$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa File: 0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa (raw, json) Hash identifier: FheigZy2Kj4fIsoK5Qe8dHbdEoUaafx6R0XBUL4TZ4E= Subject key identifier: 36:E3:97:82:4D:E5:DF:FF:B7:8C:79:0A:B1:99:AB:F8:72:89:91:D1 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584DEDE08AD12AF68FB73065CB58 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 834 IP address blocks: 209.51.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:8a:d1:2a:f6:8f:b7:30:65:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=1392aa75-6cbd-44e9-894a-f9d967521e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:4f:3b:61:a3:a6:98:16:6f:64:e5:32:e8: a8:79:c1:6c:bf:29:d4:ab:6d:c4:5e:51:b3:d6:0c: dd:0e:45:c6:f9:87:ba:21:78:aa:ea:7f:f0:10:cf: 64:b5:54:ef:fd:5e:24:42:c1:64:5f:51:70:c7:bb: 98:1a:36:bd:c6:08:df:00:a1:25:57:c7:33:e6:01: 30:b5:c6:88:06:46:60:f2:a6:7b:9d:e9:fe:4a:e3: 41:9c:93:a6:47:cc:2c:c4:eb:87:27:4b:e2:5d:eb: 64:1c:66:1c:7e:8e:a3:84:ba:e0:3b:88:7e:63:78: 5b:b3:8c:a7:8b:e6:52:e5:4c:e3:fe:8a:41:81:da: 6a:e3:3d:b3:be:af:61:c5:c9:f7:6f:cb:2b:8b:d6: 17:18:5b:78:31:2c:f7:2e:4d:6d:e5:2f:6a:a2:45: 66:89:44:2e:37:fc:b8:42:ad:90:bc:d3:21:8a:37: aa:d9:5f:18:81:95:1f:7c:76:2c:3e:12:c6:12:82: 71:82:3a:63:84:b1:11:44:f9:d0:ed:49:56:78:ef: 23:17:30:c9:d3:07:9d:5f:40:2d:06:c0:d3:43:97: 39:e0:92:66:4a:a3:9b:34:ad:a2:08:5b:48:34:a4: 3a:2e:6a:cf:33:15:4c:15:c5:75:03:0f:9c:fd:2a: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E3:97:82:4D:E5:DF:FF:B7:8C:79:0A:B1:99:AB:F8:72:89:91:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8f:67:86:63:20:27:d6:a0:84:36:9b:8e:05:ae:e6:7e:75: 01:6d:ac:ed:9c:27:5f:fa:c9:e4:b7:1b:e8:38:dd:d6:85:92: 3b:fb:c4:17:d9:8a:30:c7:c3:63:e0:39:41:09:73:95:31:dc: 12:21:fe:93:f4:83:a2:df:27:49:7d:28:05:55:86:b0:86:07: 56:46:88:b2:a3:ad:fe:21:03:6b:22:48:8c:d3:17:69:2f:ea: 67:69:72:34:56:4d:8b:b2:1b:d2:0e:b5:3c:ab:1c:b1:4d:6e: b5:b1:c4:cf:e6:ba:1f:0a:ee:dd:3c:9c:35:a5:93:15:c0:5b: b2:94:d7:da:52:c8:29:af:cf:24:1e:da:27:94:51:35:10:58: 8e:0a:52:90:76:f3:0c:44:77:82:dc:1e:30:bc:2b:1c:15:6d: db:f0:34:1c:07:17:2a:3e:d2:9d:0b:1b:49:83:78:cd:cb:d3: e9:55:3f:77:2b:79:c5:ff:ee:a8:0c:b1:11:5e:7c:3e:10:d4: 4b:fd:d3:0f:7d:d1:a0:d8:61:13:9c:20:ac:a2:71:ef:e3:cf: 38:2c:3f:78:1e:e6:79:f7:a2:b0:5c:ba:06:65:9a:40:8c:52: ae:78:7a:fc:ad:b4:9f:d4:70:af:77:bd:35:e3:00:1d:63:af: 2b:24:a7:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4IrRKvaPtzBly1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk MTM5MmFhNzUtNmNiZC00NGU5LTg5NGEtZjlkOTY3NTIxZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWxPO2GjppgWb2TlMuioecFsvynUq23EXlGz 1gzdDkXG+Ye6IXiq6n/wEM9ktVTv/V4kQsFkX1Fwx7uYGja9xgjfAKElV8cz5gEw tcaIBkZg8qZ7nen+SuNBnJOmR8wsxOuHJ0viXetkHGYcfo6jhLrgO4h+Y3hbs4yn i+ZS5Uzj/opBgdpq4z2zvq9hxcn3b8sri9YXGFt4MSz3Lk1t5S9qokVmiUQuN/y4 Qq2QvNMhijeq2V8YgZUffHYsPhLGEoJxgjpjhLERRPnQ7UlWeO8jFzDJ0wedX0At BsDTQ5c54JJmSqObNK2iCFtINKQ6LmrPMxVMFcV1Aw+c/So3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbjl4JN5d//t4x5CrGZq/hyiZHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMGYzNDI5ZDgtNTYyNS0z MjE3LTg1YzItMDE1ZTBiOGFhZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiPZ4ZjICfWoIQ2m44FruZ+dQFtrO2cJ1/6yeS3G+g43daFkjv7xBfZ ijDHw2PgOUEJc5Ux3BIh/pP0g6LfJ0l9KAVVhrCGB1ZGiLKjrf4hA2siSIzTF2kv 6mdpcjRWTYuyG9IOtTyrHLFNbrWxxM/muh8K7t08nDWlkxXAW7KU19pSyCmvzyQe 2ieUUTUQWI4KUpB28wxEd4LcHjC8KxwVbdvwNBwHFyo+0p0LG0mDeM3L0+lVP3cr ecX/7qgMsRFefD4Q1Ev90w990aDYYROcIKyice/jzzgsP3ge5nn3orBcugZlmkCM Uq54evyttJ/UcK93vTXjAB1jryskp7I= -----END CERTIFICATE-----Generated at Tue May 26 08:36:32 2026 by rpki-client