$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa File: dacb8d64-0467-305d-8bc3-2c5336579a32.roa (raw, json) Hash identifier: 9a+EzxNeLfb4ng0UY/oDORm1yOFcj7F2NmsHseBKa7k= Subject key identifier: 38:81:40:CC:15:4E:4E:B8:29:63:25:E4:81:D5:78:23:7C:97:73:B7 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584E0C1ED25434A95FCFB03D3800 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 29016 IP address blocks: 159.182.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d2:54:34:a9:5f:cf:b0:3d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=c9838ba9-abb9-46a2-8e28-f6dd7617d7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:b1:90:fc:0e:1d:a5:f7:10:79:98:88:9e: cc:5b:b7:b2:d8:4d:1d:63:8b:e1:c6:4e:d2:ba:ce: c9:d7:1f:d3:fe:94:d6:d8:a5:06:20:bd:51:fa:8e: f0:ce:52:7a:cb:ed:76:3a:0c:6f:f1:75:ea:d0:0c: 75:46:22:32:eb:0c:df:3a:0b:5d:7e:d0:76:34:27: 1d:7d:87:16:14:0f:a8:0f:b9:21:89:dc:e8:c6:6e: 6e:0a:a3:be:47:cc:df:47:ba:9f:ee:df:6d:96:ee: 58:67:45:d5:d9:2e:46:da:a1:05:8f:4a:24:39:7d: 9e:06:59:05:08:af:89:f1:4f:3c:d3:6a:7f:d5:4b: df:c9:f9:4b:5a:36:a5:55:3a:2d:02:44:b7:c6:5a: c7:a9:bd:5c:cb:38:de:8c:8d:82:db:2f:54:15:5f: fb:a9:32:08:96:00:f0:d6:86:de:3a:39:e2:02:a6: 5b:b9:46:8a:c2:b7:b8:8b:30:1c:11:07:d5:ce:f5: 62:fc:a0:4f:db:46:74:8e:60:f0:7b:1e:89:78:af: b1:72:aa:af:29:16:f1:f4:d3:d7:4d:58:14:e4:9a: d9:7b:86:a6:7a:a1:ec:74:8f:ed:ac:96:80:9d:bc: dc:9e:a7:84:a9:27:73:f7:dd:1e:9d:68:ae:3b:6e: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:40:CC:15:4E:4E:B8:29:63:25:E4:81:D5:78:23:7C:97:73:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:56:4d:9d:9c:31:02:12:51:36:c4:6e:4c:b0:33:93:3a:ba: 74:28:64:86:1a:f9:56:db:f3:3f:73:fc:b3:22:6d:8a:65:82: 3d:6e:eb:f7:d7:c4:1e:a8:94:dd:3c:99:74:8a:66:60:92:df: da:ff:90:35:c5:50:ab:a1:5d:5e:14:88:47:94:83:22:62:6e: b1:9d:57:f5:f8:7b:91:9e:a5:da:c5:bb:91:4c:38:7c:32:6d: 1b:e8:2f:e7:e0:af:9f:e7:62:be:d5:a9:25:d8:fd:87:a5:6f: 04:48:9e:e5:6a:84:c8:e8:7f:db:3e:c2:67:a6:1a:76:ec:5d: 97:29:14:cf:32:06:16:39:34:f0:c0:ae:c3:8f:77:95:23:61: 3c:73:7b:1e:00:88:7b:1a:a1:4e:00:2e:05:39:2f:a4:15:fe: 41:18:a3:e7:00:d3:01:f1:02:d0:37:5a:b6:ce:bb:fd:18:38: 11:2f:71:d4:36:22:1b:0b:5c:67:95:db:28:81:09:44:22:6a: cd:e2:30:6a:5e:9b:ac:15:1b:b6:8e:74:ba:16:df:d4:c3:d6: 41:44:a7:46:e3:ab:8e:48:14:7c:e5:44:42:e6:e0:82:03:9e: 37:5f:c7:02:88:b9:10:83:d6:d3:5f:51:f1:9b:e5:00:9e:e3: 33:df:b4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtJUNKlfz7A9OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk Yzk4MzhiYTktYWJiOS00NmEyLThlMjgtZjZkZDc2MTdkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyKxkPwOHaX3EHmYiJ7MW7ey2E0dY4vhxk7S us7J1x/T/pTW2KUGIL1R+o7wzlJ6y+12Ogxv8XXq0Ax1RiIy6wzfOgtdftB2NCcd fYcWFA+oD7khidzoxm5uCqO+R8zfR7qf7t9tlu5YZ0XV2S5G2qEFj0okOX2eBlkF CK+J8U8802p/1UvfyflLWjalVTotAkS3xlrHqb1cyzjejI2C2y9UFV/7qTIIlgDw 1obeOjniAqZbuUaKwre4izAcEQfVzvVi/KBP20Z0jmDwex6JeK+xcqqvKRbx9NPX TVgU5JrZe4ameqHsdI/trJaAnbzcnqeEqSdz990enWiuO26+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiBQMwVTk64KWMl5IHVeCN8l3O3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZGFjYjhkNjQtMDQ2Ny0z MDVkLThiYzMtMmM1MzM2NTc5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdWTZ2cMQISUTbEbkywM5M6unQoZIYa+Vbb8z9z/LMibYplgj1u6/fX xB6olN08mXSKZmCS39r/kDXFUKuhXV4UiEeUgyJibrGdV/X4e5GepdrFu5FMOHwy bRvoL+fgr5/nYr7VqSXY/YelbwRInuVqhMjof9s+wmemGnbsXZcpFM8yBhY5NPDA rsOPd5UjYTxzex4AiHsaoU4ALgU5L6QV/kEYo+cA0wHxAtA3WrbOu/0YOBEvcdQ2 IhsLXGeV2yiBCUQias3iMGpem6wVG7aOdLoW39TD1kFEp0bjq45IFHzlRELm4IID njdfxwKIuRCD1tNfUfGb5QCe4zPftEM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:32:00 2026 by rpki-client