$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/253376e1-3a06-3e6d-ba65-b228978d1a68.roa File: 253376e1-3a06-3e6d-ba65-b228978d1a68.roa (raw, json) Hash identifier: c/fRE+Kq3Mr7PS57aKV0aNgP8e9nieW7f3RIHr+DvwU= Subject key identifier: C9:C1:43:0F:80:7F:66:CC:3A:30:83:29:22:B5:1D:3B:08:0C:99:F9 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584E1B799295783938F302A9A8F0 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/253376e1-3a06-3e6d-ba65-b228978d1a68.roa Signing time: Mon 08 Jun 2026 21:00:12 +0000 ROA not before: Mon 08 Jun 2026 21:00:12 +0000 ROA not after: Sun 06 Sep 2026 21:00:12 +0000 asID: 19901 IP address blocks: 143.103.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:79:92:95:78:39:38:f3:02:a9:a8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Jun 8 21:00:12 2026 GMT Not After : Sep 6 21:00:12 2026 GMT Subject: CN=b5a5ffbf-6da0-4772-834f-e38b35888cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:71:7a:fc:3e:a7:cb:55:46:5e:b9:e9:e7: ba:84:54:73:b2:9e:d6:c3:f5:18:cb:c4:c7:98:0b: fe:10:cf:99:e5:d5:d9:7e:3e:cd:41:c2:62:0b:dc: 94:f7:02:12:9e:10:b9:85:55:58:9c:3c:7c:58:2d: 1d:52:9c:d4:c0:f9:94:d7:2d:b5:cb:a7:6b:55:3a: 20:3c:b5:6e:c4:a5:48:f3:72:a1:e8:6a:ed:aa:ec: eb:8c:62:95:a0:0e:90:f2:2f:2e:0d:1a:71:e8:bb: 69:76:43:fa:41:a1:9e:e2:23:0f:c4:e9:1d:83:ec: a4:03:b6:9f:ea:af:6f:e9:44:b5:19:44:4c:05:d5: c7:2b:73:8f:9f:c0:a9:02:3e:69:86:4a:5e:a3:e5: 48:38:6f:df:35:46:e7:44:13:73:9c:46:5c:f3:f4: 2b:ce:1b:61:d0:42:33:55:8c:18:7a:de:52:19:61: 27:e5:88:39:63:93:73:4b:72:cc:25:1e:21:3c:a9: 4e:9a:43:65:c4:0e:04:a8:f9:75:b2:9e:06:41:7e: 96:80:91:fd:f4:2a:a3:0e:58:5d:30:76:da:13:9b: 7b:72:3d:9a:bb:7e:3c:e7:dc:ba:90:cd:9c:8f:ce: f7:55:89:5f:d5:61:bf:c9:81:62:1e:d2:d0:11:e1: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:43:0F:80:7F:66:CC:3A:30:83:29:22:B5:1D:3B:08:0C:99:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/253376e1-3a06-3e6d-ba65-b228978d1a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 143.103.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3d:c1:94:38:4a:d7:c0:b5:e4:1f:83:f8:f6:16:a0:0e:2d: 8d:7d:9c:87:75:26:d2:80:f1:eb:ca:25:39:08:de:d4:cb:18: 86:60:5c:9c:ce:94:db:07:6d:d2:6d:20:0a:03:a7:29:4a:0f: 77:db:ec:4c:19:02:b6:64:48:f7:e7:45:fe:23:76:17:3f:63: 6c:5f:26:e5:9d:3e:38:fb:98:5e:ac:2e:22:84:66:2c:cd:1f: 93:00:e4:c0:53:0d:f3:6d:1d:b2:ea:80:e7:f9:79:f6:cd:5c: e3:43:02:ca:55:90:36:10:f6:9e:57:04:6f:24:2e:e7:36:77: 6a:c7:66:5a:98:29:98:bd:43:3c:68:28:61:ee:ce:c0:6e:42: 58:52:ad:07:f0:31:70:09:bc:fb:39:d5:2a:86:e1:ff:da:95: d3:c5:ef:d1:69:1a:25:f8:db:48:a2:cd:a1:b8:e4:ef:29:54: a4:bc:e6:77:ba:00:73:29:e1:a1:08:72:17:de:a4:33:2f:73: ab:c2:22:a4:29:40:0f:cc:c1:a5:86:ce:c1:a3:36:5d:bb:60: 2f:a1:a7:00:eb:28:c5:ea:ae:8a:bd:77:f3:f1:d9:82:32:36: f8:19:93:38:df:fe:b9:9b:71:a8:70:bd:0e:56:39:53:fb:6e: 6f:ac:0c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beZKVeDk48wKpqPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk YjVhNWZmYmYtNmRhMC00NzcyLTgzNGYtZTM4YjM1ODg4Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DRxevw+p8tVRl656ee6hFRzsp7Ww/UYy8TH mAv+EM+Z5dXZfj7NQcJiC9yU9wISnhC5hVVYnDx8WC0dUpzUwPmU1y21y6drVTog PLVuxKVI83Kh6GrtquzrjGKVoA6Q8i8uDRpx6LtpdkP6QaGe4iMPxOkdg+ykA7af 6q9v6US1GURMBdXHK3OPn8CpAj5phkpeo+VIOG/fNUbnRBNznEZc8/Qrzhth0EIz VYwYet5SGWEn5Yg5Y5NzS3LMJR4hPKlOmkNlxA4EqPl1sp4GQX6WgJH99CqjDlhd MHbaE5t7cj2au34859y6kM2cj873VYlf1WG/yYFiHtLQEeGEDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnBQw+Af2bMOjCDKSK1HTsIDJn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMjUzMzc2ZTEtM2EwNi0z ZTZkLWJhNjUtYjIyODk3OGQxYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj2fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw9wZQ4StfAteQfg/j2FqAOLY19nId1JtKA8evKJTkI3tTLGIZgXJzO lNsHbdJtIAoDpylKD3fb7EwZArZkSPfnRf4jdhc/Y2xfJuWdPjj7mF6sLiKEZizN H5MA5MBTDfNtHbLqgOf5efbNXONDAspVkDYQ9p5XBG8kLuc2d2rHZlqYKZi9Qzxo KGHuzsBuQlhSrQfwMXAJvPs51SqG4f/aldPF79FpGiX420iizaG45O8pVKS85ne6 AHMp4aEIchfepDMvc6vCIqQpQA/MwaWGzsGjNl27YC+hpwDrKMXqroq9d/Px2YIy NvgZkzjf/rmbcahwvQ5WOVP7bm+sDAA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:33:30 2026 by rpki-client