$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa File: b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa (raw, json) Hash identifier: pvUsiUjk2UD/iaECxGeyqyDsIsfs2CXDVtCKA60ROKg= Subject key identifier: 9A:31:13:42:DF:7C:EC:5C:4F:F9:09:14:1B:A5:99:4D:89:CF:6B:E0 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584E07008FD18711B413407B9B80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16433 IP address blocks: 204.9.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8f:d1:87:11:b4:13:40:7b:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=1ad7343a-b298-408e-82f2-071add289ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:6b:c6:68:02:2c:55:93:69:ff:09:66:52: 6c:a4:dd:d2:6b:4b:a3:2e:c3:bd:54:2a:a6:fc:4a: 80:f7:c1:6e:d8:a1:44:9f:50:1b:12:0a:e1:e8:16: d4:fe:a7:db:6c:27:1d:73:8c:b7:c1:c7:cf:84:e1: bd:c0:5b:2c:c4:5e:32:f6:9d:53:4c:f8:39:e6:2a: f5:b0:fe:bc:29:71:63:8b:c4:da:8b:3b:05:4d:72: 12:d8:e1:81:b9:88:bb:5b:18:0a:77:c5:69:a8:8b: 2c:40:7f:97:93:eb:e6:37:58:17:a0:fd:bf:d9:7c: fc:ac:04:0d:85:f2:c1:95:e2:59:2a:19:1f:70:41: 4f:40:e0:75:d2:b6:20:fe:93:9a:60:64:56:ec:64: 7a:09:06:59:70:6a:8a:61:4b:51:c7:98:4d:1f:65: 02:25:07:8e:f1:2e:15:35:e8:29:dd:48:b2:6e:f9: 0f:93:f0:63:8c:2f:c0:fd:15:9b:d3:2b:34:8c:f7: 65:5e:a1:ea:44:7f:70:4a:99:f5:b1:27:10:2a:22: b1:e5:1a:44:d0:0d:e8:78:75:e1:ab:92:88:32:e6: c5:a2:25:07:c9:cc:82:64:86:5b:d1:18:d7:fa:96: 91:3f:79:fe:04:62:3f:39:db:69:b2:d6:e1:09:a6: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:31:13:42:DF:7C:EC:5C:4F:F9:09:14:1B:A5:99:4D:89:CF:6B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 204.9.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:73:f3:a0:2d:41:7e:3f:f1:71:1e:0d:5c:59:73:50:32:21: 9f:c5:62:6a:60:5c:69:61:06:c7:db:51:de:62:7d:68:20:2a: 89:49:8b:28:76:87:e8:cc:5a:70:1f:21:90:9c:1f:66:c8:e2: ed:ab:bb:0e:3b:5d:f1:aa:80:04:a2:a3:db:c2:13:92:dc:93: 0e:fd:27:fc:87:b5:0d:2b:01:a7:2a:76:77:e4:89:1d:4f:11: bf:f4:c5:8d:7a:7c:3d:cf:99:ad:30:66:e3:cb:c2:79:b8:8d: dc:6f:97:19:20:6a:7c:35:da:ff:34:8c:ba:ad:a3:2c:62:ee: aa:85:b8:13:d3:60:1e:03:e2:4f:ab:20:89:52:e1:55:3d:d6: 98:7a:d6:a1:f4:d1:22:a9:a0:5e:d7:7c:99:c3:c7:d3:86:b5: eb:c2:20:aa:e5:52:a9:c5:f0:a3:7f:52:b6:c2:c3:ca:b5:8e: 81:79:4e:08:c0:42:d5:21:73:da:55:fb:e5:e5:3c:8e:9f:51: 2a:16:af:39:62:7d:0a:73:7d:72:cb:ce:a6:d3:e6:b6:1d:38: 81:e8:02:84:a9:7c:52:74:a8:88:ff:c4:4a:57:5b:31:62:29: 2a:14:dc:35:6e:0a:f9:38:5f:5e:3a:cd:ed:9c:45:d4:24:cd: 42:7d:e4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAI/RhxG0E0B7m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MWFkNzM0M2EtYjI5OC00MDhlLTgyZjItMDcxYWRkMjg5YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAughrxmgCLFWTaf8JZlJspN3Sa0ujLsO9VCqm /EqA98Fu2KFEn1AbEgrh6BbU/qfbbCcdc4y3wcfPhOG9wFssxF4y9p1TTPg55ir1 sP68KXFji8TaizsFTXIS2OGBuYi7WxgKd8VpqIssQH+Xk+vmN1gXoP2/2Xz8rAQN hfLBleJZKhkfcEFPQOB10rYg/pOaYGRW7GR6CQZZcGqKYUtRx5hNH2UCJQeO8S4V Negp3UiybvkPk/BjjC/A/RWb0ys0jPdlXqHqRH9wSpn1sScQKiKx5RpE0A3oeHXh q5KIMubFoiUHycyCZIZb0RjX+paRP3n+BGI/OdtpstbhCaZlwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoxE0LffOxcT/kJFBulmU2Jz2vgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjA2NjkyZjQtYTZkYy0z ZjE3LWJiZGYtOWIzZTBlZjc2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtz86AtQX4/8XEeDVxZc1AyIZ/FYmpgXGlhBsfbUd5ifWggKolJiyh2 h+jMWnAfIZCcH2bI4u2ruw47XfGqgASio9vCE5Lckw79J/yHtQ0rAacqdnfkiR1P Eb/0xY16fD3Pma0wZuPLwnm4jdxvlxkganw12v80jLqtoyxi7qqFuBPTYB4D4k+r IIlS4VU91ph61qH00SKpoF7XfJnDx9OGtevCIKrlUqnF8KN/UrbCw8q1joF5TgjA QtUhc9pV++XlPI6fUSoWrzlifQpzfXLLzqbT5rYdOIHoAoSpfFJ0qIj/xEpXWzFi KSoU3DVuCvk4X146ze2cRdQkzUJ95MM= -----END CERTIFICATE-----Generated at Sat Jun 13 11:23:43 2026 by rpki-client