$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa File: 41766a1e-0f8c-35c8-9622-569efdfd5660.roa (raw, json) Hash identifier: UMCMy3qG/7azP3KxoUsD+QWlQyiPKZnfRdq7fUd9Uw8= Subject key identifier: 98:AF:DE:50:D4:2B:B3:D0:69:B8:86:A4:6A:07:61:49:0E:34:DA:2D Certificate issuer: /CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Certificate serial: 010D0C9F4328584D5234EE582423108D57AC1D80 Authority key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa Signing time: Sat 28 Mar 2026 18:44:31 +0000 ROA not before: Sat 28 Mar 2026 18:44:31 +0000 ROA not after: Wed 03 Jun 2026 11:55:22 +0000 asID: 399446 IP address blocks: 209.151.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:ee:58:24:23:10:8d:57:ac:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Validity Not Before: Mar 28 18:44:31 2026 GMT Not After : Jun 3 11:55:22 2026 GMT Subject: CN=bbf7aa57-441b-48af-94ac-a34c9d505859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:24:26:c5:15:c9:eb:40:7f:87:99:50:1f: fd:31:c8:40:ed:02:7a:95:e4:28:18:cd:c1:a5:6b: c0:d6:ec:ea:13:f3:d0:2b:c2:c4:e0:6a:17:9e:72: bc:43:b7:72:87:4f:ce:4b:9b:00:a6:ec:6f:26:0e: aa:65:3d:9e:2f:27:13:22:2d:be:f5:a3:b7:2d:36: 27:89:ca:87:4a:90:ec:12:69:f6:55:8c:df:f2:11: 53:4f:c3:25:f1:22:5b:28:d1:a4:6b:c6:ed:5a:84: e0:0d:bd:f5:a1:83:b0:4b:59:12:58:4b:3a:d4:cf: 81:7e:f1:94:8c:68:4d:8e:e6:b7:3e:1a:54:06:83: 45:ba:5a:19:89:08:cf:1c:4f:a8:1a:85:85:59:bb: ef:d1:26:3c:94:bd:e7:bb:28:85:bb:51:5f:51:72: ed:2c:c0:48:64:6f:31:73:d9:92:2e:a3:3f:f4:0b: d1:b4:57:3d:2f:3a:24:e1:2f:6b:aa:ef:bb:43:be: 9e:01:63:32:7d:a7:8f:f9:7c:b7:ca:68:d5:fd:f5: c4:38:c4:55:5e:47:f4:d8:2c:b3:23:50:d7:78:c8: e5:c2:05:c8:97:a4:a2:f8:1e:37:b8:c8:39:28:5e: 70:ee:2c:de:3e:13:55:de:c8:47:ae:f1:87:f5:07: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AF:DE:50:D4:2B:B3:D0:69:B8:86:A4:6A:07:61:49:0E:34:DA:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl X509v3 Authority Key Identifier: keyid:A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer sbgp-ipAddrBlock: critical IPv4: 209.151.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b7:95:75:33:3b:95:e4:5a:f6:af:a2:3b:67:73:d4:e2:a2: 5c:8d:42:72:55:dc:d2:f2:f1:b2:c1:a0:d8:75:87:f9:8b:b2: c8:46:9e:de:ba:93:e2:0c:37:a9:e9:b7:8b:b3:d6:e4:c2:97: dd:9d:9d:0d:ca:40:7f:54:79:22:61:ca:24:d2:60:96:72:f8: 67:85:91:1e:68:98:ff:c4:f1:85:50:97:83:a8:70:92:15:fa: 87:47:56:43:01:b8:9f:7a:df:e2:95:cc:af:61:d0:01:35:2b: 15:af:84:80:49:16:9e:8c:ab:f6:73:99:26:3f:a5:5a:0b:0d: 90:47:e0:96:4e:de:9c:7a:e4:45:ca:60:c7:a5:14:64:53:fb: 0a:ab:04:53:91:b5:a6:6d:ae:4a:7c:52:33:fe:a9:cd:fa:a2: c1:3b:b6:ab:21:5f:62:7f:27:8c:7e:aa:09:2c:61:e4:73:d1: 69:6a:f4:89:a5:a7:eb:4f:ac:e5:fb:bc:53:33:b5:48:5a:71: e4:18:13:0b:46:9e:94:d7:ed:1a:d8:9d:dd:ae:fb:a8:fe:40: 65:ad:cb:22:43:6f:ff:8f:d7:46:6b:c7:ae:05:85:f0:23:e3: b3:50:9c:29:84:27:69:0e:6d:11:4d:03:ca:88:6a:ee:8c:74: f4:a5:ad:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNO5YJCMQjVesHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4 NWE3MB4XDTI2MDMyODE4NDQzMVoXDTI2MDYwMzExNTUyMlowLzEtMCsGA1UEAxMk YmJmN2FhNTctNDQxYi00OGFmLTk0YWMtYTM0YzlkNTA1ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCckJsUVyetAf4eZUB/9MchA7QJ6leQoGM3B pWvA1uzqE/PQK8LE4GoXnnK8Q7dyh0/OS5sApuxvJg6qZT2eLycTIi2+9aO3LTYn icqHSpDsEmn2VYzf8hFTT8Ml8SJbKNGka8btWoTgDb31oYOwS1kSWEs61M+BfvGU jGhNjua3PhpUBoNFuloZiQjPHE+oGoWFWbvv0SY8lL3nuyiFu1FfUXLtLMBIZG8x c9mSLqM/9AvRtFc9Lzok4S9rqu+7Q76eAWMyfaeP+Xy3ymjV/fXEOMRVXkf02Cyz I1DXeMjlwgXIl6Si+B43uMg5KF5w7izePhNV3shHrvGH9QcvVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiv3lDUK7PQabiGpGoHYUkONNotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0 MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvNDE3NjZhMWUtMGY4Yy0z NWM4LTk2MjItNTY5ZWZkZmQ1NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWIxNDA5NmEtZjhhYS00ODU2LTli MDktZGIzMDM0Zjg4NWE3LzFiMTQwOTZhLWY4YWEtNDg1Ni05YjA5LWRiMzAzNGY4 ODVhNy5jcmwwHwYDVR0jBBgwFoAUqMwXTYfOlyHGbxrZhme3ykGC7x8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMw MzRmODg1YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA23lXUzO5XkWvavojtnc9TiolyNQnJV3NLy8bLBoNh1h/mLsshGnt66 k+IMN6npt4uz1uTCl92dnQ3KQH9UeSJhyiTSYJZy+GeFkR5omP/E8YVQl4OocJIV +odHVkMBuJ963+KVzK9h0AE1KxWvhIBJFp6Mq/ZzmSY/pVoLDZBH4JZO3px65EXK YMelFGRT+wqrBFORtaZtrkp8UjP+qc36osE7tqshX2J/J4x+qgksYeRz0Wlq9Iml p+tPrOX7vFMztUhaceQYEwtGnpTX7RrYnd2u+6j+QGWtyyJDb/+P10Zrx64FhfAj 47NQnCmEJ2kObRFNA8qIau6MdPSlrZo= -----END CERTIFICATE-----Generated at Thu Apr 9 02:25:18 2026 by rpki-client