$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa File: 138497f4-eab8-37a3-8d4e-8dddf2b99925.roa (raw, json) Hash identifier: INVdgnHJnfp5lqNtrVvgMvpF3jbMIB9Tm2V9v0nX+TI= Subject key identifier: F4:E8:45:58:16:62:E1:7E:83:42:54:E0:88:2D:0A:BE:3E:42:5F:91 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E059C5A5652127F632F203D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 0 IP address blocks: 209.24.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:5a:56:52:12:7f:63:2f:20:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d6ba19ab-5fff-41fb-9e0e-dd3f7e19b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:cb:7e:db:dc:ce:47:40:3b:c8:bd:63:c7: 2b:84:2f:57:7a:b7:bb:63:31:1a:29:30:35:c0:33: 60:2f:63:0b:b6:8a:37:58:8f:96:6d:39:f6:a4:e8: 39:5b:55:5a:02:03:cb:1e:eb:e4:86:05:50:96:f5: 5a:de:4a:9f:c9:88:bb:97:63:b3:4d:d2:66:8d:ce: 55:6d:1b:37:74:71:a9:67:ad:a3:eb:f5:23:06:ec: 2c:a2:f3:a1:00:71:5f:04:7a:cc:ec:00:1a:30:e7: 55:eb:2b:ae:63:8a:28:8a:05:57:fe:73:0c:c9:a9: 73:8b:6d:e5:92:a0:1d:8f:8f:0e:e5:f3:bc:fb:da: 81:51:f6:ca:46:3f:06:af:6f:85:5b:29:fe:bc:ca: 74:61:8a:dc:8c:87:95:1b:47:06:fd:83:8a:9e:9f: d8:e7:0f:b5:7d:60:56:10:f0:5c:27:ee:9f:0d:a8: 72:d6:6b:68:34:e0:eb:8e:cd:f8:bc:fb:20:ee:61: 6c:16:92:04:c2:4b:e4:23:e1:44:cb:5b:7b:20:f0: 7c:57:ae:a0:28:14:16:a7:f8:03:99:e2:a4:4d:7e: af:04:2b:6d:2d:f6:59:00:08:41:42:1d:66:84:2f: a5:e8:87:9e:ef:ba:f6:41:a2:11:06:7c:e2:e5:c9: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:45:58:16:62:E1:7E:83:42:54:E0:88:2D:0A:BE:3E:42:5F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.24.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4b:81:b7:a5:99:18:11:7a:e4:75:c9:32:e6:62:c5:80:29: ed:70:dc:d1:a1:6f:71:33:ec:cf:5b:f2:b8:20:5a:30:e3:47: 0a:d4:d8:19:9b:12:ef:4f:d6:e5:c6:f6:d1:ff:ad:e1:aa:8e: 37:04:0e:e3:12:f9:33:95:2e:f9:12:26:a5:03:bb:27:26:01: 95:d2:32:48:2e:43:d5:4b:4a:6b:db:e0:5f:ce:36:9e:b8:c8: e8:31:17:9e:16:45:a9:9e:5b:82:4f:db:1e:2a:47:a5:58:1e: b2:55:51:5c:45:0e:c8:24:f6:f0:8f:4f:28:42:9c:89:d4:04: ae:ab:a4:b3:32:50:2b:1f:b5:e3:58:bb:0d:f5:59:66:41:9a: 15:6d:73:65:68:27:3f:64:a0:e6:2f:4e:cd:de:de:07:01:fb: 4e:ea:72:76:ce:a6:d0:29:11:70:96:0f:22:c3:54:33:4b:87: 3f:a1:06:7e:b0:8d:a2:b7:14:90:b4:d8:76:52:a6:2b:59:d5: 39:13:83:ce:5f:51:04:fb:93:17:fb:7f:95:d1:eb:d8:6a:e7: 95:40:6f:5f:ab:dd:4b:d6:a1:42:97:00:c2:c5:00:20:ec:ae: 98:9f:5b:38:d4:e8:2c:25:bf:5b:42:14:b8:40:89:63:6a:5e: a8:54:a3:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnFpWUhJ/Yy8gPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDZiYTE5YWItNWZmZi00MWZiLTllMGUtZGQzZjdlMTliNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjPLftvczkdAO8i9Y8crhC9Xere7YzEaKTA1 wDNgL2MLtoo3WI+WbTn2pOg5W1VaAgPLHuvkhgVQlvVa3kqfyYi7l2OzTdJmjc5V bRs3dHGpZ62j6/UjBuwsovOhAHFfBHrM7AAaMOdV6yuuY4ooigVX/nMMyalzi23l kqAdj48O5fO8+9qBUfbKRj8Gr2+FWyn+vMp0YYrcjIeVG0cG/YOKnp/Y5w+1fWBW EPBcJ+6fDahy1mtoNODrjs34vPsg7mFsFpIEwkvkI+FEy1t7IPB8V66gKBQWp/gD meKkTX6vBCttLfZZAAhBQh1mhC+l6Iee77r2QaIRBnzi5cl31QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPToRVgWYuF+g0JU4IgtCr4+Ql+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTM4NDk3ZjQtZWFiOC0z N2EzLThkNGUtOGRkZGYyYjk5OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1LgbelmRgReuR1yTLmYsWAKe1w3NGhb3Ez7M9b8rggWjDjRwrU2Bmb Eu9P1uXG9tH/reGqjjcEDuMS+TOVLvkSJqUDuycmAZXSMkguQ9VLSmvb4F/ONp64 yOgxF54WRameW4JP2x4qR6VYHrJVUVxFDsgk9vCPTyhCnInUBK6rpLMyUCsfteNY uw31WWZBmhVtc2VoJz9koOYvTs3e3gcB+07qcnbOptApEXCWDyLDVDNLhz+hBn6w jaK3FJC02HZSpitZ1TkTg85fUQT7kxf7f5XR69hq55VAb1+r3UvWoUKXAMLFACDs rpifWzjU6Cwlv1tCFLhAiWNqXqhUo2U= -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:52 2026 by rpki-client