$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa File: 6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa (raw, json) Hash identifier: GNf0YGSekJZsjON0ja1mE3kr5Z2rebLuu1a4TBlZ1iY= Subject key identifier: 42:5F:7A:AF:2E:0C:F7:26:F8:43:E6:96:1C:B6:F0:4D:CA:85:CE:85 Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Certificate serial: 010D0C9F4328584DDE85C3A8A91505DA3C242200 Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 209.127.216.0/24 maxlen: 24 209.188.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:c3:a8:a9:15:05:da:3c:24:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=c76ffa04-33fe-4568-b0a7-e39cc7332850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:64:5b:25:c3:6b:08:97:c2:e8:63:f1:ca:86: 8e:cb:0f:6b:09:97:b5:c4:40:f5:c7:8d:b5:f0:9e: 54:b0:bb:da:7c:b3:09:54:da:86:6d:7c:f3:d7:32: 7b:a9:39:31:4c:11:17:98:76:34:39:6a:ec:d2:42: e2:f0:53:ee:fa:29:6e:4f:6b:0e:62:7f:8a:0d:1e: da:29:12:a3:3a:f1:8d:ff:a2:22:af:00:37:43:9f: 4b:07:1d:01:00:53:24:fd:f2:0a:3c:fa:22:07:6b: f1:33:d1:d6:dd:6c:a9:14:03:45:aa:2a:f6:ab:59: b4:34:43:61:1b:25:a5:27:0a:a4:82:29:d9:67:82: 57:7e:43:34:e0:e5:55:90:96:42:aa:7f:2c:6f:a3: 4e:a7:9e:40:19:ad:29:6a:d9:f9:55:58:19:29:71: c8:c6:43:8e:73:f0:8d:f6:f4:65:53:46:aa:9e:03: f9:fc:53:13:c5:17:6b:b4:1f:3f:28:48:ee:b5:f5: 14:df:07:ad:e2:68:df:28:ea:d4:6d:ea:ac:c9:3f: 00:bf:b2:21:22:0c:64:56:c6:c0:d5:cc:a3:b9:70: b9:12:3b:b1:74:f5:d9:4b:dc:11:5c:25:46:b4:96: 1e:3b:11:43:dc:1b:23:be:61:75:1f:a5:9c:2b:44: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:7A:AF:2E:0C:F7:26:F8:43:E6:96:1C:B6:F0:4D:CA:85:CE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl X509v3 Authority Key Identifier: keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:65:2b:55:99:f0:fb:a8:0c:fd:8d:ef:94:7a:87:d3:de:fd: cd:2a:a9:cf:fc:d3:7e:52:29:aa:ec:04:a5:e4:1a:8b:3a:58: 10:ee:55:bc:d5:61:a0:fa:01:33:1e:da:ef:a6:2c:69:26:35: ba:99:e5:3a:71:6f:40:ea:9d:6e:60:95:3c:ac:67:cf:7f:07: da:ec:80:7d:97:0e:56:6a:74:6e:72:51:1f:0e:3e:2d:d3:58: 26:82:b2:82:72:c3:a6:75:e5:88:1f:82:af:d4:60:07:78:35: d9:43:d4:a1:7f:ba:02:54:8e:82:10:fb:f4:ac:24:59:85:bf: ba:1c:02:ce:9c:07:9e:78:93:18:82:6b:98:d6:f3:73:de:86: 83:07:03:72:61:ed:90:a8:72:cb:98:a7:2a:ba:3a:7a:17:44: e9:b7:fb:9a:6f:ca:bc:25:a9:02:53:fb:ea:e9:97:a3:8f:53: 3e:34:1a:12:2a:9a:ca:25:a8:88:cf:5c:2c:4f:a1:cf:85:d9: 97:76:9c:f1:33:73:fe:28:59:e3:dc:d8:fb:08:57:20:08:6d: 1f:34:0a:67:a7:e8:46:c3:98:51:3f:dd:2c:ec:0f:b5:c0:77: 18:7f:6e:2c:d2:33:80:ab:14:75:53:a6:df:87:72:58:35:31: b7:9b:95:29 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3ehcOoqRUF2jwkIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj M2Y1MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk Yzc2ZmZhMDQtMzNmZS00NTY4LWIwYTctZTM5Y2M3MzMyODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmRbJcNrCJfC6GPxyoaOyw9rCZe1xED1x421 8J5UsLvafLMJVNqGbXzz1zJ7qTkxTBEXmHY0OWrs0kLi8FPu+iluT2sOYn+KDR7a KRKjOvGN/6IirwA3Q59LBx0BAFMk/fIKPPoiB2vxM9HW3WypFANFqir2q1m0NENh GyWlJwqkginZZ4JXfkM04OVVkJZCqn8sb6NOp55AGa0patn5VVgZKXHIxkOOc/CN 9vRlU0aqngP5/FMTxRdrtB8/KEjutfUU3wet4mjfKOrUbeqsyT8Av7IhIgxkVsbA 1cyjuXC5EjuxdPXZS9wRXCVGtJYeOxFD3BsjvmF1H6WcK0RajwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEJfeq8uDPcm+EPmlhy28E3Khc6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvNmY0YjljMjAtMzEyOC0z ZjFkLWIzZTYtMDVhMmM2NDQ0NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3 NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4 YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw Zjc4OGMzZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0X/YAwQA 0bxtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA1lK1WZ8PuoDP2N75R6h9Pe/c0qqc/8035SKarsBKXkGos6 WBDuVbzVYaD6ATMe2u+mLGkmNbqZ5Tpxb0DqnW5glTysZ89/B9rsgH2XDlZqdG5y UR8OPi3TWCaCsoJyw6Z15Ygfgq/UYAd4NdlD1KF/ugJUjoIQ+/SsJFmFv7ocAs6c B554kxiCa5jW83PehoMHA3Jh7ZCocsuYpyq6OnoXROm3+5pvyrwlqQJT++rpl6OP Uz40GhIqmsolqIjPXCxPoc+F2Zd2nPEzc/4oWePc2PsIVyAIbR80Cmen6EbDmFE/ 3SzsD7XAdxh/bizSM4CrFHVTpt+Hclg1MbeblSk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:07:36 2026 by rpki-client