$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa File: 6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa (raw, json) Hash identifier: fQvenlCesMwirsE9JOFQWHcXTeev8jofiT1ei/8L390= Subject key identifier: C1:3F:CB:FB:02:C2:44:BC:0A:3B:CF:D8:50:DA:C4:99:50:67:F3:2B Certificate issuer: /CN=7df7e023-145a-4cd7-8721-998050ab91e2 Certificate serial: 010D0C9F4328584E104EECE099BC1C6FB29E0600 Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 11848 IP address blocks: 170.199.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ec:e0:99:bc:1c:6f:b2:9e:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=c7985f47-50e2-44b6-91d4-245507ac8ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:0b:e4:35:8c:a0:37:26:e6:c9:42:75:41: b4:96:08:9b:fa:2e:71:0a:8a:12:93:63:e5:8c:0a: 2a:67:5c:a8:1b:1a:66:e9:df:91:26:46:17:f2:53: b7:4a:17:64:8a:08:ae:35:ad:3e:c4:31:27:c7:1f: be:52:ac:67:45:86:17:32:a4:12:09:7d:ef:b0:67: b7:8e:45:76:69:95:39:a5:e2:d9:e3:3d:3d:dd:3b: 31:a0:7d:d9:f1:df:ba:22:ab:49:5b:76:b2:f2:91: 22:ee:a5:40:17:45:44:ec:b8:1f:c0:32:64:09:b1: a0:5f:fe:96:63:e5:8c:68:06:3a:eb:44:fc:cd:bd: 0c:58:1e:df:bf:c8:0f:f7:3a:3f:be:f3:92:8f:db: 14:80:56:9b:25:94:bc:a5:a3:40:91:a9:ab:08:28: dc:d9:c3:5f:59:90:65:e5:8c:4d:4d:5b:d6:1b:c1: e0:6a:ec:bc:38:9b:e0:93:38:52:0c:cf:94:7d:62: 4c:8c:e2:4b:41:59:c1:2b:1a:62:f3:9a:7f:07:8f: be:6d:03:ad:33:33:d9:ee:79:11:0e:d1:0e:e0:cf: 31:0c:95:02:9c:31:3b:bd:6e:28:fe:71:5b:21:2c: ea:38:58:20:b5:22:71:b9:ff:74:a1:c9:b8:99:99: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:CB:FB:02:C2:44:BC:0A:3B:CF:D8:50:DA:C4:99:50:67:F3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl X509v3 Authority Key Identifier: keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer sbgp-ipAddrBlock: critical IPv4: 170.199.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:87:f8:df:4e:55:a7:ac:fb:67:8c:9f:d6:4a:1f:16:f9:e9: 0b:b4:e4:e9:b4:f8:0d:21:08:a5:ee:91:bd:8c:ff:2a:ce:3e: f5:42:4a:e6:61:7a:4a:0b:13:ef:57:57:99:5a:dd:c5:30:9a: d1:14:69:bc:f9:73:00:59:b8:e0:ff:12:bf:b7:a6:61:d9:bf: 69:75:33:58:4b:ed:c6:9f:ae:e2:14:8f:07:22:4c:91:55:8d: 14:ed:ed:d7:29:37:42:64:52:9f:5e:2e:48:e1:40:86:5d:c7: 01:94:39:34:91:c4:6c:cd:a1:47:f4:fa:72:4b:81:72:c5:45: 9e:d0:93:60:ca:e0:60:87:fd:22:f8:ad:61:e8:5c:b3:6b:c5: 06:8f:02:b9:c7:9d:17:70:7a:29:03:41:c6:8e:f2:7e:d6:aa: 49:a9:b6:45:cb:42:84:76:d0:41:ba:22:36:dc:60:1a:2e:6f: 00:18:e0:17:6d:32:2d:ba:85:3d:c6:86:af:1c:e3:11:7d:07: ab:b1:db:57:96:9e:54:6b:af:37:4f:47:b3:94:ff:88:36:a6: 92:73:08:c5:a1:23:30:ae:10:e0:6f:03:cd:65:4e:51:00:0b: 0d:e2:0e:b3:57:3d:df:85:46:9b:ef:e9:eb:81:19:96:b4:09: 2c:05:d5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTuzgmbwcb7KeBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3MjEtOTk4MDUwYWI5 MWUyMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk Yzc5ODVmNDctNTBlMi00NGI2LTkxZDQtMjQ1NTA3YWM4YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfkL5DWMoDcm5slCdUG0lgib+i5xCooSk2Pl jAoqZ1yoGxpm6d+RJkYX8lO3ShdkigiuNa0+xDEnxx++UqxnRYYXMqQSCX3vsGe3 jkV2aZU5peLZ4z093TsxoH3Z8d+6IqtJW3ay8pEi7qVAF0VE7LgfwDJkCbGgX/6W Y+WMaAY660T8zb0MWB7fv8gP9zo/vvOSj9sUgFabJZS8paNAkamrCCjc2cNfWZBl 5YxNTVvWG8Hgauy8OJvgkzhSDM+UfWJMjOJLQVnBKxpi85p/B4++bQOtMzPZ7nkR DtEO4M8xDJUCnDE7vW4o/nFbISzqOFggtSJxuf90ocm4mZniIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME/y/sCwkS8CjvP2FDaxJlQZ/MrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZGY3 ZTAyMy0xNDVhLTRjZDctODcyMS05OTgwNTBhYjkxZTIvNmZjZTRkOWEtNTAyMi0z Zjk2LTljNmItNjhmNDk2OThkNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3 MjEtOTk4MDUwYWI5MWUyLzdkZjdlMDIzLTE0NWEtNGNkNy04NzIxLTk5ODA1MGFi OTFlMi5jcmwwHwYDVR0jBBgwFoAUeC1lMSOk1DU19Ym6y1bRDFjjVu4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZGY3ZTAyMy0xNDVhLTRjZDctODcyMS05OTgw NTBhYjkxZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6H+N9OVaes+2eMn9ZKHxb56Qu05Om0+A0hCKXukb2M/yrOPvVCSuZh ekoLE+9XV5la3cUwmtEUabz5cwBZuOD/Er+3pmHZv2l1M1hL7cafruIUjwciTJFV jRTt7dcpN0JkUp9eLkjhQIZdxwGUOTSRxGzNoUf0+nJLgXLFRZ7Qk2DK4GCH/SL4 rWHoXLNrxQaPArnHnRdweikDQcaO8n7WqkmptkXLQoR20EG6IjbcYBoubwAY4Bdt Mi26hT3Ghq8c4xF9B6ux21eWnlRrrzdPR7OU/4g2ppJzCMWhIzCuEOBvA81lTlEA Cw3iDrNXPd+FRpvv6euBGZa0CSwF1TY= -----END CERTIFICATE-----Generated at Sat Jun 13 20:46:37 2026 by rpki-client