$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa File: 0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa (raw, json) Hash identifier: ++wpgQc3/DSyly2QlqKqGsa1X+yStTgK8du/SAl0+Rg= Subject key identifier: A4:E5:27:71:AF:68:5A:09:D1:3E:2E:79:AD:06:B6:F3:63:BB:33:1C Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584E0A70100A00D3887D7E512240 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 30277 IP address blocks: 209.236.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:10:0a:00:d3:88:7d:7e:51:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=f67034e5-f97b-4fbe-8d97-c2a1cc9b8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:9a:7d:31:48:13:4b:0a:b2:93:66:d0:1d: fc:5d:cd:13:5d:81:3d:d2:6a:ee:e9:71:9c:1b:f4: 1c:93:24:8a:38:07:68:a6:2f:16:e5:35:97:45:fa: a8:c9:73:2c:2c:eb:c5:10:e3:2b:d3:e4:df:09:db: 17:0e:f4:04:4d:d7:58:f4:dd:7f:99:23:78:ee:36: 85:54:24:d9:cf:92:cd:1f:42:c2:a7:3a:0b:6d:50: 51:1a:e6:58:fa:3c:77:e2:f3:49:30:60:d6:2f:30: ff:2a:7e:7e:67:77:12:0c:3c:01:0d:07:1b:a2:90: 37:b0:6c:ca:83:30:6f:76:d0:81:55:6b:b1:4f:ac: b5:73:93:1d:39:e8:62:94:96:ea:36:27:4b:3b:8b: b2:c9:67:5f:bf:09:08:26:4a:62:79:c0:f9:9c:ab: f1:b6:97:90:da:ef:8b:79:ef:1c:4b:cb:2d:51:74: da:5c:8a:e6:85:c5:37:d2:e5:c1:99:f5:66:c5:78: d0:9b:7f:a9:e7:a8:3a:04:c8:ce:aa:6f:99:fd:f6: fd:8b:2f:9b:0b:13:bd:6b:7d:df:d5:f9:cc:8f:d5: 19:a9:c8:75:8a:58:59:87:b8:55:ea:1d:27:f6:a9: 68:58:fe:4b:5f:87:5d:77:ba:ea:4c:72:74:87:83: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E5:27:71:AF:68:5A:09:D1:3E:2E:79:AD:06:B6:F3:63:BB:33:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 209.236.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:98:36:64:72:b1:48:02:47:22:5a:50:6b:40:97:22:7b:01: cc:ce:59:19:ec:c6:07:93:b1:3c:90:8b:03:ea:27:5e:bd:a0: 72:1b:5c:59:f6:7d:33:60:32:e8:56:10:3b:03:09:f5:f2:b8: 17:c2:b0:76:7f:97:8c:b2:1c:14:a2:22:91:94:d6:56:b8:1e: 99:ca:b6:c6:74:ca:bc:fb:32:c1:15:08:5f:c8:b5:a3:5c:b1: f5:82:6f:38:53:47:1c:ed:62:69:74:ec:72:37:c5:06:3f:06: da:4a:35:51:23:ae:78:1e:73:86:e8:f1:29:ae:e2:c7:17:63: 28:46:83:50:53:0a:af:b8:ac:0d:bd:a4:16:a4:47:6f:03:ee: 3b:d0:e7:20:d8:44:d5:49:c2:53:a1:52:e2:c2:81:05:bf:0b: 19:ba:d6:56:d4:d4:61:35:42:b2:6a:1d:48:49:4e:2b:7b:fa: b6:ea:d3:22:cd:c2:79:e4:70:d2:8a:cc:67:3c:39:94:b9:a6: 10:49:3e:38:91:18:66:98:40:34:8e:43:5e:bd:b5:9a:0f:0c: ea:95:35:ad:97:29:5b:b6:0b:70:bb:c8:69:57:d7:4f:6c:7e: 1e:16:7a:39:9a:08:0e:84:52:36:96:52:12:5e:7c:d1:b9:2c: 89:f9:2b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcBAKANOIfX5RIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ZjY3MDM0ZTUtZjk3Yi00ZmJlLThkOTctYzJhMWNjOWI4Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndeafTFIE0sKspNm0B38Xc0TXYE90mru6XGc G/QckySKOAdopi8W5TWXRfqoyXMsLOvFEOMr0+TfCdsXDvQETddY9N1/mSN47jaF VCTZz5LNH0LCpzoLbVBRGuZY+jx34vNJMGDWLzD/Kn5+Z3cSDDwBDQcbopA3sGzK gzBvdtCBVWuxT6y1c5MdOehilJbqNidLO4uyyWdfvwkIJkpiecD5nKvxtpeQ2u+L ee8cS8stUXTaXIrmhcU30uXBmfVmxXjQm3+p56g6BMjOqm+Z/fb9iy+bCxO9a33f 1fnMj9UZqch1ilhZh7hV6h0n9qloWP5LX4ddd7rqTHJ0h4N3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTlJ3GvaFoJ0T4uea0GtvNjuzMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvMGNmM2I0Y2YtMTQ5Mi0z YjkxLThlZDAtODE5YzBjNmIyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0exwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmYNmRysUgCRyJaUGtAlyJ7AczOWRnsxgeTsTyQiwPqJ169oHIbXFn2 fTNgMuhWEDsDCfXyuBfCsHZ/l4yyHBSiIpGU1la4HpnKtsZ0yrz7MsEVCF/ItaNc sfWCbzhTRxztYml07HI3xQY/BtpKNVEjrngec4bo8Smu4scXYyhGg1BTCq+4rA29 pBakR28D7jvQ5yDYRNVJwlOhUuLCgQW/Cxm61lbU1GE1QrJqHUhJTit7+rbq0yLN wnnkcNKKzGc8OZS5phBJPjiRGGaYQDSOQ169tZoPDOqVNa2XKVu2C3C7yGlX109s fh4WejmaCA6EUjaWUhJefNG5LIn5K9I= -----END CERTIFICATE-----Generated at Sat Jun 13 16:00:32 2026 by rpki-client