$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa File: 69935949-26cb-3a1a-85e7-7b6948013483.roa (raw, json) Hash identifier: dTu8MZSWL09IS7GNKWKNya/5/8L01Nyz7oNTBwMgW2o= Subject key identifier: D4:28:A0:AA:8B:E4:59:9F:80:80:7A:B7:07:C9:20:AB:E6:61:29:D7 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584E1E4450388C383C3361C70E80 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396952 IP address blocks: 199.36.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:50:38:8c:38:3c:33:61:c7:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=cbc3f561-5924-4f8e-a09a-a42f45859561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:a9:c0:52:73:24:94:f8:f9:50:c8:ee:e0: 6a:2c:82:7f:09:49:d6:0d:5a:d0:7d:ca:d7:73:8b: 58:a3:dd:d9:9f:c9:27:2d:58:fe:90:4a:13:27:f1: 3f:d5:41:70:58:b9:b7:b3:f5:f4:fd:58:ca:95:be: 9c:28:03:cb:e5:5c:a0:84:14:08:d8:ec:c5:d0:4e: f7:18:4f:66:d7:76:85:74:62:02:1d:ab:3b:03:07: 21:dd:dd:7b:9f:48:f7:98:3c:0a:c0:07:ac:0b:3b: a1:c8:57:e8:aa:99:21:86:63:2a:59:3e:d2:be:1f: bc:ca:8d:64:ce:5c:fa:9d:ae:99:73:e4:86:95:a8: 60:b4:a6:03:d7:d1:f4:0f:27:ac:df:06:66:b0:30: 8c:14:06:88:24:4c:6e:90:73:97:dc:c1:7e:14:f9: f4:2c:7d:ac:4b:71:29:6f:7c:5e:a4:1e:18:19:16: 1b:b5:e6:a5:b0:67:95:3e:1c:49:51:8e:ba:de:23: 70:f5:62:bb:a6:08:bb:92:5d:cd:6c:6d:41:75:94: 2e:d2:8a:13:2e:83:e1:7b:63:d6:a2:bf:c7:f0:f5: d8:c6:2a:b4:ab:70:dd:42:8e:38:a2:3c:b8:be:9c: 99:c5:b5:03:e5:82:88:7b:5f:20:65:2e:02:aa:56: 0b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:28:A0:AA:8B:E4:59:9F:80:80:7A:B7:07:C9:20:AB:E6:61:29:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 199.36.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2f:4b:40:65:17:a4:1f:d3:3b:c4:d4:3a:20:10:50:2c:ac: 25:94:3a:c6:a4:60:75:b1:ef:3e:88:ab:df:ea:15:55:8d:fb: 8a:90:a3:7e:e9:52:2a:fd:c5:c6:6b:cb:ff:b8:d2:a8:51:20: 35:55:b0:57:75:e0:ca:9b:82:52:2c:bd:0b:f8:f2:ca:8a:f4: 8b:40:57:cb:fa:be:64:b2:0a:31:00:e8:d0:dc:a3:f1:da:a2: e3:1e:d3:d0:5e:e6:33:3a:03:95:14:74:02:2d:d4:81:72:e2: 26:4c:b8:22:59:ef:c1:a2:21:31:75:4e:65:47:5b:9a:b1:47: af:20:c8:b0:4f:4a:d1:11:e3:6e:30:71:9b:af:33:bc:4f:dd: 5f:92:1c:ed:ac:54:c6:08:6e:74:2b:7f:3e:5a:9f:e3:92:7c: fb:8a:d0:33:ac:ba:92:6c:fd:a2:0d:be:97:a6:12:26:7d:4f: 69:6e:61:d0:dd:fc:3e:40:35:aa:1b:43:93:0b:d7:c3:21:63: 01:7d:04:bf:a0:bb:77:ec:54:37:99:34:88:be:7d:ae:0d:44: 85:e2:f2:67:2a:b3:e4:c1:e6:2d:97:aa:4a:dc:67:90:eb:88: f1:b6:d0:94:d2:0d:64:72:d5:ca:51:b1:30:09:fd:d5:12:6b: 89:d1:ac:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFA4jDg8M2HHDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk Y2JjM2Y1NjEtNTkyNC00ZjhlLWEwOWEtYTQyZjQ1ODU5NTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrypwFJzJJT4+VDI7uBqLIJ/CUnWDVrQfcrX c4tYo93Zn8knLVj+kEoTJ/E/1UFwWLm3s/X0/VjKlb6cKAPL5VyghBQI2OzF0E73 GE9m13aFdGICHas7Awch3d17n0j3mDwKwAesCzuhyFfoqpkhhmMqWT7Svh+8yo1k zlz6na6Zc+SGlahgtKYD19H0Dyes3wZmsDCMFAaIJExukHOX3MF+FPn0LH2sS3Ep b3xepB4YGRYbtealsGeVPhxJUY663iNw9WK7pgi7kl3NbG1BdZQu0ooTLoPhe2PW or/H8PXYxiq0q3DdQo44ojy4vpyZxbUD5YKIe18gZS4CqlYLuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQooKqL5FmfgIB6twfJIKvmYSnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNjk5MzU5NDktMjZjYi0z YTFhLTg1ZTctN2I2OTQ4MDEzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGovS0BlF6Qf0zvE1DogEFAsrCWUOsakYHWx7z6Iq9/qFVWN+4qQo37p Uir9xcZry/+40qhRIDVVsFd14MqbglIsvQv48sqK9ItAV8v6vmSyCjEA6NDco/Ha ouMe09Be5jM6A5UUdAIt1IFy4iZMuCJZ78GiITF1TmVHW5qxR68gyLBPStER424w cZuvM7xP3V+SHO2sVMYIbnQrfz5an+OSfPuK0DOsupJs/aINvpemEiZ9T2luYdDd /D5ANaobQ5ML18MhYwF9BL+gu3fsVDeZNIi+fa4NRIXi8mcqs+TB5i2XqkrcZ5Dr iPG20JTSDWRy1cpRsTAJ/dUSa4nRrAs= -----END CERTIFICATE-----Generated at Sun Jun 14 02:37:15 2026 by rpki-client