4rzaWEnV0opnHrPnJPlBBZE9d12nU6u87nOnU1efLv5HdOPUZE EKeX1Bi/ErE3 -----END CERTIFICATE-----Generated at Sun May 3 23:45:07 2026 by rpki-client