$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccb02a8b-0b62-345a-bf75-99edabab9104.roa File: ccb02a8b-0b62-345a-bf75-99edabab9104.roa (raw, json) Hash identifier: cYiQZK54g5E4T0q2guVSEth8Sxqj8lE+aTwZ0/tA9LE= Subject key identifier: 41:23:5C:B6:34:CD:15:25:E8:47:54:6A:A7:D4:CE:FB:A2:4F:C1:FF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E17498C16CE29DAD8B5E4BB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccb02a8b-0b62-345a-bf75-99edabab9104.roa Signing time: Sun 07 Jun 2026 09:00:13 +0000 ROA not before: Sun 07 Jun 2026 09:00:13 +0000 ROA not after: Sat 05 Sep 2026 09:00:13 +0000 asID: 3257 IP address blocks: 209.87.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:17:49:8c:16:ce:29:da:d8:b5:e4:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 7 09:00:13 2026 GMT Not After : Sep 5 09:00:13 2026 GMT Subject: CN=bf7dcb83-5e76-4434-abca-5f3e6475cec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:b2:47:44:c3:b6:0e:59:98:ff:77:d9:a9: 6d:04:e2:4c:6b:c2:74:58:b1:21:25:c2:30:eb:71: 24:3d:65:a1:98:29:37:61:ab:4a:1b:a9:49:34:34: 46:e8:cd:ff:33:eb:8a:ce:d5:be:5d:94:05:21:f5: 7d:c1:0f:56:55:0b:7a:2e:f4:34:e7:63:11:bb:83: 10:65:6d:c9:8e:7e:50:55:da:52:47:e3:d3:48:43: b8:26:56:38:fd:35:e7:9c:a6:3f:fb:a5:b4:97:26: 52:bf:de:06:bb:b1:23:7b:4c:3a:21:ba:74:4e:90: 74:c2:5c:df:a9:88:d2:8b:f1:60:34:1d:18:b6:ba: 55:48:75:e9:4e:05:bf:83:59:43:9d:f2:af:95:35: 9d:ef:7a:f8:28:ef:0d:18:99:77:2c:72:8e:45:b2: 5d:fc:7e:ce:ed:cc:36:c0:b3:78:44:97:1c:92:2d: 82:f0:af:12:42:25:8f:bf:10:eb:fe:2c:9a:bc:a3: fa:2b:ba:93:69:42:ef:d5:d1:9f:af:05:80:a5:49: aa:f4:a6:c7:17:15:fa:c5:06:37:b3:a6:0f:a8:41: f7:be:77:e9:d2:84:d3:d1:f5:34:44:d5:63:f2:52: a8:01:fd:82:28:1c:fd:c8:8d:54:8c:df:77:c2:f2: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:5C:B6:34:CD:15:25:E8:47:54:6A:A7:D4:CE:FB:A2:4F:C1:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccb02a8b-0b62-345a-bf75-99edabab9104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.87.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dc:ee:d7:b5:ec:ae:71:f0:53:d7:bb:9b:eb:9b:5b:39:c5: 61:ed:09:e0:df:8f:9d:4d:73:cc:c2:9b:2f:f6:a4:56:2c:94: 9e:0c:49:58:7d:c1:0b:bb:39:1a:aa:a8:ea:aa:06:0e:51:78: 3d:f9:a4:38:ee:3d:d0:3c:d4:9b:0b:73:eb:c9:4a:52:2b:fa: 43:53:02:b2:b5:13:36:7f:0f:9e:29:31:cb:c5:4d:3a:ba:71: 54:8a:a0:ec:06:78:a5:6a:fc:0d:de:8a:5c:ed:de:ca:1c:97: 8c:34:ca:4d:d8:c5:96:9d:0c:e3:69:ac:0e:95:cf:ff:09:30: 1c:43:ee:4f:c7:23:cd:6d:c7:97:8d:17:71:6f:1b:dc:44:38: 12:c8:2a:e0:50:23:11:01:bc:3b:f3:e3:d0:17:0e:2f:8a:87: 8b:77:7f:b2:cc:71:7a:6c:db:69:26:38:54:35:09:7f:8c:d2: 28:bb:18:9a:55:80:33:41:1a:58:91:9f:a1:eb:83:d4:f4:d7: 03:38:b5:ce:8d:f5:ac:40:cf:1c:06:c1:7f:9a:d1:d4:c0:3f: fb:74:5b:3a:cb:79:77:27:c3:5f:12:0b:d9:22:f5:72:25:8f: 49:b3:49:a5:77:64:7c:56:2f:3b:b3:b7:5e:35:a6:bc:63:48: 65:32:4b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4XSYwWzina2LXkuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYwNzA5MDAxM1oXDTI2MDkwNTA5MDAxM1owLzEtMCsGA1UEAxMk YmY3ZGNiODMtNWU3Ni00NDM0LWFiY2EtNWYzZTY0NzVjZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovWyR0TDtg5ZmP932altBOJMa8J0WLEhJcIw 63EkPWWhmCk3YatKG6lJNDRG6M3/M+uKztW+XZQFIfV9wQ9WVQt6LvQ052MRu4MQ ZW3Jjn5QVdpSR+PTSEO4JlY4/TXnnKY/+6W0lyZSv94Gu7Eje0w6Ibp0TpB0wlzf qYjSi/FgNB0YtrpVSHXpTgW/g1lDnfKvlTWd73r4KO8NGJl3LHKORbJd/H7O7cw2 wLN4RJccki2C8K8SQiWPvxDr/iyavKP6K7qTaULv1dGfrwWApUmq9KbHFxX6xQY3 s6YPqEH3vnfp0oTT0fU0RNVj8lKoAf2CKBz9yI1UjN93wvI9dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEjXLY0zRUl6EdUaqfUzvuiT8H/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2NiMDJhOGItMGI2Mi0z NDVhLWJmNzUtOTllZGFiYWI5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfc7te17K5x8FPXu5vrm1s5xWHtCeDfj51Nc8zCmy/2pFYslJ4MSVh9 wQu7ORqqqOqqBg5ReD35pDjuPdA81JsLc+vJSlIr+kNTArK1EzZ/D54pMcvFTTq6 cVSKoOwGeKVq/A3eilzt3socl4w0yk3YxZadDONprA6Vz/8JMBxD7k/HI81tx5eN F3FvG9xEOBLIKuBQIxEBvDvz49AXDi+Kh4t3f7LMcXps22kmOFQ1CX+M0ii7GJpV gDNBGliRn6Hrg9T01wM4tc6N9axAzxwGwX+a0dTAP/t0WzrLeXcnw18SC9ki9XIl j0mzSaV3ZHxWLzuzt141prxjSGUyS3E= -----END CERTIFICATE-----Generated at Sat Jun 13 22:36:37 2026 by rpki-client