$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/c6789ca4-b255-3ffb-b631-f4031a934568.roa File: c6789ca4-b255-3ffb-b631-f4031a934568.roa (raw, json) Hash identifier: MaFEKbSh1c89MWAsY/ti8RHlsWFlJ9hgS5tI1o6g7qQ= Subject key identifier: 0A:EF:57:3E:E0:89:12:65:2C:20:65:EB:8A:14:C3:79:F6:18:D6:68 Certificate issuer: /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Certificate serial: 010D0C9F4328584D633B8680AB7225B4F0D219E0 Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/c6789ca4-b255-3ffb-b631-f4031a934568.roa Signing time: Fri 03 Apr 2026 21:06:32 +0000 ROA not before: Fri 03 Apr 2026 21:06:32 +0000 ROA not after: Thu 02 Jul 2026 21:06:32 +0000 asID: 401748 IP address blocks: 204.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:63:3b:86:80:ab:72:25:b4:f0:d2:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Validity Not Before: Apr 3 21:06:32 2026 GMT Not After : Jul 2 21:06:32 2026 GMT Subject: CN=0ce44e49-97d0-4dc6-8996-51e3b87f3cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:8e:84:44:4d:4a:5e:8c:a6:30:50:d7:7b: c2:28:13:33:b4:d2:e4:0b:95:a2:2a:5e:73:b1:ef: ca:2d:6d:86:39:19:1d:25:cd:59:ed:cd:8d:df:62: 5e:21:46:0a:a6:00:ec:7a:78:30:f8:3e:b0:da:c0: 94:b6:9b:07:19:47:1b:b2:55:fb:0f:bd:03:59:ce: 8d:4d:e5:d7:65:dc:1c:0e:e4:27:3c:47:04:18:47: 65:74:e2:6b:24:4d:67:ae:93:4f:64:be:cd:d2:7c: 35:7e:1d:db:68:03:51:18:b2:11:83:f3:73:3e:87: 33:e3:32:6d:1f:98:65:9f:35:c8:bf:07:68:a6:81: 17:17:e6:0a:6b:99:d5:71:37:b3:e3:22:41:5c:d4: 2f:11:79:50:94:9f:0d:6f:a9:b9:a1:89:33:c7:10: 01:8e:d8:f7:ea:5f:07:72:c8:3d:bf:0c:d4:47:55: 41:6b:bd:de:44:de:55:91:5f:5f:cc:92:33:14:0f: 14:80:c3:f1:6b:40:99:f2:ac:f0:a5:59:a1:7e:97: db:08:0b:4a:19:5b:85:bb:a7:b4:69:76:68:db:ef: 98:41:d9:da:5e:29:2a:f4:d0:f1:e9:e2:9c:d1:ae: 58:42:a5:4d:bc:84:5a:96:23:a8:e8:0e:c1:b9:cc: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EF:57:3E:E0:89:12:65:2C:20:65:EB:8A:14:C3:79:F6:18:D6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/c6789ca4-b255-3ffb-b631-f4031a934568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl X509v3 Authority Key Identifier: keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer sbgp-ipAddrBlock: critical IPv4: 204.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:53:a2:aa:d8:a9:bf:a8:e9:76:4e:0b:b5:45:9f:4a:54:35: 83:53:f5:91:4f:1f:f7:f0:51:ce:71:bd:de:bd:88:28:bb:c6: da:86:77:49:31:a2:d4:0f:81:41:3f:1c:70:7c:c3:63:8b:14: a2:31:ef:2c:c4:77:16:73:33:12:0f:83:7b:5a:59:0a:72:90: 36:3c:13:b5:33:96:18:1c:43:24:72:34:bd:d3:89:95:ff:60: bb:c8:bd:69:f9:31:1e:47:e0:84:62:99:26:aa:4e:7e:c3:30: 9f:ee:bd:78:c5:2a:8f:01:39:5b:c3:4b:fe:77:36:aa:61:59: 4d:82:41:94:c2:59:95:93:fa:09:dc:29:bf:42:37:f9:e8:c1: ce:54:a4:e3:2e:1f:93:6c:16:78:f6:e1:ae:bd:81:f6:91:a2: 31:11:d1:ad:27:b5:4b:5b:9e:b3:fd:23:4c:0e:c0:6c:9c:66: 9b:1f:2c:0e:01:75:9d:71:6f:e9:d6:ed:98:39:66:0c:c3:8d: 78:6c:0a:82:24:d6:a7:60:2e:6f:1b:e3:1f:3b:e4:0b:71:4e: 13:4e:bd:5d:88:0e:50:33:fa:b4:c0:f0:97:a3:6d:dd:5d:e8: c9:66:87:fd:26:fc:16:5a:19:66:b8:d5:22:1e:d9:89:8f:2d: 2c:1e:e1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1jO4aAq3IltPDSGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlMjM4YzItMmEyYy00ZjIwLTlmODUtNTJmYjhhNDJj MzA0MB4XDTI2MDQwMzIxMDYzMloXDTI2MDcwMjIxMDYzMlowLzEtMCsGA1UEAxMk MGNlNDRlNDktOTdkMC00ZGM2LTg5OTYtNTFlM2I4N2YzY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4yOhERNSl6MpjBQ13vCKBMztNLkC5WiKl5z se/KLW2GORkdJc1Z7c2N32JeIUYKpgDsengw+D6w2sCUtpsHGUcbslX7D70DWc6N TeXXZdwcDuQnPEcEGEdldOJrJE1nrpNPZL7N0nw1fh3baANRGLIRg/NzPocz4zJt H5hlnzXIvwdopoEXF+YKa5nVcTez4yJBXNQvEXlQlJ8Nb6m5oYkzxxABjtj36l8H csg9vwzUR1VBa73eRN5VkV9fzJIzFA8UgMPxa0CZ8qzwpVmhfpfbCAtKGVuFu6e0 aXZo2++YQdnaXikq9NDx6eKc0a5YQqVNvIRaliOo6A7BucyA7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArvVz7giRJlLCBl64oUw3n2GNZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUy MzhjMi0yYTJjLTRmMjAtOWY4NS01MmZiOGE0MmMzMDQvYzY3ODljYTQtYjI1NS0z ZmZiLWI2MzEtZjQwMzFhOTM0NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZlMjM4YzItMmEyYy00ZjIwLTlm ODUtNTJmYjhhNDJjMzA0LzFmZTIzOGMyLTJhMmMtNGYyMC05Zjg1LTUyZmI4YTQy YzMwNC5jcmwwHwYDVR0jBBgwFoAUWZrMJeJlMnVj6NHXo+Wjsb/+oFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUyMzhjMi0yYTJjLTRmMjAtOWY4NS01MmZi OGE0MmMzMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhToqrYqb+o6XZOC7VFn0pUNYNT9ZFPH/fwUc5xvd69iCi7xtqGd0kx otQPgUE/HHB8w2OLFKIx7yzEdxZzMxIPg3taWQpykDY8E7UzlhgcQyRyNL3TiZX/ YLvIvWn5MR5H4IRimSaqTn7DMJ/uvXjFKo8BOVvDS/53NqphWU2CQZTCWZWT+gnc Kb9CN/nowc5UpOMuH5NsFnj24a69gfaRojER0a0ntUtbnrP9I0wOwGycZpsfLA4B dZ1xb+nW7Zg5ZgzDjXhsCoIk1qdgLm8b4x875AtxThNOvV2IDlAz+rTA8Jejbd1d 6Mlmh/0m/BZaGWa41SIe2YmPLSwe4QI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:13:25 2026 by rpki-client