$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa File: 0644af4e-9c64-3770-a0dd-44ccf9878f17.roa (raw, json) Hash identifier: OnYgH3G84GamBiRlAHNw8eQo1JAywOjbjkrn6spwUzk= Subject key identifier: 33:1B:F0:E1:AF:90:DB:34:8D:FC:EE:AE:AB:8E:26:80:11:C6:7A:7A Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584E104F34B87588F66A8F9B1900 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 13536 IP address blocks: 209.107.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:34:b8:75:88:f6:6a:8f:9b:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=969b2e07-2586-40fe-a927-8890e1303dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:99:77:4f:ed:00:5f:db:12:a2:10:89:d9: 05:a0:d8:73:21:40:5a:82:af:ad:5a:dd:7a:c0:be: 81:0d:4d:e3:df:9c:1d:09:48:91:35:de:67:b7:ec: 64:31:12:b3:02:13:50:bd:4b:72:53:9c:af:09:a1: f0:8d:41:b8:28:26:43:f8:76:9e:e8:7b:57:5c:95: d3:66:1a:05:72:d2:0f:a0:0e:46:74:e3:77:c6:90: d0:8c:97:80:d5:6e:97:f2:f9:ac:1b:df:1d:c4:4d: cf:19:04:2c:be:4e:e8:bd:93:36:1b:1a:a4:31:8a: 2d:8a:cc:a9:ce:37:87:7e:87:21:00:86:a0:56:17: a9:4c:1b:bf:88:3a:68:15:dc:d9:c4:06:3c:9f:e3: a5:4e:cf:bf:16:a7:3c:49:78:23:b8:91:a7:b3:1e: 14:19:23:0f:76:71:f6:37:88:e6:4b:b3:94:5f:13: 77:62:27:3f:9a:bf:97:af:55:09:4b:78:f3:87:e4: e1:9c:07:e0:36:34:ed:a3:39:ba:4b:3a:f1:ca:ea: 8a:83:09:b6:f3:72:58:c3:07:ec:17:03:e4:83:3f: 04:75:e0:0b:40:7e:6f:f3:64:9b:14:5c:bc:45:6d: b3:65:63:e8:b6:cb:6d:c2:60:ca:7e:60:df:92:63: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1B:F0:E1:AF:90:DB:34:8D:FC:EE:AE:AB:8E:26:80:11:C6:7A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:20:2a:dc:6c:95:4c:30:02:be:b1:ec:ee:00:48:55:6f:13: 55:69:2d:40:62:94:f0:dd:06:49:31:2f:27:52:dd:32:a0:a3: ee:9f:95:0c:dd:a2:06:27:59:a3:4a:85:a6:f7:28:f3:86:d1: f6:76:2d:63:c2:f9:c9:79:a5:b9:51:e2:4e:64:10:c8:40:48: df:e2:53:8f:0f:b8:69:29:53:73:26:0c:ea:18:fc:03:1b:1f: 59:42:51:5b:a1:6c:d1:33:92:14:85:03:cb:ce:86:d1:81:b3: 4b:db:5a:7e:03:88:6c:9c:fa:d4:8c:22:ea:c7:b2:7e:9c:3c: 73:1e:2d:94:e7:46:f2:23:d7:ac:30:90:a0:72:90:6a:9c:6a: 54:cd:f4:4d:dd:02:82:46:e3:24:29:97:2a:89:63:3c:fa:c8: 84:fe:e8:a7:77:7c:8b:55:a7:c5:fc:2b:22:a8:bd:b4:95:80: c2:dd:6d:c4:1e:c0:52:c5:f3:0b:c4:84:7a:47:cd:07:ff:b1: 3c:22:ed:18:25:d4:de:d2:e7:1c:a7:90:e9:e0:95:22:3b:c8: 41:2b:df:3b:ad:46:6c:a1:ce:39:aa:89:b3:12:3c:e6:14:26: e9:49:3c:9c:ca:b0:35:1b:36:f6:15:bb:52:79:e9:82:43:d4: 62:e8:22:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTzS4dYj2ao+bGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk OTY5YjJlMDctMjU4Ni00MGZlLWE5MjctODg5MGUxMzAzZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9qZd0/tAF/bEqIQidkFoNhzIUBagq+tWt16 wL6BDU3j35wdCUiRNd5nt+xkMRKzAhNQvUtyU5yvCaHwjUG4KCZD+Hae6HtXXJXT ZhoFctIPoA5GdON3xpDQjJeA1W6X8vmsG98dxE3PGQQsvk7ovZM2GxqkMYotisyp zjeHfochAIagVhepTBu/iDpoFdzZxAY8n+OlTs+/Fqc8SXgjuJGnsx4UGSMPdnH2 N4jmS7OUXxN3Yic/mr+Xr1UJS3jzh+ThnAfgNjTtozm6SzrxyuqKgwm283JYwwfs FwPkgz8EdeALQH5v82SbFFy8RW2zZWPotsttwmDKfmDfkmOVywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMb8OGvkNs0jfzurquOJoARxnp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMDY0NGFmNGUtOWM2NC0z NzcwLWEwZGQtNDRjY2Y5ODc4ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcgKtxslUwwAr6x7O4ASFVvE1VpLUBilPDdBkkxLydS3TKgo+6flQzd ogYnWaNKhab3KPOG0fZ2LWPC+cl5pblR4k5kEMhASN/iU48PuGkpU3MmDOoY/AMb H1lCUVuhbNEzkhSFA8vOhtGBs0vbWn4DiGyc+tSMIurHsn6cPHMeLZTnRvIj16ww kKBykGqcalTN9E3dAoJG4yQplyqJYzz6yIT+6Kd3fItVp8X8KyKovbSVgMLdbcQe wFLF8wvEhHpHzQf/sTwi7Rgl1N7S5xynkOnglSI7yEEr3zutRmyhzjmqibMSPOYU JulJPJzKsDUbNvYVu1J56YJD1GLoIgE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:13:51 2026 by rpki-client