$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fccd8586-3fec-358a-9417-c567b75c4c4f.roa File: fccd8586-3fec-358a-9417-c567b75c4c4f.roa (raw, json) Hash identifier: JqZKOVjfGmaPdRSvRURj39KFSdKTDDahckyDLQvszgo= Subject key identifier: C2:D9:79:4C:BD:29:1F:5B:E7:B1:67:25:E1:D2:5C:91:65:91:96:3C Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA9916689B7E66F90B42700 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fccd8586-3fec-358a-9417-c567b75c4c4f.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 192.190.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:91:66:89:b7:e6:6f:90:b4:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=696b3b6b-2901-4dfa-a035-f54e16bcecbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:09:a7:18:1f:a9:01:54:9b:c3:3d:7c:6a: b9:9f:15:28:88:75:09:e2:4e:93:94:fb:1e:46:95: c0:45:a4:9c:24:c7:ea:f1:39:79:4a:fa:ab:29:41: ef:cb:c1:35:4d:47:c1:ff:50:82:ff:53:db:2a:e7: 9a:27:9e:3c:83:24:44:b9:6a:db:5d:db:53:11:17: c8:6d:8f:ba:fb:36:a7:8c:c7:8d:33:5e:99:dc:ae: 15:36:ea:25:b0:c7:41:02:ec:2b:28:4a:be:c9:92: 2f:28:6e:45:bc:61:38:d2:d6:fe:a5:0a:0e:40:2a: c4:74:57:3f:21:69:86:85:f5:99:09:16:00:5b:dc: f1:fd:13:c7:9b:46:25:50:a6:7b:11:b9:d9:02:2a: 45:f1:34:8f:b9:64:9c:23:33:d7:ec:8c:89:32:53: 03:9d:d3:e6:6c:fc:c4:76:f3:51:88:aa:2d:8f:db: 65:29:1c:30:1e:75:b4:cf:b3:6a:9d:a6:89:3f:e0: fb:f1:58:c4:e8:ee:4e:4e:4b:f4:6b:c5:c3:3b:c1: ca:c9:4a:ef:c5:02:60:1d:c0:3b:2a:2e:df:70:a6: cc:53:b9:7d:25:db:46:30:b6:72:76:3b:c9:8d:41: fe:5e:a4:e9:8e:dd:6e:14:94:a0:35:25:a9:f9:41: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:79:4C:BD:29:1F:5B:E7:B1:67:25:E1:D2:5C:91:65:91:96:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/fccd8586-3fec-358a-9417-c567b75c4c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 192.190.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bf:c7:07:dc:ad:3b:7c:b6:a6:b6:72:36:54:14:de:c4:7e: 7c:86:d1:ff:36:b5:8e:15:9b:07:00:79:89:d9:b0:32:8f:e3: c7:9c:b0:79:4a:13:68:9e:86:07:d3:78:74:26:9a:36:26:0e: 48:1c:b3:87:d6:09:19:82:30:3c:50:77:db:be:87:15:2d:e5: 2d:68:f9:f6:7e:b3:47:72:56:41:76:c4:7d:9b:ab:e3:6f:a4: 1b:11:2f:f8:aa:90:80:bd:4f:ab:40:b3:75:3c:91:4f:fe:46: df:5a:8d:cd:dc:4e:76:81:2c:80:fa:c0:d8:45:a7:7f:d0:11: 16:7d:bf:f7:9f:e0:be:63:b4:eb:24:72:88:85:94:a3:ae:a0: 02:fa:45:36:2f:05:ed:be:40:d6:0a:bd:2d:5a:42:aa:00:69: 1b:8a:1a:ee:a7:b9:55:8a:82:36:1f:b1:1d:a1:d0:19:94:38: 6e:bd:f0:11:52:b0:37:07:4d:33:1d:36:49:08:86:e8:d5:6b: 54:2f:23:37:c1:15:0d:19:77:2a:a2:f7:ea:e5:ef:59:32:51: 50:de:85:ac:6f:c7:cb:ab:55:4b:c6:70:a7:d8:9d:c0:a7:eb: c9:8f:5e:35:c7:a5:94:42:90:fa:a5:0c:07:44:5d:23:2e:d0: ab:d3:05:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZFmibfmb5C0JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk Njk2YjNiNmItMjkwMS00ZGZhLWEwMzUtZjU0ZTE2YmNlY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSUJpxgfqQFUm8M9fGq5nxUoiHUJ4k6TlPse RpXARaScJMfq8Tl5SvqrKUHvy8E1TUfB/1CC/1PbKueaJ548gyREuWrbXdtTERfI bY+6+zanjMeNM16Z3K4VNuolsMdBAuwrKEq+yZIvKG5FvGE40tb+pQoOQCrEdFc/ IWmGhfWZCRYAW9zx/RPHm0YlUKZ7EbnZAipF8TSPuWScIzPX7IyJMlMDndPmbPzE dvNRiKotj9tlKRwwHnW0z7NqnaaJP+D78VjE6O5OTkv0a8XDO8HKyUrvxQJgHcA7 Ki7fcKbMU7l9JdtGMLZydjvJjUH+XqTpjt1uFJSgNSWp+UE5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLZeUy9KR9b57FnJeHSXJFlkZY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZmNjZDg1ODYtM2ZlYy0z NThhLTk0MTctYzU2N2I3NWM0YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwL6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa/xwfcrTt8tqa2cjZUFN7EfnyG0f82tY4VmwcAeYnZsDKP48ecsHlK E2iehgfTeHQmmjYmDkgcs4fWCRmCMDxQd9u+hxUt5S1o+fZ+s0dyVkF2xH2bq+Nv pBsRL/iqkIC9T6tAs3U8kU/+Rt9ajc3cTnaBLID6wNhFp3/QERZ9v/ef4L5jtOsk coiFlKOuoAL6RTYvBe2+QNYKvS1aQqoAaRuKGu6nuVWKgjYfsR2h0BmUOG698BFS sDcHTTMdNkkIhujVa1QvIzfBFQ0Zdyqi9+rl71kyUVDehaxvx8urVUvGcKfYncCn 68mPXjXHpZRCkPqlDAdEXSMu0KvTBQM= -----END CERTIFICATE-----Generated at Sat Jun 13 09:42:13 2026 by rpki-client