$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa File: 8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa (raw, json) Hash identifier: UoQk+bU7qcEc6lpK7ZO+VZ2uNXoF3PnX8U9L5byRz8s= Subject key identifier: 71:44:2C:B9:8B:91:02:C6:83:E8:6C:E4:52:7A:A8:D1:39:AE:27:68 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F4328584CCD0C900E7F8C3405BE523E80 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 16509 IP address blocks: 204.239.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:90:0e:7f:8c:34:05:be:52:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=6ba8d056-d2f9-49cb-bb75-ca191a0556c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:a3:13:92:bd:69:d1:7c:02:e6:fa:54:e8: f7:c3:f6:27:66:d7:95:18:fa:69:03:a4:70:6c:5d: 36:07:be:5e:5a:dc:d9:2e:89:eb:10:5a:5c:3b:30: 24:7a:e3:f3:13:e6:d7:b6:e4:cb:2a:e1:c1:da:3d: e7:3a:70:78:65:8c:a2:fd:67:ff:af:de:3c:72:b6: af:e9:fe:57:26:06:09:0c:c5:93:c1:14:8d:ed:d6: ac:84:fd:4b:1f:89:8c:f8:08:06:3a:d5:5f:44:c6: e3:82:2f:cd:45:11:e9:17:6e:86:1a:a8:b5:10:74: 22:c7:8a:fb:6e:ee:23:d0:cb:50:4b:76:33:29:42: 9b:60:42:a2:49:91:25:c1:9b:1a:3d:b0:a9:c8:d4: 05:ef:10:40:6f:a1:8f:76:89:03:62:b4:1c:27:ea: 88:de:c5:06:e9:d6:30:1b:ae:be:7a:2e:07:2c:93: bf:21:fa:76:fe:b8:8d:53:6b:07:d0:bf:79:18:b2: a3:40:e0:4c:e0:bb:bb:99:05:4c:6d:27:cf:00:3a: ff:37:85:a1:2b:93:45:12:10:8b:f0:07:4d:4b:c2: 6b:30:b0:38:9e:fb:19:29:1a:6a:1b:f0:47:89:03: c5:bf:da:e0:c1:b9:77:d9:e8:4d:39:90:61:43:fc: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:44:2C:B9:8B:91:02:C6:83:E8:6C:E4:52:7A:A8:D1:39:AE:27:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 204.239.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b2:22:d9:6d:df:c9:e7:65:e3:b3:f4:c6:3f:1b:01:a5:ea: c9:0f:66:c9:41:6e:74:58:f0:b8:90:fc:21:da:8d:e5:75:d1: 47:5f:ec:48:50:3f:37:78:da:05:a4:c6:ba:c7:4f:91:87:bf: f7:af:14:cf:38:80:88:7c:89:ed:6e:3d:13:01:07:f0:16:e9: b4:4f:45:0d:88:ee:c4:58:92:b5:b0:df:07:41:29:dd:9a:54: 35:1c:f9:fc:cb:2f:af:f5:53:78:59:79:a0:8b:b0:40:53:09: 36:8e:9f:89:f8:d0:c1:15:91:44:3e:74:70:ac:f1:0d:95:04: d6:27:52:b3:a9:61:00:62:a1:ab:79:26:a6:98:9a:df:fc:c1: 1d:0f:61:39:3e:4b:ea:95:b1:bc:08:62:3f:c0:70:f9:f1:fc: 9c:0d:73:e0:59:46:bb:1a:ec:2a:2a:ee:e9:e7:31:e5:d9:7d: 5e:08:10:94:7c:77:54:07:67:1c:04:0d:00:79:2f:9e:8e:13: 4e:ea:41:12:08:9e:84:7e:16:d7:63:11:8b:78:c2:e8:30:f3: a0:ca:f4:57:50:b1:27:bd:7e:7e:96:a2:d7:34:94:70:bb:03: 33:4a:45:b9:a7:38:30:b7:e4:af:8f:e9:ba:a2:77:4b:85:ad: 55:ee:98:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJAOf4w0Bb5SPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NmJhOGQwNTYtZDJmOS00OWNiLWJiNzUtY2ExOTFhMDU1NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdKjE5K9adF8Aub6VOj3w/YnZteVGPppA6Rw bF02B75eWtzZLonrEFpcOzAkeuPzE+bXtuTLKuHB2j3nOnB4ZYyi/Wf/r948crav 6f5XJgYJDMWTwRSN7dashP1LH4mM+AgGOtVfRMbjgi/NRRHpF26GGqi1EHQix4r7 bu4j0MtQS3YzKUKbYEKiSZElwZsaPbCpyNQF7xBAb6GPdokDYrQcJ+qI3sUG6dYw G66+ei4HLJO/Ifp2/riNU2sH0L95GLKjQOBM4Lu7mQVMbSfPADr/N4WhK5NFEhCL 8AdNS8JrMLA4nvsZKRpqG/BHiQPFv9rgwbl32ehNOZBhQ/ybNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFELLmLkQLGg+hs5FJ6qNE5ridoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvODgxNGM5YjUtODg0Ny0z ZDFhLWFhNTQtMGFiNzQyOWIyNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqyItlt38nnZeOz9MY/GwGl6skPZslBbnRY8LiQ/CHajeV10Udf7EhQ Pzd42gWkxrrHT5GHv/evFM84gIh8ie1uPRMBB/AW6bRPRQ2I7sRYkrWw3wdBKd2a VDUc+fzLL6/1U3hZeaCLsEBTCTaOn4n40MEVkUQ+dHCs8Q2VBNYnUrOpYQBioat5 JqaYmt/8wR0PYTk+S+qVsbwIYj/AcPnx/JwNc+BZRrsa7Coq7unnMeXZfV4IEJR8 d1QHZxwEDQB5L56OE07qQRIInoR+FtdjEYt4wugw86DK9FdQsSe9fn6Wotc0lHC7 AzNKRbmnODC35K+P6bqid0uFrVXumIQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:26 2026 by rpki-client