$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa File: 698d328a-2f41-3d33-9f83-c58dfe76a12e.roa (raw, json) Hash identifier: FqNdpPWlapi0R/r6P0b2DSH49Rg5JCzhw17KGBLjN2E= Subject key identifier: B8:A2:9D:59:8F:8D:41:84:C4:39:2B:03:0D:07:74:46:87:AB:DE:B3 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA9910A63920BA389229080 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 209.152.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:91:0a:63:92:0b:a3:89:22:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=87d9a1d3-cef0-4876-9089-c2d1ec39c405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:35:1b:bc:d0:4b:86:03:90:80:de:86:a3:0a: 3b:7f:3f:3c:d6:b1:32:a0:41:8e:2a:f8:7d:1c:ec: 9e:2d:bf:ce:62:1d:a3:ba:4f:14:ca:e5:30:a8:88: 03:82:60:3f:dd:27:fc:51:33:62:8d:60:12:17:ca: 84:f9:21:68:34:e4:22:80:12:82:80:b8:fe:70:88: c2:e2:b2:25:c4:34:98:08:e4:53:49:b4:78:47:10: d2:43:92:33:9f:7c:04:5d:62:de:ea:7e:b1:a4:76: 98:7c:de:0d:a4:d2:fd:b7:bf:9e:12:98:cc:61:0d: 69:f3:a5:76:de:75:ee:71:36:5d:09:b7:a1:14:31: a5:ca:0b:39:d7:1f:1d:8a:36:8c:98:2f:9e:26:20: 59:1a:94:14:47:c1:0d:4e:e7:bf:06:e4:f4:7c:39: cb:74:a9:fe:5c:49:bf:54:aa:bc:89:70:b5:a7:e0: 2e:db:47:9c:d6:d2:e3:f3:38:03:b6:ab:c6:e4:4d: c9:93:65:e7:6c:e4:60:9d:3c:b8:87:7d:87:41:e2: 46:d9:16:de:43:73:55:fa:e1:49:c2:26:86:ae:8f: 16:6f:74:ec:c1:df:f7:8d:a6:89:f2:42:8a:f7:bd: bb:b5:37:b8:e4:b7:16:5a:a5:19:fb:d0:4c:c6:22: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A2:9D:59:8F:8D:41:84:C4:39:2B:03:0D:07:74:46:87:AB:DE:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:07:8f:19:82:c9:ab:90:9a:2d:55:03:41:2e:d1:79:11:da: ea:e6:b7:f6:03:06:f0:d5:07:3d:3a:c3:60:eb:4c:fa:0a:4e: 7b:f8:44:ac:37:84:07:da:4b:54:fc:b2:35:84:da:63:db:4c: 70:be:25:9f:ed:c4:34:3a:fa:48:d0:19:51:09:8e:01:67:d4: 50:42:4b:c9:06:bc:1b:e4:89:56:f8:e0:e7:8d:c4:71:a3:ee: f6:f7:bc:39:59:aa:73:e5:35:40:b0:d5:9d:5a:5f:2a:4c:ca: ba:04:20:89:97:0f:e2:d2:e6:8b:1d:43:66:06:8b:cd:ba:ca: 07:5c:65:4f:80:68:7e:14:28:76:30:d7:32:3a:e1:43:6a:6e: d2:a3:2b:fb:c4:15:bb:12:3f:c8:8e:8e:fe:6e:74:43:6f:64: 1c:68:96:e8:13:dd:34:3c:a3:d5:00:01:2f:b7:f8:36:a1:6a: 74:47:e5:ae:78:55:5f:a1:01:21:3b:2a:c6:3f:5a:ef:52:82: 58:7d:5b:61:ff:26:76:4f:6b:22:18:d6:f5:2a:7a:d2:6d:b3: d6:f2:87:c7:62:4e:ae:38:4a:08:30:bc:98:49:26:0a:d2:20: a1:0a:0a:cc:51:f2:06:13:76:32:f5:c6:2c:cc:c0:b9:eb:e6: 1b:30:58:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZEKY5ILo4kikIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk ODdkOWExZDMtY2VmMC00ODc2LTkwODktYzJkMWVjMzljNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjUbvNBLhgOQgN6Gowo7fz881rEyoEGOKvh9 HOyeLb/OYh2juk8UyuUwqIgDgmA/3Sf8UTNijWASF8qE+SFoNOQigBKCgLj+cIjC 4rIlxDSYCORTSbR4RxDSQ5Izn3wEXWLe6n6xpHaYfN4NpNL9t7+eEpjMYQ1p86V2 3nXucTZdCbehFDGlygs51x8dijaMmC+eJiBZGpQUR8ENTue/BuT0fDnLdKn+XEm/ VKq8iXC1p+Au20ec1tLj8zgDtqvG5E3Jk2XnbORgnTy4h32HQeJG2RbeQ3NV+uFJ wiaGro8Wb3Tswd/3jaaJ8kKK9727tTe45LcWWqUZ+9BMxiICFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiinVmPjUGExDkrAw0HdEaHq96zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvNjk4ZDMyOGEtMmY0MS0z ZDMzLTlmODMtYzU4ZGZlNzZhMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4HjxmCyauQmi1VA0Eu0XkR2urmt/YDBvDVBz06w2DrTPoKTnv4RKw3 hAfaS1T8sjWE2mPbTHC+JZ/txDQ6+kjQGVEJjgFn1FBCS8kGvBvkiVb44OeNxHGj 7vb3vDlZqnPlNUCw1Z1aXypMyroEIImXD+LS5osdQ2YGi826ygdcZU+AaH4UKHYw 1zI64UNqbtKjK/vEFbsSP8iOjv5udENvZBxolugT3TQ8o9UAAS+3+DahanRH5a54 VV+hASE7KsY/Wu9Sglh9W2H/JnZPayIY1vUqetJts9byh8diTq44SggwvJhJJgrS IKEKCsxR8gYTdjL1xizMwLnr5hswWBM= -----END CERTIFICATE-----Generated at Sat Jun 13 05:58:57 2026 by rpki-client