$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa File: daf14092-dafe-3ba6-9746-8236744966f4.roa (raw, json) Hash identifier: BEGKnzCR7Ut7W6LLw3EYS2HAjRXlLzPi07LkfJBkihU= Subject key identifier: 87:39:F1:8B:F5:C2:7C:D4:56:7F:18:91:58:8A:CF:24:2E:A0:E6:29 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584E18AEEE6D01CFEA52F0500280 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 397422 IP address blocks: 209.237.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:ee:6d:01:cf:ea:52:f0:50:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=f99fe9fa-e81c-4d67-8532-ad3e4253d17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:cd:d9:54:33:c4:3b:77:e6:0b:bd:08:b8: d1:02:6f:e4:ce:ad:bf:2a:89:89:c9:21:ea:7e:28: 8d:38:ea:9b:5d:75:6a:c4:22:c8:4c:de:43:75:3e: 81:28:36:7c:16:34:2c:4b:2b:d4:ce:56:3c:f1:29: 1e:65:90:c8:97:58:dd:a7:bf:50:9a:3b:96:35:88: 3d:46:3d:d5:72:ea:c0:1b:c9:9a:0f:3e:3c:3b:60: c3:f5:d4:f4:0b:1b:d6:a2:68:09:eb:bd:ab:bb:87: 5b:2a:43:5f:b0:db:77:8c:af:f5:62:4d:fe:79:ab: fc:cf:86:57:2c:8a:d6:21:ae:63:fb:20:f9:e0:e4: 3f:02:77:9f:f9:92:08:b6:aa:db:49:e1:7b:f3:66: 64:5e:30:98:33:62:c7:7d:e6:98:25:fc:2a:41:34: da:d1:14:80:df:d4:29:86:1b:cb:b6:0b:dd:40:38: f7:c8:71:e3:ab:c2:46:11:7a:18:86:aa:97:74:d4: e9:b4:16:47:22:e4:e7:1d:29:c9:8c:6b:17:29:0b: 48:b0:8d:b5:0a:4d:03:cc:cf:5f:b8:df:69:e1:24: ee:ac:67:30:3d:93:7b:f6:b1:0c:b3:a5:85:25:f9: 7e:23:62:67:30:8e:d1:4a:c2:37:b4:3c:f0:af:f7: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:F1:8B:F5:C2:7C:D4:56:7F:18:91:58:8A:CF:24:2E:A0:E6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:85:f1:17:8d:7d:92:2b:69:6e:38:0f:a7:ee:48:1f:ad:ce: d3:2d:94:71:c3:8c:5b:6c:42:fb:a9:08:8f:bf:01:5a:44:41: 29:71:8c:09:05:2b:3e:03:16:10:d2:d1:0a:22:c1:56:7c:a6: 35:39:b4:6d:65:4e:ff:2b:34:9e:68:30:ae:f7:06:8c:d3:82: 20:63:37:37:d5:a6:0e:c3:4a:ea:a9:75:37:01:88:65:1f:52: 99:2e:4a:00:af:20:a9:31:84:c3:bc:2f:3d:98:c4:1e:62:b9: 14:76:5c:7a:58:04:31:48:a4:30:4e:e7:a2:27:2b:41:a8:17: ee:fe:06:0b:bb:44:d9:ca:75:d8:0a:a4:03:7b:e2:4a:23:68: 1f:55:ef:17:e2:bc:4d:8f:9c:95:59:d1:81:82:23:da:d1:b1: ee:11:b7:7c:0f:12:f1:13:e5:0e:59:4a:07:1d:ea:56:84:ad: 2f:b0:2a:ef:22:24:02:c8:29:ed:2b:1d:bf:e8:5a:96:0a:33: 5d:8f:34:e1:86:3a:5d:64:6b:8c:c3:79:7a:fa:dc:68:05:9a: e7:5b:9c:78:e3:b6:50:9a:c0:3d:1c:a7:33:aa:25:31:01:17: 5a:e3:07:66:92:30:be:f2:d6:30:4f:df:72:7b:9a:f3:24:46: 50:6c:1a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yru5tAc/qUvBQAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk Zjk5ZmU5ZmEtZTgxYy00ZDY3LTg1MzItYWQzZTQyNTNkMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKPN2VQzxDt35gu9CLjRAm/kzq2/KomJySHq fiiNOOqbXXVqxCLITN5DdT6BKDZ8FjQsSyvUzlY88SkeZZDIl1jdp79QmjuWNYg9 Rj3VcurAG8maDz48O2DD9dT0CxvWomgJ672ru4dbKkNfsNt3jK/1Yk3+eav8z4ZX LIrWIa5j+yD54OQ/Anef+ZIItqrbSeF782ZkXjCYM2LHfeaYJfwqQTTa0RSA39Qp hhvLtgvdQDj3yHHjq8JGEXoYhqqXdNTptBZHIuTnHSnJjGsXKQtIsI21Ck0DzM9f uN9p4STurGcwPZN79rEMs6WFJfl+I2JnMI7RSsI3tDzwr/d0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc58Yv1wnzUVn8YkViKzyQuoOYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGFmMTQwOTItZGFmZS0z YmE2LTk3NDYtODIzNjc0NDk2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGF8ReNfZIraW44D6fuSB+tztMtlHHDjFtsQvupCI+/AVpEQSlxjAkF Kz4DFhDS0QoiwVZ8pjU5tG1lTv8rNJ5oMK73BozTgiBjNzfVpg7DSuqpdTcBiGUf UpkuSgCvIKkxhMO8Lz2YxB5iuRR2XHpYBDFIpDBO56InK0GoF+7+Bgu7RNnKddgK pAN74kojaB9V7xfivE2PnJVZ0YGCI9rRse4Rt3wPEvET5Q5ZSgcd6laErS+wKu8i JALIKe0rHb/oWpYKM12PNOGGOl1ka4zDeXr63GgFmudbnHjjtlCawD0cpzOqJTEB F1rjB2aSML7y1jBP33J7mvMkRlBsGgs= -----END CERTIFICATE-----Generated at Sat Jun 13 15:49:34 2026 by rpki-client