$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa File: d4870908-1a75-3a92-bcc7-0281d31bc642.roa (raw, json) Hash identifier: pne/E3syUcgDmIrYf0jetHrgkenzALt1UK2fj9Lp2tg= Subject key identifier: 60:8B:46:B7:F4:6B:63:4F:28:35:48:51:7B:81:0B:6A:FF:37:C3:B4 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584E1A14399F2C5D3851D0213380 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 44431 IP address blocks: 204.8.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:39:9f:2c:5d:38:51:d0:21:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=920db667-f7b8-42d1-9b01-4e994d44c294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:af:56:66:7f:6d:cf:57:46:59:9f:4b:8f:e7: a5:65:ba:ff:0f:41:d2:dc:a4:89:8c:a1:4d:40:aa: a9:52:23:79:b3:0d:76:d2:91:92:c2:87:59:79:10: 83:5e:d0:2f:bb:8a:de:37:26:83:c8:f9:ae:14:4f: 12:8a:5f:ba:64:f3:86:53:d8:99:5d:db:28:71:19: 44:1c:3c:29:1b:ff:4c:86:22:d4:a5:1b:af:ce:21: f3:c2:6e:8c:4a:9a:5c:3d:ff:ec:f8:f5:4b:d9:a7: 3d:f9:e1:29:31:d9:77:4c:72:fb:d3:52:5a:8e:a8: 41:d1:a8:28:78:05:4e:0f:0b:7a:9d:a7:08:e2:05: 4c:8b:59:3a:36:b7:69:2a:57:7d:1d:31:f8:30:c6: 7f:ce:39:58:3b:69:ad:7d:ee:03:8b:b0:3e:16:dd: 1e:f6:f6:ae:e4:21:b0:7c:fe:cd:1e:7d:21:2c:49: 87:38:52:92:d8:94:cf:19:f0:69:87:d9:0f:e9:88: 93:a6:08:10:83:0b:29:7f:fd:f4:2a:3e:3b:65:31: 09:26:46:e7:d6:06:79:c2:14:7f:50:bb:35:d1:d4: 5b:b8:04:f1:3b:f8:cf:91:39:64:f4:0b:f6:a9:e1: fb:87:7a:38:e3:82:da:0d:2b:65:07:d4:3f:62:37: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:46:B7:F4:6B:63:4F:28:35:48:51:7B:81:0B:6A:FF:37:C3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:54:52:0d:5d:f7:0a:eb:8a:e0:7e:07:bb:4f:6d:57:3c:f9: 45:94:a6:b1:89:2b:39:fd:34:bd:40:aa:5c:7d:e8:0f:ca:35: 69:9d:f7:1e:9f:19:af:db:09:e5:34:99:eb:7d:eb:2c:0b:ba: 6e:a1:a9:35:f7:0d:9d:da:b2:9e:cd:a3:0c:76:1b:5a:89:2c: 7b:80:96:8e:3c:ba:28:b0:e1:ae:5f:e6:bb:94:27:cd:8b:a8: b0:99:90:22:00:3b:a2:52:24:e5:44:61:cd:9d:3b:35:e5:cf: 01:63:57:d0:50:3b:27:2d:98:4d:b3:4a:d8:81:fc:f3:2e:44: c2:91:6a:c4:e6:db:a3:99:ba:1d:b7:c0:25:a7:07:37:9f:62: 71:dc:dd:b9:8a:8f:0d:fb:a2:e8:28:9a:a4:22:ff:29:34:70: 13:7e:c7:81:18:ac:05:d6:5a:03:e0:88:91:c3:e7:12:6e:01: d2:f0:ba:35:89:7b:4f:0d:48:df:08:0d:e4:31:b8:e8:79:d4: c9:00:07:01:b1:84:bf:d3:dc:a9:e1:6f:65:c9:6e:bd:f3:0d: c2:ca:a8:8d:81:7d:df:ea:09:4b:19:34:98:a9:51:be:db:35: 7c:dc:8f:71:76:85:48:fc:9b:0b:fd:49:9e:74:24:d2:10:27: f8:be:eb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFDmfLF04UdAhM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk OTIwZGI2NjctZjdiOC00MmQxLTliMDEtNGU5OTRkNDRjMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK9WZn9tz1dGWZ9Lj+elZbr/D0HS3KSJjKFN QKqpUiN5sw120pGSwodZeRCDXtAvu4reNyaDyPmuFE8Sil+6ZPOGU9iZXdsocRlE HDwpG/9MhiLUpRuvziHzwm6MSppcPf/s+PVL2ac9+eEpMdl3THL701JajqhB0ago eAVODwt6nacI4gVMi1k6NrdpKld9HTH4MMZ/zjlYO2mtfe4Di7A+Ft0e9vau5CGw fP7NHn0hLEmHOFKS2JTPGfBph9kP6YiTpggQgwspf/30Kj47ZTEJJkbn1gZ5whR/ ULs10dRbuATxO/jPkTlk9Av2qeH7h3o444LaDStlB9Q/YjdaSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCLRrf0a2NPKDVIUXuBC2r/N8O0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvZDQ4NzA5MDgtMWE3NS0z YTkyLWJjYzctMDI4MWQzMWJjNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5UUg1d9wrriuB+B7tPbVc8+UWUprGJKzn9NL1Aqlx96A/KNWmd9x6f Ga/bCeU0met96ywLum6hqTX3DZ3asp7Nowx2G1qJLHuAlo48uiiw4a5f5ruUJ82L qLCZkCIAO6JSJOVEYc2dOzXlzwFjV9BQOyctmE2zStiB/PMuRMKRasTm26OZuh23 wCWnBzefYnHc3bmKjw37ougomqQi/yk0cBN+x4EYrAXWWgPgiJHD5xJuAdLwujWJ e08NSN8IDeQxuOh51MkABwGxhL/T3Knhb2XJbr3zDcLKqI2Bfd/qCUsZNJipUb7b NXzcj3F2hUj8mwv9SZ50JNIQJ/i+66w= -----END CERTIFICATE-----Generated at Sat Jun 13 15:53:30 2026 by rpki-client