$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa File: 41766a1e-0f8c-35c8-9622-569efdfd5660.roa (raw, json) Hash identifier: 8VvMrM0vxJAn1M2IMJ0gMGLbiWxfa5qsaRmQ+U8tfAc= Subject key identifier: 17:C4:22:70:A2:3C:45:1A:4C:5D:6D:D8:37:F4:D3:64:24:F8:B7:D8 Certificate issuer: /CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Certificate serial: 010D0C9F4328584F497333B51CFFE813C791EB40 Authority key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399446 IP address blocks: 209.151.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:33:b5:1c:ff:e8:13:c7:91:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7ad1438c-0609-4c1f-a7c5-6dac34691fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:e2:be:28:09:38:fa:73:7e:2c:4d:a1:f2: 09:2f:a2:07:4b:2d:29:af:74:13:25:22:88:5f:39: a0:a6:f0:b6:9a:85:f2:c1:f0:f0:00:5c:57:11:1d: 4d:1e:af:b6:d5:db:cc:b3:8f:00:b1:92:45:bc:87: a6:c1:b0:d8:3e:e0:d3:54:65:c5:38:f3:fd:ad:8d: 34:38:86:ab:41:be:b6:a0:54:da:22:10:c4:86:3e: 9e:80:f0:c2:e6:0f:74:f5:44:70:ec:10:85:88:5b: ca:8e:1c:5a:0d:13:85:cf:f3:d7:cf:18:9c:16:d4: 6b:5e:05:59:d1:2b:1c:d1:97:5f:91:c6:d9:9a:8d: 1d:7a:39:e3:08:50:17:a6:83:1f:72:27:f4:64:c2: 88:fb:25:a6:ae:44:a0:fd:85:23:d8:83:b9:ee:06: da:19:bb:2e:9e:d6:63:d8:0e:54:a9:2b:ac:0e:a0: 57:7c:d6:c9:ac:c1:e9:84:76:c1:af:1c:ba:1d:3e: 3a:71:1f:8a:3a:cd:9e:19:56:95:b3:f2:f4:9b:47: 17:8f:2c:3b:9d:ab:a6:cd:77:b8:ed:18:61:31:19: 8a:45:07:23:fa:ce:7c:5f:31:db:06:5b:66:5a:b6: a5:66:e2:72:19:18:79:e0:95:84:c9:f2:c5:fc:0c: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C4:22:70:A2:3C:45:1A:4C:5D:6D:D8:37:F4:D3:64:24:F8:B7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/41766a1e-0f8c-35c8-9622-569efdfd5660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl X509v3 Authority Key Identifier: keyid:A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer sbgp-ipAddrBlock: critical IPv4: 209.151.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a1:88:ad:a4:b4:71:18:06:30:dc:30:be:2d:28:b9:2c:5e: 13:c2:2a:9b:61:f9:85:fe:ae:77:2a:c3:91:ee:ff:5e:96:fd: ae:cb:f0:70:b9:a9:be:bc:5c:f2:a3:60:aa:ac:6e:c4:97:f1: 6d:4f:1e:93:fc:1c:ed:0b:f1:0c:9c:a5:29:31:c9:a2:09:43: 9d:25:c7:e3:67:f4:38:b5:df:ae:63:42:59:87:0e:ec:c4:1b: 2e:15:ef:8a:24:1d:8d:f5:d5:8f:96:ee:e6:70:37:4f:61:aa: 8c:62:38:b5:f6:a2:7a:83:35:58:16:d2:43:e5:dd:5a:c1:8c: 8f:e8:7f:d7:dc:d1:88:24:71:a4:cb:91:b4:4f:7e:63:02:8b: ee:76:b7:2b:34:dc:33:7e:d5:19:84:bc:4f:ec:db:fd:c9:12: bb:00:34:8f:6f:47:10:e9:8b:7a:c7:2a:fc:0a:20:38:76:f6: 42:64:f9:6a:1a:88:e7:ef:74:3e:1d:e5:4b:68:4f:6c:8c:cf: 43:a4:62:f8:5f:60:fa:91:05:b3:57:c9:f1:46:54:a3:43:10: bc:4c:14:98:25:5b:95:71:af:fb:2c:3c:56:6b:10:4e:3e:ea: a8:84:60:ab:1c:36:27:a8:0c:38:45:0b:83:68:25:ed:7d:90: 1e:1c:d9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczO1HP/oE8eR60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4 NWE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2FkMTQzOGMtMDYwOS00YzFmLWE3YzUtNmRhYzM0NjkxZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW/ivigJOPpzfixNofIJL6IHSy0pr3QTJSKI XzmgpvC2moXywfDwAFxXER1NHq+21dvMs48AsZJFvIemwbDYPuDTVGXFOPP9rY00 OIarQb62oFTaIhDEhj6egPDC5g909URw7BCFiFvKjhxaDROFz/PXzxicFtRrXgVZ 0Ssc0ZdfkcbZmo0dejnjCFAXpoMfcif0ZMKI+yWmrkSg/YUj2IO57gbaGbsuntZj 2A5UqSusDqBXfNbJrMHphHbBrxy6HT46cR+KOs2eGVaVs/L0m0cXjyw7naumzXe4 7RhhMRmKRQcj+s58XzHbBltmWralZuJyGRh54JWEyfLF/AxMJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfEInCiPEUaTF1t2Df002Qk+LfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0 MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvNDE3NjZhMWUtMGY4Yy0z NWM4LTk2MjItNTY5ZWZkZmQ1NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWIxNDA5NmEtZjhhYS00ODU2LTli MDktZGIzMDM0Zjg4NWE3LzFiMTQwOTZhLWY4YWEtNDg1Ni05YjA5LWRiMzAzNGY4 ODVhNy5jcmwwHwYDVR0jBBgwFoAUqMwXTYfOlyHGbxrZhme3ykGC7x8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMw MzRmODg1YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKhiK2ktHEYBjDcML4tKLksXhPCKpth+YX+rncqw5Hu/16W/a7L8HC5 qb68XPKjYKqsbsSX8W1PHpP8HO0L8QycpSkxyaIJQ50lx+Nn9Di1365jQlmHDuzE Gy4V74okHY311Y+W7uZwN09hqoxiOLX2onqDNVgW0kPl3VrBjI/of9fc0YgkcaTL kbRPfmMCi+52tys03DN+1RmEvE/s2/3JErsANI9vRxDpi3rHKvwKIDh29kJk+Woa iOfvdD4d5UtoT2yMz0OkYvhfYPqRBbNXyfFGVKNDELxMFJglW5Vxr/ssPFZrEE4+ 6qiEYKscNieoDDhFC4NoJe19kB4c2ZY= -----END CERTIFICATE-----Generated at Sun Oct 11 03:51:10 2026 by rpki-client