$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa File: 8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa (raw, json) Hash identifier: 5aM8KceadxZyFzN2HzBFObh2QLPlUfjufzvaPScIfb8= Subject key identifier: C2:42:4D:08:49:BB:5B:58:4A:83:DA:58:01:03:C5:44:55:90:45:42 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584DADAAD12CA1D3A73773A0C230 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 204.239.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d1:2c:a1:d3:a7:37:73:a0:c2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=ad3b27e3-6cf9-42f8-8ada-d862f37d5203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:53:33:24:5d:29:e6:fe:2e:00:9b:61:2c: 1e:f9:c0:49:07:94:bf:91:7a:31:c8:b8:47:24:50: 81:9b:c2:25:98:f5:60:c9:a2:07:5c:c4:e7:c8:92: 2c:6e:03:f6:3a:16:ef:37:13:96:20:ff:81:89:9f: f8:a9:68:c8:6f:7a:98:45:6b:45:b5:f0:33:30:4f: 1f:fa:e3:44:87:47:45:1f:ce:27:0f:5c:e1:f9:58: fa:e6:db:70:e6:ce:10:4b:86:3f:d9:7e:00:40:c0: d4:a4:55:ed:c1:c7:6d:9e:b9:31:64:bb:9d:cb:eb: c9:ab:43:3f:d2:4f:56:8a:70:d8:53:18:55:d1:4b: 60:b3:31:a0:4a:40:54:0c:6f:69:89:77:0e:4b:9b: f0:3b:87:f1:55:ea:bd:25:b0:d9:e0:2c:4f:ac:1a: 71:02:04:85:a1:aa:d8:29:06:1c:ac:f2:a3:73:47: 76:be:ca:d2:29:3e:8b:af:f4:13:8a:d1:3c:a4:5f: e9:0d:78:c6:5b:9d:91:76:a7:ae:28:e3:3c:b5:1a: 0e:7c:d1:97:b5:64:40:d3:2b:ad:af:61:6f:65:76: f0:af:e9:0f:08:62:d2:0a:c9:08:d6:57:07:d2:c7: 5c:00:94:ac:b3:08:1e:5a:fc:60:33:70:73:aa:da: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:42:4D:08:49:BB:5B:58:4A:83:DA:58:01:03:C5:44:55:90:45:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 204.239.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:64:e9:d4:47:b6:32:29:74:f0:79:77:1b:b7:e4:92:00:12: 6e:a1:91:fa:87:f2:75:34:71:0a:9c:6d:b3:52:fb:74:62:31: e3:e4:bc:b9:55:31:c3:c1:da:f2:81:ab:43:04:ff:5b:d6:45: 9e:58:c3:ef:b8:a4:10:38:63:ad:09:6c:78:f6:a6:f0:a5:0c: 30:14:53:80:e0:6a:23:53:f3:d7:25:dc:f1:f5:70:f3:4f:23: 8a:ae:30:c9:62:b8:9c:e1:d5:25:c7:91:87:33:df:6b:6d:ea: 67:f2:35:82:20:14:ef:f0:98:28:c5:19:64:31:68:29:4f:9d: 9e:c2:71:7b:63:f8:3a:a6:7a:6e:33:f1:71:cf:c5:09:4d:ab: 51:db:52:df:16:78:53:36:a8:77:e2:69:1d:2f:15:c7:14:27: 2f:79:40:36:2b:b0:7b:2e:af:49:79:40:31:de:f2:79:7e:61: e8:69:9f:92:14:4c:9c:53:77:86:82:0a:36:ae:b9:27:aa:02: 01:c3:9b:52:88:11:d7:87:0f:5a:27:04:68:7e:23:e3:93:ea: c8:4d:bd:0a:ee:b3:ae:69:2a:31:f1:ee:96:22:41:fe:19:20: 03:6f:b4:99:52:88:ce:7d:85:f0:8e:7c:d3:53:a7:32:cf:c6: 5c:e2:e0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtEsodOnN3OgwjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YWQzYjI3ZTMtNmNmOS00MmY4LThhZGEtZDg2MmYzN2Q1MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkslTMyRdKeb+LgCbYSwe+cBJB5S/kXoxyLhH JFCBm8IlmPVgyaIHXMTnyJIsbgP2OhbvNxOWIP+BiZ/4qWjIb3qYRWtFtfAzME8f +uNEh0dFH84nD1zh+Vj65ttw5s4QS4Y/2X4AQMDUpFXtwcdtnrkxZLudy+vJq0M/ 0k9WinDYUxhV0UtgszGgSkBUDG9piXcOS5vwO4fxVeq9JbDZ4CxPrBpxAgSFoarY KQYcrPKjc0d2vsrSKT6Lr/QTitE8pF/pDXjGW52RdqeuKOM8tRoOfNGXtWRA0yut r2FvZXbwr+kPCGLSCskI1lcH0sdcAJSsswgeWvxgM3BzqtqsAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJCTQhJu1tYSoPaWAEDxURVkEVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvODgxNGM5YjUtODg0Ny0z ZDFhLWFhNTQtMGFiNzQyOWIyNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpk6dRHtjIpdPB5dxu35JIAEm6hkfqH8nU0cQqcbbNS+3RiMePkvLlV McPB2vKBq0ME/1vWRZ5Yw++4pBA4Y60JbHj2pvClDDAUU4DgaiNT89cl3PH1cPNP I4quMMliuJzh1SXHkYcz32tt6mfyNYIgFO/wmCjFGWQxaClPnZ7CcXtj+Dqmem4z 8XHPxQlNq1HbUt8WeFM2qHfiaR0vFccUJy95QDYrsHsur0l5QDHe8nl+Yehpn5IU TJxTd4aCCjauuSeqAgHDm1KIEdeHD1onBGh+I+OT6shNvQrus65pKjHx7pYiQf4Z IANvtJlSiM59hfCOfNNTpzLPxlzi4Kc= -----END CERTIFICATE-----Generated at Sun May 3 14:50:52 2026 by rpki-client