$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa File: 91aea890-0b43-3899-bfc5-bab3755a801e.roa (raw, json) Hash identifier: OM+LwuiD92gKvOf0XANMBP1p/2BanR5Yi6shx2fu4wg= Subject key identifier: B5:46:77:C2:B2:B2:DE:9C:6F:6B:F2:95:6E:85:E4:C2:30:8E:3A:30 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584D8EF5587C8DE2CF6EB0CF31B8 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 12129 IP address blocks: 209.124.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:58:7c:8d:e2:cf:6e:b0:cf:31:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f03a2118-b303-4ea8-97dd-a7aa1b600793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:d1:57:c7:13:eb:d6:6d:f5:37:3d:03:6d: d0:26:7c:6c:3a:38:6b:f9:6b:cd:48:21:d5:71:8a: d6:70:b5:33:fe:d4:ad:ad:3d:18:96:f3:99:9b:f1: cb:b8:a4:f8:63:9b:18:46:17:7a:36:44:7d:c6:72: b9:92:20:f7:99:da:6b:cb:9e:35:09:15:c5:e2:ea: da:41:e3:3d:21:27:c6:c8:48:ae:4a:25:7d:ce:15: 5c:85:7f:7a:40:f2:29:30:cf:a7:73:41:0e:98:cc: 15:2a:69:12:b0:47:c5:99:da:9a:9d:14:09:a7:07: 00:ba:a6:a7:b9:93:17:f8:17:df:7f:ec:bc:7b:2a: 23:e3:e5:a0:05:b6:b3:80:1c:c8:2f:73:d0:5a:13: 2e:da:8c:ed:12:5e:d1:9c:d1:e5:4f:17:5b:31:19: 37:26:cf:a8:87:ed:5f:fd:d6:f5:a9:e5:e9:ad:73: 35:d4:ce:d6:b6:e7:7a:5c:12:3f:2b:97:ab:c8:93: 53:9a:13:f4:55:2a:8b:18:85:e4:ff:06:4c:27:c4: 9c:12:03:04:8b:86:cc:e6:b7:86:cd:ea:d5:f3:e7: a5:f3:d6:86:5d:fe:62:87:d0:e7:cb:99:ea:23:df: b4:8d:b4:43:88:66:05:5f:fa:bc:48:07:c8:81:e1: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:46:77:C2:B2:B2:DE:9C:6F:6B:F2:95:6E:85:E4:C2:30:8E:3A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e1:79:29:9c:15:d7:a5:bb:61:bc:96:f3:a3:df:5b:6d:b6: f6:a5:a3:f1:42:ce:e9:59:b9:10:77:8f:b0:39:b6:e2:4b:e2: 48:d5:e8:ad:66:df:67:29:50:4f:df:86:56:d5:83:89:b3:01: 9f:d3:32:95:fa:81:c0:19:a8:d0:0d:83:c4:b0:2c:02:05:53: 74:49:83:a4:56:aa:20:6c:10:df:f7:cd:74:4e:cc:43:3e:ac: 16:d4:8f:fd:bf:71:8d:79:b5:f8:00:10:b5:d9:c2:e9:df:74: 55:6c:7c:b8:4e:dd:57:86:a4:02:cc:80:64:0e:66:2f:04:49: ad:40:91:0e:a4:d9:f9:7c:64:ea:96:8d:73:3d:0c:c4:3f:e9: 40:73:14:db:76:32:1f:35:f4:9a:4b:61:4d:ed:5f:72:cf:fc: d7:cf:fb:d5:a2:72:19:a1:27:13:31:f5:b1:2a:46:4f:9f:77: 31:50:e8:59:f3:f7:7a:5b:ef:ee:2e:a9:b5:ca:d4:1d:21:7d: 3d:f2:84:93:80:94:70:ce:c4:3d:c4:dc:43:8f:42:d9:34:c1: 2f:c2:74:45:23:62:93:f4:72:12:98:8c:ca:79:e2:7e:2c:bf: f1:4e:b7:b8:97:df:c2:4f:88:24:2b:31:e2:a5:8a:fb:c8:b8: 5f:bb:6b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Vh8jeLPbrDPMbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjAzYTIxMTgtYjMwMy00ZWE4LTk3ZGQtYTdhYTFiNjAwNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr53RV8cT69Zt9Tc9A23QJnxsOjhr+WvNSCHV cYrWcLUz/tStrT0YlvOZm/HLuKT4Y5sYRhd6NkR9xnK5kiD3mdpry541CRXF4ura QeM9ISfGyEiuSiV9zhVchX96QPIpMM+nc0EOmMwVKmkSsEfFmdqanRQJpwcAuqan uZMX+Bfff+y8eyoj4+WgBbazgBzIL3PQWhMu2oztEl7RnNHlTxdbMRk3Js+oh+1f /db1qeXprXM11M7Wtud6XBI/K5eryJNTmhP0VSqLGIXk/wZMJ8ScEgMEi4bM5reG zerV8+el89aGXf5ih9Dny5nqI9+0jbRDiGYFX/q8SAfIgeFS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVGd8Kyst6cb2vylW6F5MIwjjowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOTFhZWE4OTAtMGI0My0z ODk5LWJmYzUtYmFiMzc1NWE4MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Xw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDheSmcFdelu2G8lvOj31tttvalo/FCzulZuRB3j7A5tuJL4kjV6K1m 32cpUE/fhlbVg4mzAZ/TMpX6gcAZqNANg8SwLAIFU3RJg6RWqiBsEN/3zXROzEM+ rBbUj/2/cY15tfgAELXZwunfdFVsfLhO3VeGpALMgGQOZi8ESa1AkQ6k2fl8ZOqW jXM9DMQ/6UBzFNt2Mh819JpLYU3tX3LP/NfP+9WichmhJxMx9bEqRk+fdzFQ6Fnz 93pb7+4uqbXK1B0hfT3yhJOAlHDOxD3E3EOPQtk0wS/CdEUjYpP0chKYjMp54n4s v/FOt7iX38JPiCQrMeKlivvIuF+7axI= -----END CERTIFICATE-----Generated at Mon Apr 27 20:13:37 2026 by rpki-client