$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa File: 8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa (raw, json) Hash identifier: xz7QStk9xlbS2W/WlfVfWKtMRJWEA0Qm8N8Q/SxixqE= Subject key identifier: 61:76:E1:B8:D9:7F:D3:11:FF:14:1C:97:E6:1A:BE:38:13:71:F6:46 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584F3052707441BE8425BF55A880 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 204.239.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:70:74:41:be:84:25:bf:55:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=52a3644a-6f43-4493-9765-5fc9c448df52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:cc:c2:b1:dd:c5:d1:a0:a2:38:d5:09:6a: 96:dc:a0:c3:cf:92:f8:37:95:80:89:6b:15:b5:fe: 7f:46:c1:1b:41:54:e5:17:d5:c8:7c:f7:3d:70:31: fd:90:f4:52:bc:3c:d5:01:aa:71:6d:5c:ff:f2:58: b0:f2:62:01:72:8e:07:e3:46:59:d4:31:23:d4:1a: 11:68:01:ec:a0:f2:39:3e:0e:c0:60:87:b9:a0:d6: 33:b9:9d:67:22:09:c2:0e:05:6e:fb:0b:c5:0b:a6: 95:a9:52:41:a7:13:2e:c4:16:6c:77:c4:b6:b3:26: 01:9f:5f:00:5b:fb:0d:25:24:55:a7:db:34:60:7e: 97:70:5a:47:1b:11:e7:46:cc:ef:60:99:36:ad:6d: d5:9f:de:e2:d6:46:bc:10:3a:dc:b7:d2:ec:e1:b4: 78:10:5f:04:30:d4:79:47:6b:7a:19:e5:65:2c:7e: 09:c5:8b:ab:1b:f4:c9:b1:d2:96:3f:91:f4:e4:df: 11:0d:49:98:5d:99:ea:74:a4:8a:83:18:87:ff:1f: 71:f1:88:dc:f1:7c:dd:60:fd:93:b1:f8:2f:74:96: 65:74:98:ca:b9:8b:5e:8a:10:9f:5b:49:00:53:cd: 39:80:b7:54:08:6a:47:4b:5d:a2:d3:78:c3:a2:78: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:76:E1:B8:D9:7F:D3:11:FF:14:1C:97:E6:1A:BE:38:13:71:F6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 204.239.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:dc:e8:e3:a5:17:86:0a:2f:da:54:f3:d8:4f:02:24:44:c1: 05:a8:99:ef:95:b9:6b:29:68:7e:7c:3b:d8:3c:11:e1:a6:a0: 5e:b6:eb:38:dc:8b:f8:34:c4:c8:72:45:25:80:67:08:b7:b8: f5:4b:6a:af:04:17:ab:49:9d:25:fd:67:5f:10:30:91:6a:37: 6c:e0:48:d1:ee:80:8d:89:cf:02:5f:82:5e:92:4f:3b:6a:da: 4d:d9:a3:17:cd:42:99:4f:2b:75:85:9f:67:9a:19:26:1e:18: 13:89:3b:df:dd:28:31:6d:86:4e:5a:de:75:b9:48:26:86:67: ab:34:55:b1:e7:35:9f:35:ff:94:9e:ba:a8:cb:0c:3e:15:e7: 79:12:27:9a:5e:fb:66:8a:51:cd:cb:39:93:4a:d5:ea:ba:e3: 24:e7:9a:12:2c:5c:2e:75:ee:b6:eb:ee:f1:3f:e2:0e:d6:c2: bd:27:d1:3b:9a:b6:dd:63:c0:9b:6b:69:d1:a2:bf:ae:d9:b4: 7c:9d:3d:fb:a7:09:5f:8e:47:da:c0:52:24:3c:b6:19:5b:55: d5:66:d6:23:34:e8:8b:c9:0d:d1:b5:f6:1d:3b:81:a9:29:d7: 62:e7:ee:05:d9:15:65:5c:46:40:91:9a:ff:8b:5d:90:2c:6b: 39:c4:6f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnB0Qb6EJb9VqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NTJhMzY0NGEtNmY0My00NDkzLTk3NjUtNWZjOWM0NDhkZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny7MwrHdxdGgojjVCWqW3KDDz5L4N5WAiWsV tf5/RsEbQVTlF9XIfPc9cDH9kPRSvDzVAapxbVz/8liw8mIBco4H40ZZ1DEj1BoR aAHsoPI5Pg7AYIe5oNYzuZ1nIgnCDgVu+wvFC6aVqVJBpxMuxBZsd8S2syYBn18A W/sNJSRVp9s0YH6XcFpHGxHnRszvYJk2rW3Vn97i1ka8EDrct9Ls4bR4EF8EMNR5 R2t6GeVlLH4JxYurG/TJsdKWP5H05N8RDUmYXZnqdKSKgxiH/x9x8Yjc8XzdYP2T sfgvdJZldJjKuYteihCfW0kAU805gLdUCGpHS12i03jDongsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF24bjZf9MR/xQcl+YavjgTcfZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvODgxNGM5YjUtODg0Ny0z ZDFhLWFhNTQtMGFiNzQyOWIyNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjc6OOlF4YKL9pU89hPAiREwQWome+VuWspaH58O9g8EeGmoF626zjc i/g0xMhyRSWAZwi3uPVLaq8EF6tJnSX9Z18QMJFqN2zgSNHugI2JzwJfgl6STztq 2k3ZoxfNQplPK3WFn2eaGSYeGBOJO9/dKDFthk5a3nW5SCaGZ6s0VbHnNZ81/5Se uqjLDD4V53kSJ5pe+2aKUc3LOZNK1eq64yTnmhIsXC517rbr7vE/4g7Wwr0n0Tua tt1jwJtradGiv67ZtHydPfunCV+OR9rAUiQ8thlbVdVm1iM06IvJDdG19h07gakp 12Ln7gXZFWVcRkCRmv+LXZAsaznEb3w= -----END CERTIFICATE-----Generated at Tue Oct 6 17:01:19 2026 by rpki-client