$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cb55b7d-d789-3ca2-bfa5-da20d1a799ca.roa File: 1cb55b7d-d789-3ca2-bfa5-da20d1a799ca.roa (raw, json) Hash identifier: ciS3wT3ZM/tadGWmtIVca+K1BOMOLx6h9nR3Z7k9sck= Subject key identifier: 32:53:F9:56:86:3F:43:F8:59:3D:2C:5C:D2:9C:70:F1:5B:E3:E0:8F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D97555E78B1FD7D0993C22B40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cb55b7d-d789-3ca2-bfa5-da20d1a799ca.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 28173 IP address blocks: 209.14.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:5e:78:b1:fd:7d:09:93:c2:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=9fef8366-2a6d-4d78-8a8e-cc80ef973fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:06:7c:a8:0e:58:49:01:63:95:57:d3:4a: 0a:5a:8e:f0:30:3a:5e:70:e8:23:96:00:43:31:0f: 70:b2:93:92:b1:96:89:ef:e6:c3:1a:7d:92:a3:15: a8:aa:51:2a:57:2f:93:41:5d:82:77:89:ce:9a:11: 58:20:9c:99:1c:9e:11:06:0f:96:bc:14:4e:30:0a: df:a2:78:00:ef:f9:55:57:e2:a9:ad:6f:f0:ab:eb: 98:9b:45:c6:a9:ac:8b:d4:e7:cb:7e:82:d7:95:bf: 77:8e:af:82:42:35:98:a5:c1:53:36:11:bc:1b:f7: 60:68:96:52:4d:49:71:94:f4:26:a4:71:fb:a5:de: 70:94:a8:b6:d2:14:34:0b:67:71:d8:b2:fc:ec:e1: 8a:46:1e:1f:3e:d5:84:c6:c8:53:9a:b6:fd:e2:79: dc:4b:9a:38:9f:8a:8f:d2:1e:10:1b:dc:b8:13:53: 99:69:b0:9c:a7:83:8e:90:a5:3a:5b:0f:c8:cd:24: a5:83:59:f9:7a:58:3c:eb:93:66:e9:6f:18:0c:fd: 5f:c9:0c:fb:12:47:7a:60:36:ae:66:3c:cb:e5:46: 0c:ff:be:b8:f7:93:ab:52:5a:d5:69:a6:0c:2c:2a: 32:2e:f1:ec:57:95:77:04:a7:0b:af:e1:87:7d:b7: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:53:F9:56:86:3F:43:F8:59:3D:2C:5C:D2:9C:70:F1:5B:E3:E0:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cb55b7d-d789-3ca2-bfa5-da20d1a799ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.14.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f9:47:b5:9e:d2:5b:9b:5c:98:ce:e8:3a:6e:47:fa:e9:4d: a4:ed:48:b3:a5:a3:41:bf:25:59:d0:24:7c:38:8f:37:1e:b0: 91:13:c9:d6:21:e3:45:17:76:40:f2:a5:61:f8:70:9b:61:a6: ec:49:9a:31:5c:d4:3e:49:cd:14:cb:4e:08:ae:ae:f7:c4:5c: dc:2d:3f:38:ba:0f:01:5a:b3:77:ac:25:90:4d:31:79:18:9b: 53:46:86:f8:08:86:5f:b5:92:46:8f:12:1e:48:4e:36:cd:8a: 45:e3:ba:10:e1:07:dd:6e:25:62:39:ad:d6:9b:54:df:f7:37: 7e:8f:8a:2b:6a:97:d4:67:bf:b0:92:d5:d2:d7:f4:60:7b:1d: bb:6f:17:da:97:cf:2e:94:0e:a8:a3:32:2d:8b:39:bc:c2:4f: ef:b7:e6:b4:d8:ba:25:d8:d8:e7:ff:df:ae:ae:3a:ee:72:23: 32:1e:14:77:aa:fb:47:80:8f:15:67:47:4a:8c:2e:f7:1d:6b: 16:61:19:8f:ed:d4:7f:21:8f:68:06:06:5a:a4:d4:7d:16:ce: ab:d6:d4:40:7b:16:3b:5a:3f:9e:80:70:47:28:0c:32:27:34: 9e:31:eb:ae:b6:06:c8:24:63:56:76:d8:d5:b7:80:04:9e:60: 1c:43:e8:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVV54sf19CZPCK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk OWZlZjgzNjYtMmE2ZC00ZDc4LThhOGUtY2M4MGVmOTczZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuroGfKgOWEkBY5VX00oKWo7wMDpecOgjlgBD MQ9wspOSsZaJ7+bDGn2SoxWoqlEqVy+TQV2Cd4nOmhFYIJyZHJ4RBg+WvBROMArf ongA7/lVV+KprW/wq+uYm0XGqayL1OfLfoLXlb93jq+CQjWYpcFTNhG8G/dgaJZS TUlxlPQmpHH7pd5wlKi20hQ0C2dx2LL87OGKRh4fPtWExshTmrb94nncS5o4n4qP 0h4QG9y4E1OZabCcp4OOkKU6Ww/IzSSlg1n5elg865Nm6W8YDP1fyQz7Ekd6YDau ZjzL5UYM/76495OrUlrVaaYMLCoyLvHsV5V3BKcLr+GHfbfA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJT+VaGP0P4WT0sXNKccPFb4+CPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWNiNTViN2QtZDc4OS0z Y2EyLWJmYTUtZGEyMGQxYTc5OWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Q6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI35R7We0lubXJjO6DpuR/rpTaTtSLOlo0G/JVnQJHw4jzcesJETydYh 40UXdkDypWH4cJthpuxJmjFc1D5JzRTLTgiurvfEXNwtPzi6DwFas3esJZBNMXkY m1NGhvgIhl+1kkaPEh5ITjbNikXjuhDhB91uJWI5rdabVN/3N36Piitql9Rnv7CS 1dLX9GB7HbtvF9qXzy6UDqijMi2LObzCT++35rTYuiXY2Of/366uOu5yIzIeFHeq +0eAjxVnR0qMLvcdaxZhGY/t1H8hj2gGBlqk1H0WzqvW1EB7FjtaP56AcEcoDDIn NJ4x6662BsgkY1Z22NW3gASeYBxD6Lw= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:23 2026 by rpki-client