$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa File: 41766a1e-0f8c-35c8-9622-569efdfd5660.roa (raw, json) Hash identifier: 5aOrs7N5ZRJ88TLKFDK1hmTTXBzJGbbbjFiC/GPhhL4= Subject key identifier: 65:C5:81:B5:C8:02:29:27:82:A8:89:6E:99:5E:F7:37:8D:6D:41:2C Certificate issuer: /CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Certificate serial: 010D0C9F4328584DF0AB4BA983A7066F01186EC0 Authority key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 399446 IP address blocks: 209.151.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:4b:a9:83:a7:06:6f:01:18:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=b7c63af5-bc51-4a41-8ad6-496a4c98e5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:9d:45:83:2c:e5:58:fb:be:50:63:00:f0: 75:ad:31:5e:14:5d:52:82:06:ae:54:69:6f:2f:c6: 36:a5:26:72:8d:09:d7:95:58:ee:93:2a:b5:99:79: 27:d7:5b:b1:fc:ef:e8:e9:21:99:b7:27:99:5e:a5: 33:1b:09:5b:a3:ba:00:16:56:ec:b8:da:38:69:d2: 5b:9a:da:2f:c1:a0:2a:ce:e7:fd:7e:14:7a:94:e2: 63:a0:c2:56:9e:5d:44:d5:55:60:14:56:37:b9:a0: d1:e3:2c:04:2c:ae:5d:1f:41:9f:de:55:0d:6f:db: 78:db:a1:5c:3e:a2:e1:67:e9:c7:c1:13:26:82:37: ba:38:f3:89:e8:6e:be:ad:e4:ff:e2:90:1b:5a:7e: 11:75:a1:f3:2f:34:2a:c5:20:d9:77:20:0e:a5:2a: ea:fa:b4:12:dd:d4:58:9c:f4:e1:4b:26:43:6f:d1: a5:bb:a9:d0:f5:04:48:62:3f:fd:f0:68:97:10:35: 9d:25:9d:0e:f1:fc:8d:b7:89:47:c1:8a:b7:c1:b4: 9d:eb:8f:02:87:f9:4e:66:aa:b1:94:a3:f0:aa:18: e7:f7:b9:bb:b7:1d:c3:d2:73:45:7e:77:5c:b7:cd: 60:c4:a6:bd:70:49:a4:a8:8a:7f:35:8a:af:37:ac: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C5:81:B5:C8:02:29:27:82:A8:89:6E:99:5E:F7:37:8D:6D:41:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl X509v3 Authority Key Identifier: keyid:A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer sbgp-ipAddrBlock: critical IPv4: 209.151.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f1:9b:2a:2b:c8:56:dc:e9:9a:96:c0:83:5f:86:25:24:0d: 6f:0e:eb:5c:21:6c:36:4c:6d:a9:1b:d3:9c:b9:54:76:f0:c1: c0:ec:b2:7a:11:cd:d1:ba:2f:d2:b1:13:37:b5:71:27:55:17: 78:5f:20:16:6e:b6:4f:6c:a7:8f:a1:06:e2:b3:74:5c:65:99: ee:20:49:3b:29:1f:52:05:cf:e3:1a:d4:78:da:d2:2f:47:b0: cb:ab:aa:6f:93:c1:65:be:e2:4d:c3:15:f8:77:1b:e3:bd:a2: 55:09:eb:ab:04:6c:86:b6:b2:e5:f6:ba:a6:04:be:6e:c9:ac: d3:09:6e:f8:51:c2:e0:cf:39:88:c6:f2:72:b1:ef:2b:be:c8: b5:5f:12:9e:bb:43:84:79:22:cd:fe:2d:70:1a:55:5a:8c:a4: 2a:c4:ae:00:49:18:54:b8:51:f7:43:2b:01:ea:cc:cf:2f:62: f9:d0:26:76:51:8c:99:ed:82:29:02:c7:1c:5f:b1:ae:13:32: 9b:d9:57:61:29:c8:49:6d:3b:f7:b8:7b:88:8c:4a:09:34:30: 2f:da:70:6e:3d:96:f9:a0:a3:51:9a:c4:41:21:3c:4f:4b:1c: 58:2a:e0:16:01:78:53:50:e3:5f:6f:60:29:0c:01:80:2c:f0: 7b:d7:bd:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0upg6cGbwEYbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4 NWE3MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk YjdjNjNhZjUtYmM1MS00YTQxLThhZDYtNDk2YTRjOThlNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnmdRYMs5Vj7vlBjAPB1rTFeFF1SggauVGlv L8Y2pSZyjQnXlVjukyq1mXkn11ux/O/o6SGZtyeZXqUzGwlbo7oAFlbsuNo4adJb mtovwaAqzuf9fhR6lOJjoMJWnl1E1VVgFFY3uaDR4ywELK5dH0Gf3lUNb9t426Fc PqLhZ+nHwRMmgje6OPOJ6G6+reT/4pAbWn4RdaHzLzQqxSDZdyAOpSrq+rQS3dRY nPThSyZDb9Glu6nQ9QRIYj/98GiXEDWdJZ0O8fyNt4lHwYq3wbSd648Ch/lOZqqx lKPwqhjn97m7tx3D0nNFfndct81gxKa9cEmkqIp/NYqvN6zKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXFgbXIAikngqiJbple9zeNbUEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0 MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvNDE3NjZhMWUtMGY4Yy0z NWM4LTk2MjItNTY5ZWZkZmQ1NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWIxNDA5NmEtZjhhYS00ODU2LTli MDktZGIzMDM0Zjg4NWE3LzFiMTQwOTZhLWY4YWEtNDg1Ni05YjA5LWRiMzAzNGY4 ODVhNy5jcmwwHwYDVR0jBBgwFoAUqMwXTYfOlyHGbxrZhme3ykGC7x8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMw MzRmODg1YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjxmyoryFbc6ZqWwINfhiUkDW8O61whbDZMbakb05y5VHbwwcDssnoR zdG6L9KxEze1cSdVF3hfIBZutk9sp4+hBuKzdFxlme4gSTspH1IFz+Ma1Hja0i9H sMurqm+TwWW+4k3DFfh3G+O9olUJ66sEbIa2suX2uqYEvm7JrNMJbvhRwuDPOYjG 8nKx7yu+yLVfEp67Q4R5Is3+LXAaVVqMpCrErgBJGFS4UfdDKwHqzM8vYvnQJnZR jJntgikCxxxfsa4TMpvZV2EpyEltO/e4e4iMSgk0MC/acG49lvmgo1GaxEEhPE9L HFgq4BYBeFNQ419vYCkMAYAs8HvXvZ4= -----END CERTIFICATE-----Generated at Mon Jun 1 22:28:49 2026 by rpki-client