$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa File: ba968438-1dc4-3db1-a0a1-e4360c977088.roa (raw, json) Hash identifier: hivvLXHLFVhFCV0oAxZqBjcLAEG0B3cIKcSf+x91r1g= Subject key identifier: 6B:82:01:36:38:F4:67:B3:70:96:D0:22:E1:E1:4B:C3:09:16:71:8C Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584E1FA9A51BE463DED7CAC7E280 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 52129 IP address blocks: 208.84.64.0/24 maxlen: 24 208.86.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a5:1b:e4:63:de:d7:ca:c7:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=f2b074a3-0e3a-4fd1-aa66-8578dec839b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:6d:3a:74:e4:7c:20:2b:fa:71:79:e3:08: 79:f1:be:73:b1:6a:63:81:f7:a9:87:49:58:1c:a9: 91:97:66:45:2f:b9:37:6c:00:90:c5:87:f0:26:7a: 79:c8:74:52:53:c0:1a:ff:61:91:71:25:8f:5d:88: 53:78:2f:8d:1c:cd:6b:b2:d9:62:33:7b:40:4f:ae: 78:68:6c:52:e2:6a:23:15:f3:7c:14:78:18:f9:83: e4:01:d9:be:2c:95:b7:2c:fc:ef:7e:76:b4:e7:81: 9a:28:b4:d0:ab:2d:5a:6e:5f:1d:a4:4d:10:7d:c6: fe:3d:cc:e9:08:77:15:72:f0:a8:00:eb:2f:43:9d: 84:ed:f8:04:4b:0c:21:77:fb:c3:53:0c:80:74:dc: 53:c2:b7:0f:a2:d2:e5:44:00:eb:90:2c:e3:45:2f: 2b:98:c7:fd:f5:0a:6e:4e:ff:75:ad:96:72:28:52: 8c:d7:04:62:f8:a2:f8:9f:86:b0:c8:93:c1:da:e8: 84:2f:a7:13:f8:fe:21:aa:5d:7f:ed:0a:52:6f:f3: 50:79:d2:e6:58:ad:0a:20:57:4e:6e:36:9c:ac:14: be:10:7e:43:da:2e:e7:c4:6b:bb:98:01:79:5f:91: 8a:2f:d0:4f:d5:46:fe:a9:6f:69:7a:8a:8e:f1:5f: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:82:01:36:38:F4:67:B3:70:96:D0:22:E1:E1:4B:C3:09:16:71:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 208.84.64.0/24 208.86.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:40:19:dd:19:e4:f3:a3:03:fd:80:8a:84:6a:01:a8:e3:f6: c3:dd:1d:b7:54:1d:fc:e4:a0:be:9a:28:90:4b:4a:be:28:b4: 03:67:a8:4d:7c:f7:b1:13:35:0d:78:b6:80:af:1d:61:bb:61: 09:c4:f6:c8:8c:f0:b1:e6:60:01:dc:d8:32:bd:53:8a:6d:73: d7:a1:1b:70:1c:d4:5f:55:4b:65:ca:4b:6b:04:14:03:31:09: 94:fa:34:e1:87:3e:e8:2f:27:a6:ae:9c:68:b4:6f:20:c3:21: e3:f6:cd:ae:2d:c8:5c:0d:a2:c0:a5:bc:c3:c7:48:b1:9b:82: 2c:1f:51:c4:8f:bf:bb:3f:e2:1d:0f:56:92:cc:56:1d:51:aa: 37:7c:9e:55:43:b4:25:83:49:5c:00:76:11:28:7c:03:29:07: 67:e0:2b:b6:20:44:a7:f0:38:c8:e1:d7:fd:c4:2f:24:91:d7: 32:4c:0e:d9:3e:76:55:42:3b:41:4b:a8:a1:53:8f:8b:79:ad: c0:1e:52:e0:28:a0:33:65:d4:cc:7e:c6:64:ae:22:0f:90:68: ee:a1:33:d1:54:47:82:f5:88:7e:5a:a7:7e:07:8e:e6:5b:9e: c6:34:d4:24:12:fe:0d:5f:10:38:07:e1:e0:d8:21:bb:03:ee: 82:4f:3f:6a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4fqaUb5GPe18rH4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk ZjJiMDc0YTMtMGUzYS00ZmQxLWFhNjYtODU3OGRlYzgzOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OptOnTkfCAr+nF54wh58b5zsWpjgfeph0lY HKmRl2ZFL7k3bACQxYfwJnp5yHRSU8Aa/2GRcSWPXYhTeC+NHM1rstliM3tAT654 aGxS4mojFfN8FHgY+YPkAdm+LJW3LPzvfna054GaKLTQqy1abl8dpE0Qfcb+Pczp CHcVcvCoAOsvQ52E7fgESwwhd/vDUwyAdNxTwrcPotLlRADrkCzjRS8rmMf99Qpu Tv91rZZyKFKM1wRi+KL4n4awyJPB2uiEL6cT+P4hql1/7QpSb/NQedLmWK0KIFdO bjacrBS+EH5D2i7nxGu7mAF5X5GKL9BP1Ub+qW9peoqO8V9ryQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGuCATY49GezcJbQIuHhS8MJFnGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYmE5Njg0MzgtMWRjNC0z ZGIxLWEwYTEtZTQzNjBjOTc3MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0FRAAwQA 0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKhAGd0Z5POjA/2AioRqAajj9sPdHbdUHfzkoL6aKJBLSr4o tANnqE1897ETNQ14toCvHWG7YQnE9siM8LHmYAHc2DK9U4ptc9ehG3Ac1F9VS2XK S2sEFAMxCZT6NOGHPugvJ6aunGi0byDDIeP2za4tyFwNosClvMPHSLGbgiwfUcSP v7s/4h0PVpLMVh1Rqjd8nlVDtCWDSVwAdhEofAMpB2fgK7YgRKfwOMjh1/3ELySR 1zJMDtk+dlVCO0FLqKFTj4t5rcAeUuAooDNl1Mx+xmSuIg+QaO6hM9FUR4L1iH5a p34HjuZbnsY01CQS/g1fEDgH4eDYIbsD7oJPP2o= -----END CERTIFICATE-----Generated at Sun Jun 14 05:47:11 2026 by rpki-client