$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2b961950-db61-32a4-a94c-3c586427a692.roa File: 2b961950-db61-32a4-a94c-3c586427a692.roa (raw, json) Hash identifier: iml8qQyYnPxZcdzjs4jIt81olJ8M5U3GaJoKuiKspAc= Subject key identifier: CA:1B:80:0F:05:C6:6D:47:4B:14:B9:C6:51:63:02:6E:C8:D6:84:4E Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA99258D603BA1514DF8880 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2b961950-db61-32a4-a94c-3c586427a692.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 209.152.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:92:58:d6:03:ba:15:14:df:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=9b2054b5-978b-4733-a9d2-737668a3712f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:18:90:79:05:b1:e8:4a:87:e2:35:36:15:6d: da:dc:11:9e:3d:9a:f9:68:4b:8d:01:50:0a:fd:99: ba:9c:d1:e3:14:d2:04:11:fe:04:4b:fb:d1:25:4e: 0c:d5:e8:bb:ef:cd:af:ab:df:9a:4a:be:b2:2b:fb: c9:fe:0e:5e:3e:35:ee:0f:67:3b:b4:1a:61:d6:fb: 83:fd:11:42:a9:c1:98:b7:36:b0:e2:bd:db:5d:2f: 45:b0:36:29:f4:3f:0a:97:31:e1:da:90:47:bf:93: eb:33:e7:bc:ff:fc:c9:c3:fa:ff:e1:99:a8:5d:bf: c2:e0:54:2d:a5:db:38:93:1a:d4:2e:88:0c:d9:4b: 72:e3:ea:1c:36:07:7f:56:08:4a:3f:20:2b:9f:21: 43:61:61:fe:17:66:71:eb:e0:81:76:29:71:65:b8: ba:c8:61:b1:16:ee:0f:6f:5c:be:54:71:7c:1f:d1: 35:b4:82:41:8a:b4:71:72:56:3c:09:f2:65:d9:25: a6:76:4b:63:92:8b:30:53:03:f0:81:a4:d2:1a:97: 71:85:4b:f8:71:a7:a2:db:84:2b:9b:95:66:92:41: 0e:0f:26:0d:e9:73:f5:3a:0e:25:80:2c:87:00:4f: b4:4e:bb:1a:67:08:52:e2:ce:43:67:01:a3:3a:57: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1B:80:0F:05:C6:6D:47:4B:14:B9:C6:51:63:02:6E:C8:D6:84:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2b961950-db61-32a4-a94c-3c586427a692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f2:67:23:e7:ba:aa:71:38:c5:0a:75:49:9a:7e:f4:c6:99: b2:9c:0e:ec:99:f2:57:b6:11:49:31:9f:6e:ca:b0:94:ba:3f: 13:e7:2d:cc:c0:cf:05:92:f5:d1:53:70:f6:72:3d:a9:01:3b: ea:8a:37:aa:f3:f0:b4:e8:46:d0:e4:cc:a5:65:56:6f:64:6b: c1:31:34:62:f6:b6:e4:9a:b4:a9:52:bc:37:15:05:31:49:8c: a6:24:68:94:9d:05:63:47:13:0b:74:1e:28:cb:28:bd:9b:2f: df:e1:2a:7f:c7:46:0e:19:64:f6:2d:11:19:42:69:82:2a:92: ef:77:4a:fe:b6:f5:7b:a1:cd:d2:34:e4:dd:24:84:08:e5:a9: c8:9b:3b:93:b0:26:77:2e:7a:3a:fd:21:53:16:da:1c:62:73: 69:fa:fd:07:49:58:ca:2b:e1:b5:9e:81:4a:98:62:ae:03:9c: 7c:90:d8:fc:13:52:75:8f:c3:0a:86:b8:18:c3:9c:a3:8c:9f: 86:2f:58:b2:43:88:7e:15:a8:be:ac:99:3b:0b:66:44:5d:bf: ce:91:d3:b2:3a:e9:d0:d9:5c:a1:f3:8b:c8:9e:69:94:37:05: 15:73:fb:f9:b1:07:36:39:03:f5:51:34:b0:cf:72:cd:bc:56: 73:cf:af:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZJY1gO6FRTfiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk OWIyMDU0YjUtOTc4Yi00NzMzLWE5ZDItNzM3NjY4YTM3MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRiQeQWx6EqH4jU2FW3a3BGePZr5aEuNAVAK /Zm6nNHjFNIEEf4ES/vRJU4M1ei7782vq9+aSr6yK/vJ/g5ePjXuD2c7tBph1vuD /RFCqcGYtzaw4r3bXS9FsDYp9D8KlzHh2pBHv5PrM+e8//zJw/r/4ZmoXb/C4FQt pds4kxrULogM2Uty4+ocNgd/VghKPyArnyFDYWH+F2Zx6+CBdilxZbi6yGGxFu4P b1y+VHF8H9E1tIJBirRxclY8CfJl2SWmdktjkoswUwPwgaTSGpdxhUv4caei24Qr m5VmkkEODyYN6XP1Og4lgCyHAE+0TrsaZwhS4s5DZwGjOlflTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMobgA8Fxm1HSxS5xlFjAm7I1oROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmI5NjE5NTAtZGI2MS0z MmE0LWE5NGMtM2M1ODY0MjdhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbyZyPnuqpxOMUKdUmafvTGmbKcDuyZ8le2EUkxn27KsJS6PxPnLczA zwWS9dFTcPZyPakBO+qKN6rz8LToRtDkzKVlVm9ka8ExNGL2tuSatKlSvDcVBTFJ jKYkaJSdBWNHEwt0HijLKL2bL9/hKn/HRg4ZZPYtERlCaYIqku93Sv629XuhzdI0 5N0khAjlqcibO5OwJncuejr9IVMW2hxic2n6/QdJWMor4bWegUqYYq4DnHyQ2PwT UnWPwwqGuBjDnKOMn4YvWLJDiH4VqL6smTsLZkRdv86R07I66dDZXKHzi8ieaZQ3 BRVz+/mxBzY5A/VRNLDPcs28VnPPr94= -----END CERTIFICATE-----Generated at Sat Jun 13 22:02:26 2026 by rpki-client