$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa File: 490e40f9-36a1-3d80-91b1-b67f36065073.roa (raw, json) Hash identifier: 2Q9e0olM5TxlYbnswn+NRDWU2LRqo2xrwxGwk5NFVZI= Subject key identifier: 9B:0F:D6:A9:6C:65:74:9B:48:46:FF:6E:02:01:0B:55:61:A1:19:71 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584E0A6FFC1D652B8694B0096500 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 54668 IP address blocks: 174.137.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:fc:1d:65:2b:86:94:b0:09:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=364b8863-eec1-4c49-a867-d70a7044c31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:c7:41:48:e0:32:38:1d:a3:22:3a:04:44: 29:86:c1:f5:52:f3:cc:ae:2a:8c:fa:ee:92:a9:ad: 19:05:e3:96:93:c2:6e:c6:e4:bf:65:04:2b:b8:6a: 8e:f8:22:53:da:e5:fd:78:68:14:d2:4c:eb:ac:31: 97:e8:65:fe:f6:76:49:55:4c:b4:9d:19:9a:54:3a: 75:46:7b:59:f4:17:f2:c8:36:66:3b:11:9e:7a:f9: bc:d0:df:e3:34:dc:4d:71:a5:ce:f6:c7:37:53:a2: 5f:67:8d:9e:d3:1c:0a:53:ba:48:30:2f:53:2a:0e: 42:1f:99:34:44:ed:93:96:f9:7b:0c:19:11:57:6d: 09:3a:91:45:24:5a:ea:98:b6:a3:07:6a:d6:82:e5: 90:38:c3:96:52:62:35:46:54:89:0f:78:e6:72:57: ba:75:35:a5:59:a0:5c:af:0d:2b:ed:d5:81:a8:2b: fa:cc:5c:b7:e9:5c:6b:b2:93:57:79:3f:b0:62:8f: de:70:96:26:97:35:e7:9c:ea:b5:aa:32:6f:40:ae: 9c:47:4e:33:1e:1e:d3:90:18:ca:ae:ae:dc:21:db: be:98:73:f8:e5:41:02:b2:1b:8a:6c:a3:cb:37:b5: 35:3d:6b:21:df:73:99:cf:ef:3b:e5:b5:49:b6:44: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0F:D6:A9:6C:65:74:9B:48:46:FF:6E:02:01:0B:55:61:A1:19:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:73:16:78:13:d3:f6:da:0e:c1:18:82:f1:8f:27:d7:cf:a2: a3:4f:f1:8c:7c:fb:8c:a1:9b:a6:7d:d7:54:6d:e7:ec:4c:63: bc:61:7c:cb:cb:aa:9a:ee:3d:34:33:ac:ea:fb:05:f9:e7:ef: bf:3f:4d:1f:1c:16:d4:6d:8d:ed:ee:7b:fc:a9:2c:97:0f:07: 54:b0:71:fb:9a:fe:05:70:e7:1c:ca:29:e5:fa:b7:dd:9c:3b: fc:e9:93:ec:a8:38:48:20:dc:f9:ae:21:a8:c7:06:ab:2e:91: 4c:e4:4e:72:93:11:b8:a3:c4:1f:45:80:7e:78:de:77:4f:c4: b2:d1:f4:b6:37:98:3a:d4:ca:18:ce:33:72:54:9c:f1:83:e1: 3d:60:26:13:4c:17:2f:d0:7f:2e:06:3c:77:c6:17:ac:54:a2: 01:3d:5d:71:ef:6c:d1:a6:04:40:02:20:06:b4:57:25:45:08: 67:5a:18:58:14:a2:d4:c7:8d:73:f0:43:ff:57:df:95:bf:f3: 25:44:76:28:22:f8:29:4f:f8:d9:6c:ea:66:97:be:2c:e5:08: a0:61:05:a3:06:38:e7:65:d6:75:8e:63:c1:92:66:0a:e4:2b: 3f:3f:c7:44:8e:81:56:6d:5c:7f:52:eb:26:49:c5:08:cc:1f: 76:16:28:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/wdZSuGlLAJZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MzY0Yjg4NjMtZWVjMS00YzQ5LWE4NjctZDcwYTcwNDRjMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/HQUjgMjgdoyI6BEQphsH1UvPMriqM+u6S qa0ZBeOWk8JuxuS/ZQQruGqO+CJT2uX9eGgU0kzrrDGX6GX+9nZJVUy0nRmaVDp1 RntZ9BfyyDZmOxGeevm80N/jNNxNcaXO9sc3U6JfZ42e0xwKU7pIMC9TKg5CH5k0 RO2Tlvl7DBkRV20JOpFFJFrqmLajB2rWguWQOMOWUmI1RlSJD3jmcle6dTWlWaBc rw0r7dWBqCv6zFy36VxrspNXeT+wYo/ecJYmlzXnnOq1qjJvQK6cR04zHh7TkBjK rq7cIdu+mHP45UECshuKbKPLN7U1PWsh33OZz+875bVJtkQegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsP1qlsZXSbSEb/bgIBC1VhoRlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvNDkwZTQwZjktMzZhMS0z ZDgwLTkxYjEtYjY3ZjM2MDY1MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1zFngT0/baDsEYgvGPJ9fPoqNP8Yx8+4yhm6Z911Rt5+xMY7xhfMvL qpruPTQzrOr7Bfnn778/TR8cFtRtje3ue/ypLJcPB1Swcfua/gVw5xzKKeX6t92c O/zpk+yoOEgg3PmuIajHBqsukUzkTnKTEbijxB9FgH543ndPxLLR9LY3mDrUyhjO M3JUnPGD4T1gJhNMFy/Qfy4GPHfGF6xUogE9XXHvbNGmBEACIAa0VyVFCGdaGFgU otTHjXPwQ/9X35W/8yVEdigi+ClP+Nls6maXvizlCKBhBaMGOOdl1nWOY8GSZgrk Kz8/x0SOgVZtXH9S6yZJxQjMH3YWKA8= -----END CERTIFICATE-----Generated at Sun Jun 14 02:33:34 2026 by rpki-client