$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/c7f45504-5453-3fc8-bae9-5b1687268202.roa File: c7f45504-5453-3fc8-bae9-5b1687268202.roa (raw, json) Hash identifier: eWwBuJU4xGzoUKzMeXTEl57qXz20BoGM0F8kKbrZHdE= Subject key identifier: 5C:53:7E:34:10:BC:80:BE:9B:F2:49:D3:A5:19:F8:9A:76:8D:05:40 Certificate issuer: /CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Certificate serial: 010D0C9F4328584DF0AB4B9ADD74F84323C41600 Authority key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/c7f45504-5453-3fc8-bae9-5b1687268202.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 399446 IP address blocks: 209.209.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:4b:9a:dd:74:f8:43:23:c4:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=e5901140-4b0c-4e91-833b-5cb034a55c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:4b:31:6c:9c:43:85:6e:8b:a6:01:0a:06: 9f:b3:06:24:0a:ca:6a:96:b2:08:2c:39:73:1c:0a: 09:45:e4:8d:2a:24:36:72:cc:d3:f6:ba:85:96:75: f4:1d:ce:d0:52:64:b0:bd:75:72:7b:54:f2:4e:f2: ba:63:02:77:3e:a0:ee:81:ac:82:58:f6:ec:45:3a: 18:f1:4e:30:c0:66:ac:f7:0b:a8:87:9b:98:65:03: 78:66:0f:d6:79:21:0b:1b:c8:27:18:71:2f:93:41: 4f:ec:47:9f:8d:20:47:25:4f:50:cd:a3:71:f4:ac: 14:31:1d:b4:c0:3e:4e:4e:cd:ff:95:f9:0f:d6:b7: f2:2a:9f:bd:76:7a:cf:18:99:ad:9d:8d:13:88:17: 8c:51:f3:08:66:83:14:e8:36:fc:ec:ad:ac:6b:27: 7e:43:47:0b:96:11:b9:fa:f4:6d:64:c0:58:30:33: 8c:bf:11:94:0b:61:9a:82:73:74:c3:49:7a:23:3f: 3c:f3:3b:08:e2:1c:21:5f:20:95:48:2e:a0:98:17: e2:a9:46:dc:c0:ba:5a:44:d2:7e:f4:cf:f8:2c:a2: aa:0f:37:24:3e:b3:f5:b5:d1:70:9b:50:7e:e3:62: 6f:63:ed:4a:9e:a9:2b:15:94:95:1b:eb:d3:5d:09: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:7E:34:10:BC:80:BE:9B:F2:49:D3:A5:19:F8:9A:76:8D:05:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/c7f45504-5453-3fc8-bae9-5b1687268202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl X509v3 Authority Key Identifier: keyid:A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer sbgp-ipAddrBlock: critical IPv4: 209.209.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:62:f4:0b:69:31:72:83:36:99:27:89:90:41:1e:2c:1b:9f: 36:fc:6c:8b:ff:ec:67:f5:e8:92:9e:5d:65:87:ed:0b:46:cd: 19:67:7b:d9:df:bf:b9:b4:79:aa:a3:57:6f:c9:e4:55:91:3d: 84:91:1e:24:26:51:c9:02:95:42:08:6c:aa:fb:9f:e2:c0:56: 0d:3f:3c:fb:97:90:55:8f:a1:92:fa:0a:e2:73:09:1f:67:cf: 85:3f:0c:22:c0:cc:40:28:3d:16:d5:a9:7b:5c:a4:24:d3:5e: 96:ec:9f:1e:da:c2:77:86:87:8d:24:2c:95:3a:6e:ed:1d:7f: 34:f3:dd:2b:80:3f:fc:c8:f5:08:54:71:77:45:b4:68:82:bc: 24:92:c8:5a:3e:7b:29:59:68:1e:08:8c:1c:bc:b7:0d:a9:c6: 28:cd:67:9b:1f:61:62:87:03:9e:fc:9e:56:9e:dc:09:23:48: 09:8c:38:82:e1:68:b0:b3:33:14:18:d8:ee:92:b0:db:ec:06: 38:3d:bc:88:e1:c4:01:62:41:19:a5:5a:14:ca:23:60:b8:12: e4:c0:c7:87:6d:fe:07:4b:ab:c7:0a:02:a2:e8:0f:55:55:0d: 23:ac:64:4d:82:5b:1a:07:6f:f4:10:e1:a6:a4:ee:62:1f:e7: ec:7f:39:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0ua3XT4QyPEFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4 NWE3MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk ZTU5MDExNDAtNGIwYy00ZTkxLTgzM2ItNWNiMDM0YTU1YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzstLMWycQ4Vui6YBCgafswYkCspqlrIILDlz HAoJReSNKiQ2cszT9rqFlnX0Hc7QUmSwvXVye1TyTvK6YwJ3PqDugayCWPbsRToY 8U4wwGas9wuoh5uYZQN4Zg/WeSELG8gnGHEvk0FP7EefjSBHJU9QzaNx9KwUMR20 wD5OTs3/lfkP1rfyKp+9dnrPGJmtnY0TiBeMUfMIZoMU6Db87K2sayd+Q0cLlhG5 +vRtZMBYMDOMvxGUC2GagnN0w0l6Iz888zsI4hwhXyCVSC6gmBfiqUbcwLpaRNJ+ 9M/4LKKqDzckPrP1tdFwm1B+42JvY+1KnqkrFZSVG+vTXQnWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxTfjQQvIC+m/JJ06UZ+Jp2jQVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0 MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvYzdmNDU1MDQtNTQ1My0z ZmM4LWJhZTktNWIxNjg3MjY4MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWIxNDA5NmEtZjhhYS00ODU2LTli MDktZGIzMDM0Zjg4NWE3LzFiMTQwOTZhLWY4YWEtNDg1Ni05YjA5LWRiMzAzNGY4 ODVhNy5jcmwwHwYDVR0jBBgwFoAUqMwXTYfOlyHGbxrZhme3ykGC7x8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMw MzRmODg1YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChi9AtpMXKDNpkniZBBHiwbnzb8bIv/7Gf16JKeXWWH7QtGzRlne9nf v7m0eaqjV2/J5FWRPYSRHiQmUckClUIIbKr7n+LAVg0/PPuXkFWPoZL6CuJzCR9n z4U/DCLAzEAoPRbVqXtcpCTTXpbsnx7awneGh40kLJU6bu0dfzTz3SuAP/zI9QhU cXdFtGiCvCSSyFo+eylZaB4IjBy8tw2pxijNZ5sfYWKHA578nlae3AkjSAmMOILh aLCzMxQY2O6SsNvsBjg9vIjhxAFiQRmlWhTKI2C4EuTAx4dt/gdLq8cKAqLoD1VV DSOsZE2CWxoHb/QQ4aak7mIf5+x/ObM= -----END CERTIFICATE-----Generated at Mon Jun 1 22:30:06 2026 by rpki-client