$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa File: d60bda9b-5558-3804-a4dc-7ef1d9647130.roa (raw, json) Hash identifier: 9NpI+/uoLqfP7iW6Yex1DD7BIM0FHvqCJjNLJqoo2n4= Subject key identifier: F4:B8:45:0F:A8:35:0F:89:7A:77:6B:F2:97:28:10:53:5D:D6:F2:33 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584DD78B156A9AC7E4DDEB8E0880 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa Signing time: Fri 15 May 2026 13:00:30 +0000 ROA not before: Fri 15 May 2026 13:00:30 +0000 ROA not after: Thu 13 Aug 2026 13:00:30 +0000 asID: 394195 IP address blocks: 209.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d7:8b:15:6a:9a:c7:e4:dd:eb:8e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: May 15 13:00:30 2026 GMT Not After : Aug 13 13:00:30 2026 GMT Subject: CN=da34bd63-0994-4f21-b8d7-cf0dace6d018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:42:c9:a9:5a:ef:ab:65:20:9e:0a:76:f7: bf:ba:36:36:85:b3:ec:c1:cf:cd:94:e2:3a:74:3f: 83:35:ec:e3:d4:46:89:35:2e:f5:5d:f2:0d:ee:52: a1:81:29:ec:0d:9b:96:2a:cd:07:13:b1:83:20:7d: eb:58:17:4f:de:8c:8b:02:89:c5:38:b6:9a:1a:bd: b4:11:aa:de:3d:1e:5c:2f:5c:56:92:e4:11:69:e3: fe:2d:c9:5c:fe:56:4e:0c:a9:57:46:43:ef:49:92: c6:9e:2c:a4:63:0e:87:f9:fc:9d:a3:63:d6:b9:7a: ed:3f:d6:94:d0:5d:38:4f:95:e9:c9:a4:7e:41:79: 3d:df:3b:6a:64:21:81:26:d0:42:20:2a:5d:3a:50: c9:18:ff:41:64:70:72:7e:c3:40:1b:fb:6d:32:2d: 68:ce:a3:fb:84:e3:88:f7:93:ca:98:17:87:9b:06: 26:74:67:fb:1f:59:05:66:97:22:c7:fc:58:bf:38: 63:06:89:06:99:10:9f:65:8f:7d:1d:17:38:ce:27: 37:5a:9f:7f:30:b3:0f:45:4b:28:7d:d4:91:54:05: 94:0a:26:34:79:c8:92:20:8b:24:6d:15:79:4c:56: b1:e6:11:7d:5a:6d:34:32:a6:92:ad:75:42:f0:3c: 56:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:45:0F:A8:35:0F:89:7A:77:6B:F2:97:28:10:53:5D:D6:F2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fe:4a:b3:91:92:7a:56:7a:71:28:e1:df:c2:cf:80:25:86: 7a:f4:47:2b:09:ac:9e:30:45:d6:4c:9c:ad:b3:2a:80:6d:26: 96:63:7b:c4:91:48:a6:71:1f:b3:e8:45:bc:13:da:00:9b:af: 68:2e:e3:a7:33:a7:78:c6:2b:17:ca:6c:42:44:d1:97:87:aa: 61:cd:c2:5e:43:38:de:01:c4:4a:d2:9f:15:2a:ad:1b:6a:6d: 8d:4b:aa:d2:a2:41:aa:ff:74:b5:17:1e:6a:13:d1:a9:e0:41: 6f:e3:09:8a:1b:12:13:dd:3f:dd:83:80:26:5c:59:29:6b:08: 23:12:b1:08:49:8b:f8:fb:fd:32:17:6e:be:ea:03:bf:a7:4e: 24:c6:ca:65:a1:b7:24:69:e8:6f:8d:68:3d:b3:21:26:cd:14: 11:25:ca:56:54:76:19:a8:69:a5:72:8e:f1:41:fb:47:96:2f: 64:1a:65:75:73:0c:e2:b7:5b:a4:b1:3e:1c:06:0a:9f:ff:5c: a0:cf:82:e3:e4:9c:24:42:af:5e:f4:32:3b:9a:b9:12:d2:20: 69:34:5f:f4:61:63:23:fc:03:08:65:e7:86:8b:2f:db:69:02: 5e:75:65:dc:63:9f:df:ad:5a:57:97:49:43:ec:71:ec:66:d2: 48:83:45:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3XixVqmsfk3euOCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZGEzNGJkNjMtMDk5NC00ZjIxLWI4ZDctY2YwZGFjZTZkMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3ZCyala76tlIJ4Kdve/ujY2hbPswc/NlOI6 dD+DNezj1EaJNS71XfIN7lKhgSnsDZuWKs0HE7GDIH3rWBdP3oyLAonFOLaaGr20 EarePR5cL1xWkuQRaeP+Lclc/lZODKlXRkPvSZLGniykYw6H+fydo2PWuXrtP9aU 0F04T5XpyaR+QXk93ztqZCGBJtBCICpdOlDJGP9BZHByfsNAG/ttMi1ozqP7hOOI 95PKmBeHmwYmdGf7H1kFZpcix/xYvzhjBokGmRCfZY99HRc4zic3Wp9/MLMPRUso fdSRVAWUCiY0eciSIIskbRV5TFax5hF9Wm00MqaSrXVC8DxWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS4RQ+oNQ+Jendr8pcoEFNd1vIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZDYwYmRhOWItNTU1OC0z ODA0LWE0ZGMtN2VmMWQ5NjQ3MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/+SrORknpWenEo4d/Cz4Alhnr0RysJrJ4wRdZMnK2zKoBtJpZje8SR SKZxH7PoRbwT2gCbr2gu46czp3jGKxfKbEJE0ZeHqmHNwl5DON4BxErSnxUqrRtq bY1LqtKiQar/dLUXHmoT0angQW/jCYobEhPdP92DgCZcWSlrCCMSsQhJi/j7/TIX br7qA7+nTiTGymWhtyRp6G+NaD2zISbNFBElylZUdhmoaaVyjvFB+0eWL2QaZXVz DOK3W6SxPhwGCp//XKDPguPknCRCr170MjuauRLSIGk0X/RhYyP8Awhl54aLL9tp Al51Zdxjn9+tWleXSUPscexm0kiDRaM= -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:46 2026 by rpki-client