$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa File: a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa (raw, json) Hash identifier: MoP8VY01QpCxjqKjFw759xoIhHvVs39KAtCe27o2jHo= Subject key identifier: 51:DA:C4:ED:D0:BE:FB:C5:F7:0A:A0:1A:A1:F9:67:B5:A5:E5:7E:AB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9B0909F58A487E796100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 209.55.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9b:09:09:f5:8a:48:7e:79:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=a71708c2-617a-402e-9d48-7d76b3f7a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:8a:5b:d5:04:8c:b5:ed:61:c4:05:0e:9b: b7:63:cc:ef:ab:75:ff:86:e3:0f:c4:7a:43:4e:59: 28:fd:22:89:b2:7c:04:a3:d3:1e:35:ed:ad:89:93: b1:52:fb:70:1a:97:d9:1a:62:8c:5a:13:36:b4:c4: ac:44:96:51:d8:da:09:84:95:67:e2:10:71:67:5c: 29:29:16:64:34:9e:fb:16:50:62:dc:85:1f:c1:59: 7e:d0:8b:a0:35:0b:79:9c:59:ff:36:b3:99:11:8c: 8b:55:e2:da:7d:e2:cf:3b:05:ff:f2:dd:28:f9:25: d6:93:8c:e4:d3:51:b5:e0:1c:3e:04:10:4b:c0:72: d2:bc:a0:52:81:c8:61:01:11:51:4d:20:e6:ad:be: 07:1d:33:11:25:58:7a:2d:c4:af:d0:1b:a5:de:63: 61:0f:bb:88:6b:f8:7b:62:49:be:2e:d9:cd:4d:0d: 67:5b:33:df:05:ac:27:e2:01:55:4d:d2:90:a1:d2: 25:4c:dc:0f:19:77:8a:c5:08:e7:1b:7b:71:28:77: 90:a1:fb:4b:fa:e0:6e:27:5b:28:a3:8b:44:1a:e5: 79:fb:c6:60:14:13:f6:73:34:1c:1d:c8:b7:6d:81: f9:81:e5:b7:e7:ed:f0:b5:a1:d4:b9:6b:29:5d:2f: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:C4:ED:D0:BE:FB:C5:F7:0A:A0:1A:A1:F9:67:B5:A5:E5:7E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a91b3e0f-509a-34e7-aa0d-751c60c5e629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:49:d1:0b:cf:4a:70:76:f6:28:2e:2d:0b:0f:c5:d6:fb:d1: b1:db:d1:14:b8:f4:8e:76:91:ed:23:78:0c:5c:dc:29:27:48: c2:65:fa:d1:a7:ae:9b:ad:91:77:12:bf:d5:f7:23:39:90:f4: a4:d6:7f:4f:ca:78:74:af:78:ce:f1:3f:7c:d5:16:15:f1:1c: 87:d7:c4:4a:73:8a:25:a4:8b:c1:a4:df:68:a4:95:b7:31:d3: 1e:27:b5:42:35:38:68:95:1b:fa:98:c6:88:51:36:c8:76:86: 63:7e:63:47:eb:97:07:8e:21:c3:aa:4e:eb:72:ad:91:1a:6f: 82:0e:23:ea:9f:84:7c:5c:28:8c:4d:f3:3f:dc:12:47:77:40: 8e:09:c7:f7:4c:13:58:d5:e6:0f:25:d3:b2:b5:9a:b8:07:ab: f8:98:99:ec:53:fd:15:3c:0f:0a:9c:0d:f7:13:83:aa:43:c4: 10:f5:39:95:bc:73:d8:d3:fb:a7:03:23:48:e0:4b:26:b2:60: 2e:2a:d7:58:bc:0d:af:78:6f:df:9e:45:79:b1:94:dc:0d:ce: 23:d5:6a:a4:9c:d3:7f:23:b6:8f:13:ed:ee:4c:60:1a:7e:12: fb:76:57:38:a9:d5:a5:ff:a9:85:64:c8:f2:50:09:12:57:44: 47:f5:2b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5sJCfWKSH55YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YTcxNzA4YzItNjE3YS00MDJlLTlkNDgtN2Q3NmIzZjdhMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL2KW9UEjLXtYcQFDpu3Y8zvq3X/huMPxHpD Tlko/SKJsnwEo9MeNe2tiZOxUvtwGpfZGmKMWhM2tMSsRJZR2NoJhJVn4hBxZ1wp KRZkNJ77FlBi3IUfwVl+0IugNQt5nFn/NrOZEYyLVeLafeLPOwX/8t0o+SXWk4zk 01G14Bw+BBBLwHLSvKBSgchhARFRTSDmrb4HHTMRJVh6LcSv0Bul3mNhD7uIa/h7 Ykm+LtnNTQ1nWzPfBawn4gFVTdKQodIlTNwPGXeKxQjnG3txKHeQoftL+uBuJ1so o4tEGuV5+8ZgFBP2czQcHci3bYH5geW35+3wtaHUuWspXS812QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHaxO3QvvvF9wqgGqH5Z7Wl5X6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTkxYjNlMGYtNTA5YS0z NGU3LWFhMGQtNzUxYzYwYzVlNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdJ0QvPSnB29iguLQsPxdb70bHb0RS49I52ke0jeAxc3CknSMJl+tGn rputkXcSv9X3IzmQ9KTWf0/KeHSveM7xP3zVFhXxHIfXxEpziiWki8Gk32iklbcx 0x4ntUI1OGiVG/qYxohRNsh2hmN+Y0frlweOIcOqTutyrZEab4IOI+qfhHxcKIxN 8z/cEkd3QI4Jx/dME1jV5g8l07K1mrgHq/iYmexT/RU8DwqcDfcTg6pDxBD1OZW8 c9jT+6cDI0jgSyayYC4q11i8Da94b9+eRXmxlNwNziPVaqSc038jto8T7e5MYBp+ Evt2Vzip1aX/qYVkyPJQCRJXREf1KwY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:50:52 2026 by rpki-client