$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa File: e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa (raw, json) Hash identifier: VYiQl5+BKWBmdmz5RXDtEQarhF6Q7DmhxgJVrJ2nLi0= Subject key identifier: 99:9F:A3:96:96:CB:0B:64:4A:0D:22:E6:46:57:B5:8F:4B:CC:E3:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E46BF2866F0DCDA0016FB6780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 32787 IP address blocks: 209.200.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:28:66:f0:dc:da:00:16:fb:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=fbbb2a59-ddf7-4dc0-b4a2-73f760b1d8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:9a:8e:2d:e9:02:3e:bc:05:f9:05:f8:7a: 75:84:e6:69:11:46:97:f7:35:f4:db:ee:b1:3c:79: ea:5b:8c:f4:b9:86:7c:50:f5:5a:46:54:07:08:0d: 37:9d:b9:e0:64:70:46:19:e6:2e:76:b1:5a:14:01: f7:aa:09:93:53:61:02:c7:b1:61:37:1d:f9:86:e4: 24:26:ad:78:fc:11:e0:ec:41:a6:71:95:a1:53:77: c8:b6:0c:b7:b8:30:4f:1c:ed:c6:05:84:4a:a5:5c: f3:7d:29:46:0e:75:44:6b:74:ee:f9:57:b7:2e:3b: 1d:a8:0b:1d:44:82:b1:47:96:97:56:0a:4a:ec:85: 90:8f:e6:9a:63:e1:7f:15:f6:12:3b:2c:59:37:0d: 30:b2:a2:50:8f:af:fe:84:67:3a:31:e5:f0:2a:14: 02:98:f8:34:8c:64:11:fc:5a:b0:b4:a3:1d:eb:d2: e3:ce:64:f7:22:44:6f:13:dd:75:9f:fa:8d:db:83: 9e:3a:78:72:e5:a7:0a:32:7e:8b:d5:6f:c8:5c:8e: 43:a3:7e:5f:03:e7:c3:7a:11:09:33:ca:70:32:53: 88:51:31:81:ea:7d:e2:24:e4:db:2f:b7:47:69:17: 40:a0:3c:0e:f6:fa:48:f3:ad:c2:3b:77:df:68:ff: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9F:A3:96:96:CB:0B:64:4A:0D:22:E6:46:57:B5:8F:4B:CC:E3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f0:77:f1:90:dd:1b:62:95:11:3b:f5:92:02:bb:2d:c6:d1: 94:96:fd:58:92:74:1c:7d:14:2c:84:66:43:53:ef:bb:a9:23: 97:4d:dd:59:41:e5:fb:1b:46:14:b8:25:2e:02:64:7e:d7:b1: 1c:a3:6b:0a:2c:ab:6a:4c:84:a9:d1:49:3d:c7:8f:06:1a:2f: e1:fd:87:74:22:0d:ba:8c:47:28:df:e4:e8:a2:a6:8f:e4:37: c3:63:3d:c1:d1:c3:80:9e:1f:65:24:96:f6:35:56:ae:a0:e7: d1:77:a4:a9:94:45:1d:91:68:e5:fc:a0:67:39:c7:8f:15:eb: 6f:08:8f:22:16:9a:6c:67:ca:34:86:74:ee:11:38:f5:35:5f: a3:75:f2:e2:bf:a9:2f:a0:f2:a0:0a:2f:a8:7e:0b:88:d3:41: 4f:29:f5:ea:e7:10:39:f4:8a:df:4a:5d:11:78:4c:4d:10:aa: 3b:b4:c5:3f:17:5b:eb:35:9d:07:c5:0f:76:8d:9d:83:23:89: f0:47:97:0b:a6:28:34:71:3e:03:11:79:50:34:d9:43:34:36: 82:bd:c0:a0:be:db:36:f7:33:99:31:33:0a:05:59:ff:39:31: 76:50:79:a7:20:fa:18:7e:42:56:a9:6e:f3:f3:75:f8:38:54: a5:63:4b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Gvyhm8NzaABb7Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZmJiYjJhNTktZGRmNy00ZGMwLWI0YTItNzNmNzYwYjFkOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn6aji3pAj68BfkF+Hp1hOZpEUaX9zX02+6x PHnqW4z0uYZ8UPVaRlQHCA03nbngZHBGGeYudrFaFAH3qgmTU2ECx7FhNx35huQk Jq14/BHg7EGmcZWhU3fItgy3uDBPHO3GBYRKpVzzfSlGDnVEa3Tu+Ve3LjsdqAsd RIKxR5aXVgpK7IWQj+aaY+F/FfYSOyxZNw0wsqJQj6/+hGc6MeXwKhQCmPg0jGQR /FqwtKMd69LjzmT3IkRvE911n/qN24OeOnhy5acKMn6L1W/IXI5Do35fA+fDehEJ M8pwMlOIUTGB6n3iJOTbL7dHaRdAoDwO9vpI863CO3ffaP81YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmfo5aWywtkSg0i5kZXtY9LzONaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTBkY2JkMjAtMTMyOC0z ZjZlLTgwNmYtYjZlNjY3NGY4MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHwd/GQ3RtilRE79ZICuy3G0ZSW/ViSdBx9FCyEZkNT77upI5dN3VlB 5fsbRhS4JS4CZH7XsRyjawosq2pMhKnRST3HjwYaL+H9h3QiDbqMRyjf5Oiipo/k N8NjPcHRw4CeH2UklvY1Vq6g59F3pKmURR2RaOX8oGc5x48V628IjyIWmmxnyjSG dO4ROPU1X6N18uK/qS+g8qAKL6h+C4jTQU8p9ernEDn0it9KXRF4TE0Qqju0xT8X W+s1nQfFD3aNnYMjifBHlwumKDRxPgMReVA02UM0NoK9wKC+2zb3M5kxMwoFWf85 MXZQeacg+hh+QlapbvPzdfg4VKVjSxA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:54:16 2026 by rpki-client