$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa File: 276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json) Hash identifier: raC52cYWvgmPqX3NII2ZLZ0SSb7XraW99JQpHnSw0jg= Subject key identifier: D9:E6:11:7F:C9:53:99:13:08:8E:E5:9B:D9:93:69:BD:86:31:BE:5F Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584E3764785123B912766E45DF80 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 8075 IP address blocks: 134.65.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:78:51:23:b9:12:76:6e:45:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=d876fc38-cb4f-4cd7-a5ac-3b9b88882790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:21:11:17:f5:02:c8:41:ff:1f:13:2e:e4: b3:1c:8f:6b:e9:ed:a0:df:e1:70:bd:6e:77:70:0e: 12:0c:7d:e2:35:2d:3e:84:ec:5c:2e:ac:52:cf:3c: 40:2e:82:5e:89:6a:be:e9:0d:f4:8a:c0:53:4b:33: 69:75:c5:41:b4:1e:d1:49:d3:7f:75:e3:ac:93:a9: d3:b4:e2:33:7e:3d:37:14:e7:55:3a:f7:fc:bd:99: bb:53:18:0f:0d:9d:c1:e7:63:a8:cc:12:b3:3f:42: d0:38:90:38:77:c0:95:7e:20:5e:60:fc:92:77:7e: 57:bf:8e:e4:cd:46:e0:5f:b3:8d:9e:0f:60:4f:56: 78:3c:f9:a8:df:d5:c2:91:ee:da:a6:8e:85:d1:66: 08:71:76:76:6a:4a:a1:c7:79:3f:f9:47:0b:f6:6e: 78:88:f7:d1:4f:67:fa:f5:4a:e2:1f:4f:88:9c:5a: 6c:04:7d:66:bb:6b:80:cf:44:25:f9:86:5d:65:50: 0c:c6:34:03:7b:41:9c:0f:95:ea:75:92:79:96:c5: 5e:7c:69:5e:aa:5a:14:21:1f:68:40:b9:72:7f:fc: 56:37:22:b8:5f:ba:f9:c1:a9:b5:94:a7:43:2a:f8: 6f:02:10:19:55:f8:be:6a:e5:df:d2:2b:fa:5b:ab: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E6:11:7F:C9:53:99:13:08:8E:E5:9B:D9:93:69:BD:86:31:BE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:83:ad:ff:5f:2e:76:93:3e:f6:fe:04:a6:55:03:71:1d:f1: 84:cf:63:1b:8a:f2:83:ab:df:b9:97:44:be:d7:30:3c:a7:f7: e3:4c:b4:4a:3b:3d:29:2c:6f:17:5b:03:ed:ce:41:cc:b2:ec: 7a:67:7f:0d:22:42:6c:00:c7:46:4c:70:b6:66:a7:7d:e2:43: 92:f0:38:0f:45:ba:93:07:bb:32:aa:ec:94:91:92:76:74:da: 07:6a:bb:6f:68:72:3f:fc:94:df:8d:11:6d:3b:14:f7:33:d5: 0c:60:30:be:c0:fb:9d:10:7a:4a:2c:4c:3c:5d:88:28:97:8c: 3b:0e:80:2e:b9:75:fc:0d:0b:39:55:14:0c:35:d1:f5:33:c8: fa:37:23:83:81:21:e7:c0:23:1a:56:a7:4e:ea:69:61:52:78: 09:a3:7f:53:0d:cd:2a:3c:d8:28:87:9d:b1:92:d9:c6:29:81: 7e:2f:ca:82:dc:23:20:79:06:63:ab:58:7f:88:c5:e7:76:2e: 50:c3:fe:f7:ea:7d:3c:66:d5:06:10:bb:f8:5b:ec:b8:ce:75: 55:9b:6d:33:43:9f:ae:47:27:18:43:5c:ad:1e:18:37:bd:a0: f5:6b:95:c3:28:c1:7f:33:09:62:6b:33:67:b1:eb:40:f9:7a: 12:03:5d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZHhRI7kSdm5F34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDg3NmZjMzgtY2I0Zi00Y2Q3LWE1YWMtM2I5Yjg4ODgyNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+MhERf1AshB/x8TLuSzHI9r6e2g3+FwvW53 cA4SDH3iNS0+hOxcLqxSzzxALoJeiWq+6Q30isBTSzNpdcVBtB7RSdN/deOsk6nT tOIzfj03FOdVOvf8vZm7UxgPDZ3B52OozBKzP0LQOJA4d8CVfiBeYPySd35Xv47k zUbgX7ONng9gT1Z4PPmo39XCke7apo6F0WYIcXZ2akqhx3k/+UcL9m54iPfRT2f6 9UriH0+InFpsBH1mu2uAz0Ql+YZdZVAMxjQDe0GcD5XqdZJ5lsVefGleqloUIR9o QLlyf/xWNyK4X7r5wam1lKdDKvhvAhAZVfi+auXf0iv6W6sb+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnmEX/JU5kTCI7lm9mTab2GMb5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvMjc2YzFlMzYtNDhmYS0z ZGIzLWE0YjAtZWFmNDcxZDVhOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWDrf9fLnaTPvb+BKZVA3Ed8YTPYxuK8oOr37mXRL7XMDyn9+NMtEo7 PSksbxdbA+3OQcyy7Hpnfw0iQmwAx0ZMcLZmp33iQ5LwOA9FupMHuzKq7JSRknZ0 2gdqu29ocj/8lN+NEW07FPcz1QxgML7A+50QekosTDxdiCiXjDsOgC65dfwNCzlV FAw10fUzyPo3I4OBIefAIxpWp07qaWFSeAmjf1MNzSo82CiHnbGS2cYpgX4vyoLc IyB5BmOrWH+Ixed2LlDD/vfqfTxm1QYQu/hb7LjOdVWbbTNDn65HJxhDXK0eGDe9 oPVrlcMowX8zCWJrM2ex60D5ehIDXdA= -----END CERTIFICATE-----Generated at Tue Jul 21 04:53:24 2026 by rpki-client