$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa File: 20ba3136-7192-3d31-ba1d-b329c8840df5.roa (raw, json) Hash identifier: zQ2Y1hVuwnIrapLEeDN6nzjNAnuQcFmdMSZQlYUoHGE= Subject key identifier: 77:6A:4C:01:D5:37:2F:AD:4C:C1:5A:CE:FC:8C:3F:3F:36:F3:61:2B Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584E210EF24149A3A0001E16F100 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 53405 IP address blocks: 192.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:f2:41:49:a3:a0:00:1e:16:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=1b85d97a-e583-4e0d-bcb6-059a9f4130f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:61:22:72:b8:46:13:8a:3f:71:ea:f8:e3: 7f:a5:3e:1f:48:1e:26:29:f7:4f:b2:38:c1:09:1d: aa:94:6b:d7:31:22:dc:88:3d:9f:c9:94:7f:16:b4: 6d:5a:05:77:07:79:1c:cf:e8:26:00:35:09:7b:ac: 80:74:43:fb:c9:bf:39:2e:e9:44:21:3e:6c:62:69: 45:14:16:2b:43:0a:db:43:ef:1e:0f:46:2b:1d:33: cf:5e:50:db:08:36:f4:ef:b8:ed:8b:42:57:14:f2: 23:ef:a0:3f:84:00:f0:57:03:e2:b0:20:59:71:c0: a5:89:1a:6f:08:04:bf:cc:08:df:3c:4a:7f:8e:82: 39:67:cc:63:59:b8:4c:11:93:ec:5f:6c:d9:13:c2: 45:bb:e4:1c:67:14:79:c6:66:0d:c2:6b:38:b0:c4: 44:87:a8:d9:d8:10:7f:6e:62:f9:7d:9b:97:84:f0: 74:42:a7:35:41:3e:bc:d3:e1:22:42:d4:6b:15:d2: 3c:87:98:bc:2c:37:d4:ed:a9:d9:50:ec:b4:3b:1a: 4f:a1:7c:78:66:de:84:8c:cf:c5:cc:94:3c:67:bb: 4c:02:d7:68:15:14:77:1c:17:6b:4f:60:30:17:ae: 9c:38:fe:b7:ac:32:24:6d:16:15:36:7a:4e:c2:fa: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6A:4C:01:D5:37:2F:AD:4C:C1:5A:CE:FC:8C:3F:3F:36:F3:61:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/20ba3136-7192-3d31-ba1d-b329c8840df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: 192.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:81:43:5c:ca:cd:71:7a:82:3c:3e:37:56:52:f8:fe:f7:c1: 0e:98:0c:c6:60:57:c9:65:22:c7:0a:2e:7f:56:1f:36:92:76: 6c:48:83:9f:c5:01:8a:b3:ce:86:0b:54:f8:f5:f4:e3:e5:30: ae:4b:44:2c:ca:ab:6e:ac:5e:f3:ba:77:63:05:20:e6:e6:8c: e0:0f:cd:3e:45:e9:f0:f1:ec:25:08:b2:07:31:76:d7:3f:68: e4:db:d9:78:3a:9e:1f:16:7f:e1:fd:c3:6a:c4:89:20:a1:27: 7f:e8:4d:42:5d:f9:8d:cd:c4:5d:e7:65:48:fa:a0:03:b5:7c: 58:fe:de:91:c8:69:a2:c6:e8:ce:38:5b:84:52:5d:6d:57:4e: 4a:3d:5c:f3:7d:7a:03:b5:8a:fb:97:4b:b8:63:73:9d:67:d9: c6:96:ad:2f:2d:44:ee:f7:ba:35:7c:99:18:96:e9:ce:c5:90: 2c:5e:8a:19:6a:f3:10:bc:52:a5:3b:43:06:b0:4a:a0:72:61: 3d:b2:10:42:69:83:7c:5b:e1:1f:04:63:8d:b0:90:4d:dc:73: d5:99:b2:07:68:82:b7:e7:de:5c:da:bc:60:f4:0a:86:68:f4: 0a:4b:03:b2:da:92:de:b0:84:be:3c:8a:4e:eb:cd:37:90:65: 3b:fc:94:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDvJBSaOgAB4W8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk MWI4NWQ5N2EtZTU4My00ZTBkLWJjYjYtMDU5YTlmNDEzMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz5hInK4RhOKP3Hq+ON/pT4fSB4mKfdPsjjB CR2qlGvXMSLciD2fyZR/FrRtWgV3B3kcz+gmADUJe6yAdEP7yb85LulEIT5sYmlF FBYrQwrbQ+8eD0YrHTPPXlDbCDb077jti0JXFPIj76A/hADwVwPisCBZccCliRpv CAS/zAjfPEp/joI5Z8xjWbhMEZPsX2zZE8JFu+QcZxR5xmYNwms4sMREh6jZ2BB/ bmL5fZuXhPB0Qqc1QT680+EiQtRrFdI8h5i8LDfU7anZUOy0OxpPoXx4Zt6EjM/F zJQ8Z7tMAtdoFRR3HBdrT2AwF66cOP63rDIkbRYVNnpOwvrUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdqTAHVNy+tTMFazvyMPz8282ErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvMjBiYTMxMzYtNzE5Mi0z ZDMxLWJhMWQtYjMyOWM4ODQwZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwMfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOBQ1zKzXF6gjw+N1ZS+P73wQ6YDMZgV8llIscKLn9WHzaSdmxIg5/F AYqzzoYLVPj19OPlMK5LRCzKq26sXvO6d2MFIObmjOAPzT5F6fDx7CUIsgcxdtc/ aOTb2Xg6nh8Wf+H9w2rEiSChJ3/oTUJd+Y3NxF3nZUj6oAO1fFj+3pHIaaLG6M44 W4RSXW1XTko9XPN9egO1ivuXS7hjc51n2caWrS8tRO73ujV8mRiW6c7FkCxeihlq 8xC8UqU7QwawSqByYT2yEEJpg3xb4R8EY42wkE3cc9WZsgdogrfn3lzavGD0CoZo 9ApLA7Lakt6whL48ik7rzTeQZTv8lEA= -----END CERTIFICATE-----Generated at Sun Jun 14 02:31:06 2026 by rpki-client