$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa File: d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa (raw, json) Hash identifier: dTH0M92phwMtlyb+PjOeKnjd6yLqLJrBioWjE37FiMw= Subject key identifier: CD:33:03:5B:7A:B9:A2:51:4C:B6:1A:2F:6B:A6:73:A9:BA:7A:AA:47 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA993616A86E68DB7EE6000 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 209.152.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:93:61:6a:86:e6:8d:b7:ee:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=10dc2912-ecf5-4c5a-a2b1-250a5740dabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:0e:03:1f:6b:c6:68:3b:55:02:21:d2:ea: eb:2a:42:92:46:02:46:10:be:0e:54:e8:61:f5:95: 32:1f:b9:ff:60:58:f9:ba:be:14:0c:d1:0f:a3:b1: bd:a1:ad:92:eb:e0:ec:0c:93:0d:94:8a:6d:45:cd: 80:af:fe:0f:8c:95:37:37:2b:f4:a3:2f:48:54:fd: 19:47:e7:e1:cd:6b:08:f7:30:12:12:0e:64:9f:e9: bf:12:ab:a7:b7:2a:28:58:5a:99:9e:e7:d7:62:49: fa:0e:61:b5:65:27:b0:f5:c0:0b:70:db:93:6a:8f: 20:8f:ed:75:6c:ca:6b:25:8d:65:5a:4b:98:13:58: 64:39:9e:8b:0f:91:ba:09:9f:05:ff:df:67:e0:41: 11:82:ca:ff:7e:66:0d:74:c5:9a:4e:21:6b:99:a1: 20:56:4a:f1:5d:d9:15:ab:37:3d:49:fe:4f:0d:ae: 01:80:e1:18:4c:94:24:e0:dd:9a:63:81:5b:a0:b4: 95:bd:ba:b6:9a:5e:35:f8:09:47:0a:64:85:e7:49: cb:16:c9:14:2b:11:ad:b8:fe:cb:f3:be:4d:c7:b6: b6:08:6b:a6:35:01:d2:a4:9d:30:36:20:58:d2:8d: ba:67:1d:c2:ba:37:5d:93:29:2e:77:ae:ca:ae:2e: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:33:03:5B:7A:B9:A2:51:4C:B6:1A:2F:6B:A6:73:A9:BA:7A:AA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e8:1d:dc:ad:b5:55:93:78:8c:4b:59:85:fc:78:b0:86:f7: 17:eb:28:8d:4a:ef:ec:4e:36:98:e0:51:7e:53:ee:0f:3e:09: f0:2b:f9:27:ff:93:08:3d:7e:15:1c:f5:7f:98:fb:73:8e:99: f4:e8:39:6c:a2:28:91:21:c4:c9:cf:ca:4a:3b:2e:70:dd:8c: d5:32:32:1a:77:7c:8c:65:15:77:9d:a2:48:4f:0d:43:8e:02: 88:51:59:8d:0b:d2:57:1e:4c:10:9f:ab:b6:58:02:6e:68:3f: ac:aa:2c:33:f5:b8:a2:c3:d5:31:1f:f2:12:4f:23:19:d7:d9: 2c:b2:3d:2d:e0:54:74:da:5c:21:e7:18:fa:5d:07:cf:df:7c: b6:5d:03:99:82:4e:da:0c:ab:5d:50:75:2d:84:15:32:49:4f: ef:c4:fe:2b:a8:04:b7:05:69:03:fc:2c:17:40:60:9a:b1:0c: be:ac:01:ee:f2:6d:bb:89:24:b1:15:ce:30:e6:82:13:b4:22: 26:ca:e9:f4:61:33:03:1e:fb:fb:70:b3:06:3d:33:1e:07:e1: 9f:ee:3c:b1:70:ff:a3:7d:de:de:03:02:45:e4:e4:39:09:3a: f1:02:0e:c0:0c:e6:7d:15:a9:07:89:1b:39:db:1b:14:8e:4e: 81:9c:b2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZNhaobmjbfuYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk MTBkYzI5MTItZWNmNS00YzVhLWEyYjEtMjUwYTU3NDBkYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0OAx9rxmg7VQIh0urrKkKSRgJGEL4OVOhh 9ZUyH7n/YFj5ur4UDNEPo7G9oa2S6+DsDJMNlIptRc2Ar/4PjJU3Nyv0oy9IVP0Z R+fhzWsI9zASEg5kn+m/EquntyooWFqZnufXYkn6DmG1ZSew9cALcNuTao8gj+11 bMprJY1lWkuYE1hkOZ6LD5G6CZ8F/99n4EERgsr/fmYNdMWaTiFrmaEgVkrxXdkV qzc9Sf5PDa4BgOEYTJQk4N2aY4FboLSVvbq2ml41+AlHCmSF50nLFskUKxGtuP7L 875Nx7a2CGumNQHSpJ0wNiBY0o26Zx3Cujddkykud67Kri71uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0zA1t6uaJRTLYaL2umc6m6eqpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZDhmNzRlYTQtZDZjNy0z Y2UxLWJkNDEtNGJkNmNlYjg4MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGroHdyttVWTeIxLWYX8eLCG9xfrKI1K7+xONpjgUX5T7g8+CfAr+Sf/ kwg9fhUc9X+Y+3OOmfToOWyiKJEhxMnPyko7LnDdjNUyMhp3fIxlFXedokhPDUOO AohRWY0L0lceTBCfq7ZYAm5oP6yqLDP1uKLD1TEf8hJPIxnX2SyyPS3gVHTaXCHn GPpdB8/ffLZdA5mCTtoMq11QdS2EFTJJT+/E/iuoBLcFaQP8LBdAYJqxDL6sAe7y bbuJJLEVzjDmghO0IibK6fRhMwMe+/twswY9Mx4H4Z/uPLFw/6N93t4DAkXk5DkJ OvECDsAM5n0VqQeJGznbGxSOToGcsgA= -----END CERTIFICATE-----Generated at Sat Jun 13 08:42:06 2026 by rpki-client