$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: 0m6q9Iin9w4hb3UcKaxLo2fuIUD/qhwmvCfyt5w+KWQ= Subject key identifier: 41:13:73:97:7D:2C:70:78:33:1B:A4:25:17:25:AA:82:A7:A0:7D:FF Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584E070098A24DBC33812A6FE780 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:98:a2:4d:bc:33:81:2a:6f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=786ed907-bd1b-481b-b0ec-140b2bf0f1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:74:22:3e:7f:a0:8a:30:6f:7c:a6:f3:77: 68:18:03:ab:58:9b:06:70:91:27:6c:46:2a:4b:70: a2:40:a6:a4:7d:31:34:2d:f8:2d:9d:85:2e:de:67: 6e:c5:70:ad:8e:18:2a:41:a1:41:2b:e3:e1:3d:67: e5:01:7b:01:27:40:a6:2e:65:94:6e:4f:50:8e:b7: b0:80:3b:f2:07:8f:1e:86:5e:79:cc:53:07:8b:10: 05:b1:3b:55:7f:3c:39:c0:4b:81:1e:73:86:96:17: 81:b9:ad:46:60:a7:29:e3:6d:54:99:3d:ef:11:8b: 36:91:15:9b:3e:d6:3c:a9:51:45:b6:27:b0:1e:f6: d9:da:f5:9e:53:ac:bc:81:97:a3:21:c7:13:95:55: 96:3c:1f:c4:63:a8:41:0a:1c:63:fb:3c:5a:07:21: 0e:5e:10:9e:99:86:02:ae:a3:1e:de:01:cd:d2:25: b1:3d:c9:13:23:44:3c:64:2e:0b:b3:00:df:22:a9: 89:b9:e0:af:89:c4:d0:ee:05:a1:82:99:e9:63:6b: 74:b1:85:c6:31:41:82:d8:e6:7f:99:1f:a7:86:f7: fc:24:c6:b8:0b:1f:35:57:db:ea:4a:7f:f6:f0:69: 80:34:cc:70:a0:49:49:92:c8:2d:91:9b:50:71:f8: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:73:97:7D:2C:70:78:33:1B:A4:25:17:25:AA:82:A7:A0:7D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ca:0d:bc:9c:66:95:db:e0:6c:af:c7:a7:ef:1c:58:8c:f6: 03:f2:60:83:67:b5:2c:13:d0:3c:82:eb:25:33:87:38:96:02: eb:68:12:36:29:23:eb:90:d7:3a:89:47:f0:6a:3b:db:a0:f1: 75:7f:71:19:63:00:b9:d3:eb:6a:03:47:82:6f:8b:8d:1b:66: 53:70:c8:1c:b8:11:e6:a5:05:1e:e0:4b:91:95:39:d5:f3:51: 85:10:04:8f:ae:5a:23:a4:95:1a:03:01:2b:cf:ed:ea:40:5d: c1:64:bc:4f:43:f0:ec:27:17:93:75:67:47:d4:b2:f8:f6:14: bd:4a:c8:3b:cc:9d:e8:31:cf:44:02:c8:a8:64:5b:64:65:9e: 7d:d5:dd:ee:a6:91:c0:3d:00:b4:d8:25:2f:e1:51:44:10:ed: 85:0e:3f:f0:eb:7a:3d:3f:97:c4:e8:a5:4f:fa:b8:58:ac:1e: d3:ab:9a:3f:4f:f9:95:c9:58:d3:61:fe:d8:1c:15:7a:70:06: 71:18:1f:8a:eb:5a:ef:c6:35:f6:88:16:8b:5b:79:67:7f:f6: 9d:bf:45:91:e9:ab:c6:9f:ed:50:c7:1c:44:2e:f9:40:42:7a: 39:b7:ce:86:57:4e:d3:8e:5e:5a:1f:3d:27:9e:e3:45:26:26: 6d:44:05:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJiiTbwzgSpv54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk Nzg2ZWQ5MDctYmQxYi00ODFiLWIwZWMtMTQwYjJiZjBmMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXt0Ij5/oIowb3ym83doGAOrWJsGcJEnbEYq S3CiQKakfTE0LfgtnYUu3mduxXCtjhgqQaFBK+PhPWflAXsBJ0CmLmWUbk9Qjrew gDvyB48ehl55zFMHixAFsTtVfzw5wEuBHnOGlheBua1GYKcp421UmT3vEYs2kRWb PtY8qVFFtiewHvbZ2vWeU6y8gZejIccTlVWWPB/EY6hBChxj+zxaByEOXhCemYYC rqMe3gHN0iWxPckTI0Q8ZC4LswDfIqmJueCvicTQ7gWhgpnpY2t0sYXGMUGC2OZ/ mR+nhvf8JMa4Cx81V9vqSn/28GmANMxwoElJksgtkZtQcfg7iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEETc5d9LHB4MxukJRclqoKnoH3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHKDbycZpXb4Gyvx6fvHFiM9gPyYINntSwT0DyC6yUzhziWAutoEjYp I+uQ1zqJR/BqO9ug8XV/cRljALnT62oDR4Jvi40bZlNwyBy4EealBR7gS5GVOdXz UYUQBI+uWiOklRoDASvP7epAXcFkvE9D8OwnF5N1Z0fUsvj2FL1KyDvMnegxz0QC yKhkW2Rlnn3V3e6mkcA9ALTYJS/hUUQQ7YUOP/Drej0/l8TopU/6uFisHtOrmj9P +ZXJWNNh/tgcFXpwBnEYH4rrWu/GNfaIFotbeWd/9p2/RZHpq8af7VDHHEQu+UBC ejm3zoZXTtOOXlofPSee40UmJm1EBVw= -----END CERTIFICATE-----Generated at Sat Jun 13 16:27:25 2026 by rpki-client